This policy explains what personal data Grapevine processes on grapevine.ge, why, who we share it with, and what rights you have.
Who we are
The data controller is Grapevine, a creative agency in Georgia. For any privacy question, email info@grapevine.ge or call +995 599 495 574.
What we collect and why
Contact form. When you send the form we receive your email address, subject and message, and use them only to answer your enquiry. The message arrives in our inbox and is saved in our CRM (customer relationship system) as a new contact.
Free SEO audit. We receive the website address you enter: we load that page and send the address to Google PageSpeed Insights to measure its speed. We don't store the audit results or link them to you. Your IP address is used briefly to limit abuse.
Support chat. Messages you type in the chat are sent to Google's AI service (Gemini) to prepare a reply. We don't store the conversations. Please don't enter sensitive personal information in the chat.
Spam protection. When you submit a form, Cloudflare Turnstile processes technical data (such as your IP address and browser details) to tell people from bots.
Analytics — only with your consent. If you agree, we use Google Analytics and Google Tag Manager to learn which pages you view, what device you use, roughly where you are and how you found the site. Without your consent these scripts don't load at all.
Server logs. Our hosting provider (Vercel) processes IP addresses and technical request data to deliver and protect the site.
Legal basis
- Your consent — for analytics. You can withdraw it at any time.
- Your request — when you contact us, use the chat or run an audit, we process data to do what you asked.
- Our legitimate interest — keeping the site secure and free of spam.
Cookies
We use as few cookies as possible. Analytics cookies are only set after you consent, and we delete them if you withdraw it.
| Name | Provider | Purpose | Duration | Needs consent |
|---|---|---|---|---|
| gv-cookie-consent-v1 | Grapevine (browser local storage) | Remembers whether you accepted or rejected analytics cookies. | Until you clear your browser data | No |
| _ga | Google Analytics | Distinguishes visitors for site statistics. | 2 years | Yes |
| _ga_<ID> | Google Analytics | Keeps the state of your visit (session). | 2 years | Yes |
You can change your choice at any time with the button below or the “Cookie settings” link at the bottom of every page.
Who we share data with
We don't sell your data. We use service providers that process data on our behalf:
- Google — Analytics, Tag Manager, PageSpeed Insights and Gemini (support chat)
- Cloudflare — Turnstile (spam protection)
- Vercel — website hosting
- Resend — delivering contact-form emails
- Railway — hosting our CRM and database
Some of these providers process data outside Georgia, including in the United States. Where that happens we rely on the contractual safeguards they provide.
How long we keep data
- Contact enquiries — until your enquiry is handled, and if we start working together, for as long as that relationship and our legal obligations require.
- Analytics data — for the retention period set in Google Analytics (no more than 14 months).
- SEO audits and support chats — we don't keep the results or conversations.
Your rights
Under the Law of Georgia on Personal Data Protection and, where it applies, the EU GDPR, you have the right to:
- ask what data we hold about you and get a copy;
- have your data corrected or deleted;
- restrict or object to processing;
- withdraw your consent at any time;
- receive your data in a structured format (portability).
To make a request, email info@grapevine.ge. If you believe your rights have been violated, you can complain to the Personal Data Protection Service of Georgia (personaldata.ge).
Changes
We'll update this policy when the site or how we handle data changes. The current version is always on this page, with its update date.