Who controls your data
Controller: Individual Entrepreneur Rinat Miftakhov, registration 304836943. Address: Georgia, Tbilisi, Krtsanisi district, Ponichala-3, settlement, Block 5, Entrance II, floor IV, Storeroom. Privacy contact: projects@smart-key.online.
Information we collect
We process information supplied in enquiries, orders and briefs: name, contact details, website, selected services, materials and messages. Required fields are marked. A contact is necessary to reply. Do not send passports, card details or unnecessary third-party information.
Purposes and legal bases
Purposes and legal bases: responding and preparing a contract — steps at your request before a contract; delivering an order — contract; mandatory accounting and compliance — law; site security and abuse prevention — legitimate interests balanced against your rights. Portfolio permission is separate and optional.
Payments
Payments involve amounts, methods, transaction identifiers and statuses. PayPal processes information under its own privacy notice; our site does not request card numbers or security codes. Cryptocurrency transactions are public blockchain records which we cannot erase.
Recipients
Access is limited to the provider and specialists who need the information to deliver the order. Hostinger hosts the site; PayPal processes payments when selected; Google Sheets records enquiries once connected. At your request, communication may continue through WhatsApp or another agreed channel. These services process information within their functions and under their own terms. We do not sell personal data. Marketing permission is not required to submit an enquiry or order.
International processing
Providers may process data outside your country. Where required, transfers must use lawful grounds and contractual safeguards. Contact us for information about actual recipients and applicable safeguards.
Retention
Enquiries are retained while needed to reply and continue negotiations. Order details, contractual correspondence and payment records are kept during delivery and subsequently only to the extent and for the period needed for mandatory records, complaints and legal claims. When the applicable basis ends, data must be deleted or anonymised. In response to a deletion request, we explain any records that must be retained by law and why. Backup copies are removed as they are replaced; deletion requests must be reapplied if a backup is restored.
Browser storage and technical logs
Form drafts and 3D preferences may be stored in your browser until cleared through site-data settings. Connection addresses and rate limits protect the site; hosting may keep logs. Technical events may contain time, page and campaign tags. Connected PayPal services use their own storage technologies.
Your rights
You may request access, correction, deletion, restriction, objection and portability where applicable, and withdraw optional consent. Withdrawal does not invalidate earlier lawful processing. We verify identity proportionately and respond within applicable statutory deadlines. You may complain to the competent supervisory authority or court.
Automated decisions
We do not make decisions producing legal or similarly significant effects on you solely through automated processing. Final project scope, terms and dates are agreed with the provider.
Notice updates
Updated 29 October 2026. Material changes are published on this page. Processing necessary to consider an enquiry or perform a contract does not imply permission for marketing or portfolio publication.