Privacy Policy

1. General Provisions
1.1. This Privacy Policy (hereinafter referred to as the "Policy") defines the procedure for collecting, storing, processing, and protecting the personal data of users of the zenithfitness.ge website, the Zenith Boutique Studio mobile app, and other Zenithfitness online services (hereinafter referred to as the "Services").
1.2. The personal data operator is:
Individual Entrepreneur Tatiana Shamova
ID: 302267776
Address: Georgia, Tbilisi, Vake District, 5 Mtskheta Street
Email: wellnesszenith@gmail.com
Phone: +995 980 175 75
 
1.3. The Operator processes personal data in accordance withLaw of Georgia on Personal Data Protection.
1.4. By using the Services, the user acknowledges that they have read this Policy and agree to its terms. If the user disagrees with the terms of the Policy, they must stop using the Services.
2. Terms and Legal Basis for Processing
2.1. "Personal data" — any information related to an identified or identifiable individual.
2.2. "Personal data processing" — any action (operation) performed with personal data, including collection, recording, systematization, storage, modification, use, transfer, depersonalization, blocking, deletion, and destruction.
2.3. The Operator processes personal data on the following legal grounds:
• user consent;
• necessity to conclude and perform a contract (provision of studio services, recording, feedback); 
• fulfillment of obligations stipulated by Georgian legislation; 
• the Operator's legitimate interests, subject to the protection of the user's rights and freedoms (ensuring security, improving service, protecting rights).
3. What data do we collect?
3.1. Data provided by the user:
• First name, last name; 
• Phone number; Email address (if available); 
• Data provided during account registration or when filling out an application/feedback form;
• Other data voluntarily provided by the user during interaction with the Services.
3.2. Technical data:
• IP address;
• Cookies and similar technologies;
• Browser, device, and operating system information;
• Information about pages visited, actions within the Services, and referral sources.
3.3. If necessary, the Operator may request additionalinformation if this is necessary to provide services or comply with legal requirements. In such cases, the user will be informed of the purpose and legal basis for processing.
4. Purposes of Data Processing
Personal data is used to:
• process requests for studio services, registration for training sessions, treatments, and events; 
• communicate with the user (calls, SMS, instant messaging, email newsletters);
• provide information about services, schedules, promotions, and news;
• maintain the user's personal account in the app;
• improve service quality, analyse, and optimize the Services; 
• ensure the security of the Services and prevent fraud; 
• comply with legal requirements and respond to requests from authorized bodies.
5. Photo and Video Materials
5.1. Photo and video recording may be conducted on the Zenithfitness studio premises:
• for security and access control purposes; 
• to create marketing and informational materials;
• for publication on the studio's website, app, and social media.
5.2. The use of materials containing a user's recognizable image for marketing purposes is subject to the user's consent, which may be verbal or written, via a questionnaire, consent form, or other method accepted by the studio.
5.3. The user has the right to revoke consent to the use of their image at any time by contacting the Operator using the contact information provided. In this case, the Operator will cease further use of the image, except in cases where removal is impossible or disproportionately difficult (e.g., previously published printed materials or archived publications).
5.4. Photo and video materials featuring minors may only be used with the consent of the child's legal guardian.
6. Transfer of Data to Third Parties
6.1. Personal data is not transferred to third parties, except in cases:
• as provided for by Georgian legislation; 
• to fulfill obligations to the user (registration, payment, feedback); 
• to protect the rights and legitimate interests of the Operator, subject to the user's rights being respected.
6.2. To ensure the operation of the Services, the Operator may engage third-party processors (providers of IT service, CRM systems, mailing services, payment providers, etc.), who process data on the Operator's behalf under contracts and are obligated to ensure the confidentiality and protection of personal data.
6.3. Data is transferred to third parties only to the extent necessary to achieve the specific processing purpose and in accordance with applicable law.
7. Data Storage and Protection
7.1. The Operator takes the necessary organizational and technical measures to protect personal data from unauthorized access, modification, disclosure, destruction, and other illegal actions.
7.2. Storage Periods:
• Data on contracts and services rendered — for the duration of the service provision and no longer than the statute of limitations established by law;
• Data for marketing communications — until the user revokes their consent;
• Account data — until the user deletes their account and for a reasonable period after deletion (for backup and compliance with legal requirements). 
7.3. Once the processing purposes have been achieved or the legal grounds for processing cease to exist, the data is subject to deletion, anonymization, or blocking, unless otherwise provided by law.
8. Cookies and Analytics
8.1. The Services may use cookies and similar technologies to:
• ensure proper operation and personalization of the interface; 
• analyse attendance and user behaviour;
• improve the user experience and quality of services.
8.2. Users can disable cookies in their browser or device settings. In this case, some features of the Services may not function properly.
8.3. As part of analytics, certain anonymized data may be processed by external web analytics services in accordance with their privacy policies.
9. User Rights
9.1. The user has the right to:
• receive information about their personal data, its source, purpose, and legal basis for processing; 
• request correction, updating, or supplementation of their data;
• request temporary blocking or deletion of data if it is processed in violation of the law or is no longer relevant; 
• revoke consent to data processing (if processing is based on consent); 
• restrict data processing in cases provided by law; 
• file complaints with the authorized body for personal data protection of Georgia. 
9.2. Requests can be sent by email to: wellnesszenith@gmail.com. The operator reserves the right to request additional information to confirm the user's identity. A response will be sent within the timeframes stipulated by law (usually within 10 business days).
10. Changes to the Policy
10.1. The Operator reserves the right to amend this Policy. The current version is always posted on the zenithfitness.ge website and in the mobile app (in the relevant section).
10.2. Continued use of the Services after changes have been made constitutes the user's consent to the updated Policy.
11. Contacts
For questions regarding the processing of personal data and the exercise of their rights, the user may contact: 
Email: wellnesszenith@gmail.com
Address: Georgia, Tbilisi, Mtskheti Street No. 5
 


Made on
Tilda