Version 1.0 | 5 October 2026
1. Purpose
This policy explains how Individual Entrepreneur Anna Zedginidze, identification number 47001023303, personal number 47001023303, operating under the name PSYCHOCAMPUS / ფსიქოკამპუსი, collects, uses, stores and protects users' personal data.
2. Controller
Individual Entrepreneur Anna Zedginidze, identification number 47001023303, personal number 47001023303, operating under the name PSYCHOCAMPUS / ფსიქოკამპუსი. Address: Georgia, Tbilisi, Saburtalo District, Didi Dighomi Settlement, Giorgi Brtskinvale Street, No. 46, Apartment 1002a; email: annazedginidze11@gmail.com; telephone: +995555116923.
3. What data we collect
- first name;
- last name (optional);
- email address;
- region;
- telephone number;
- personal number (optional);
- data received when signing in with Google or Facebook: name, email address, account identifier and a link to the profile picture;
- information about orders and payments;
- technical data, such as IP address, device and browser data, logs and cookies;
- psychological, emotional or health-related information that the user provides voluntarily in the course of a service, where the nature of the service requires it.
4. Personal number
The personal number is an optional field. When it is given, it is used only to the extent needed for the specific purpose. The personal number is stored encrypted; a one-way (hashed) value derived from it is used to look it up, and staff see only its last four digits. The personal number is not used in emails, technical logs or analytics.
5. Purposes and legal bases
- Creating and running the account: performance of a contract, or steps needed to enter into one.
- Orders, payments and support: the contract and obligations imposed by law.
- Security and fraud prevention: a basis permitted by law or a legitimate interest, appropriately balanced.
- Reviewing a user's application or service: a basis provided by law.
- Direct marketing: only with the corresponding consent.
- Analytics: on the appropriate legal basis and, where needed, on the basis of consent.
6. Data relating to health and psychological state
Data relating to health or psychological state may be processed in the course of psychological services. The law in force treats health data as a specially protected category. Such data is processed only on an appropriate legal basis, with additional safeguards and in line with the principle of necessity.
7. Data of minors
Consent-based processing of the data of a minor under 16 requires the consent of a parent or other legal representative and a reasonable confirmation that it exists. For special categories of data, the written consent of a parent or legal representative is required, except in cases provided by law. The best interests of the child are taken into account.
8. Cookies
The platform uses cookies. Necessary cookies serve basic functioning, while optional analytics and marketing cookies, where used, are managed according to the user's choice and the law in force. The details are in the separate Cookie Policy.
9. Recipients of data
- The payment provider (Flitt): to the extent needed to process payments.
- Providers of hosting, video calls (Google Meet), sign-in (Google, Facebook), email (Brevo), technical support and analytics (Google Analytics, Meta, only with consent): to the extent needed.
- Specialists: the data needed for the specific service.
- Public authorities: only in cases provided by law.
- Other third parties: only on an appropriate legal basis.
10. Signing in with Google and Facebook
The data received when signing in with Google or Facebook depends on the technical configuration of the integration and on the permissions the user grants. The platform processes the data received only for the corresponding purposes.
11. International transfers
If a technical provider's infrastructure involves transferring data to another country, the transfer takes place on a basis permitted by the law in force and with appropriate safeguards in place.
12. Retention periods
Data is kept only for as long as is necessary for the corresponding purpose, for the contract, for obligations imposed by law or for legal claims. When that period ends, the data is deleted, destroyed or depersonalised, unless the law requires it to be kept.
13. Security
The platform uses appropriate technical and organisational measures to protect data against loss, destruction, unlawful access, disclosure or any other unauthorised processing. Access is given only to authorised persons.
14. Your rights
- to receive information about the processing of your data;
- to request access and a copy;
- to request the correction of inaccurate data;
- in the cases provided by law, to request erasure or destruction, or the restriction of processing;
- to object to processing, where that right exists;
- to withdraw consent to processing based on consent;
- to stop direct marketing;
- to apply to the competent authority or a court.
15. Direct marketing
Data is processed for direct marketing with consent. Consent can be withdrawn at any time; once the request is received, the corresponding processing stops within the period established by law.
16. Security incidents
If an incident is detected, the platform acts in accordance with the notification and risk-reduction rules established by the law in force.
17. Requests
Requests concerning data are accepted at: annazedginidze11@gmail.com. Where necessary, reasonable identification may be carried out.
18. Changes
This policy may be updated because of changes in the law, the services or technical processes.
This English text is a translation of the Georgian original. In case of any difference, the Georgian version prevails.