Privacy notice

Data controller

Packetvectorpoint is the controller for personal data processed through packetvectorpoint.digital and through reporting engagements. Correspondence: Level 8, 35 Rustaveli Avenue, Kutaisi 4600; hello@packetvectorpoint.digital; +995 431 555 316.

We process data in line with the Law of Georgia on Personal Data Protection and other applicable Georgian rules. Where a client is itself a controller (for example an insurer sending claimant-related files), we act as a processor for those engagement records under the fee note, and as controller for our own client-contact records.

What we collect

From the public form: name, email, organisation, chosen report type, optional record window, and the message you write. From email or telephone: the same kinds of enquiry details. From engagements: records you supply (which may include staff numbers, IBANs, claim references, and other identifiers contained in extracts), plus our drafts, letters, and working notes. From the site: technical logs the host may keep (IP address, browser type, time) as needed to operate and secure the server. Cookie-related storage is described in the cookie notice.

We do not ask the public form for identity-document scans or full payment-card numbers. Please do not send them there.

Purposes and legal bases

We use enquiry data to reply, quote, and, if you instruct us, to perform the contract. We use engagement records to prepare the report you commissioned and to keep working papers. We use host logs to keep the site available and to investigate abuse. Where Georgian law requires a basis, we rely on steps prior to contract, performance of contract, legitimate interests in running a reporting practice and securing the site, and legal obligation (for example tax record-keeping). We do not sell personal data.

Retention

Unsuccessful enquiries are kept up to 18 months unless you ask us to delete them sooner and no legal hold applies. Signed fee notes, invoices, and issued letters are kept for at least six years to meet accounting and professional needs in Georgia. Client extracts are kept only as long as needed to finish the engagement and any agreed follow-up, then deleted or returned according to the fee note — typically within 90 days after the final letter unless a longer hold is required for a dispute or a competent authority. Host logs follow the host’s rotation, usually under 90 days.

Your rights

Depending on the Law of Georgia on Personal Data Protection, you may request access, correction, deletion, restriction, and information about processing, and you may object where the basis is legitimate interests. You may complain to the Personal Data Protection Service of Georgia. Requests: hello@packetvectorpoint.digital. We may need to verify you are the person concerned. Rights can be limited where we must keep records for law, or where another person’s data is mixed in an extract we hold as processor — in that case we will point you to the client controller.

International transfers

Our reporting room is in Kutaisi. Email and hosting may involve processors inside or outside Georgia (for example an EU or other host). Where a transfer leaves Georgia, we use a lawful mechanism available under Georgian law (adequacy, appropriate safeguards, or another permitted route) and we limit the data to what the processor needs. If a specific engagement requires a named overseas counsel to receive a pack, we do so on your written instruction.

Children

The site and the reporting practice are aimed at organisations and adults acting in a professional capacity, not at children.

Changes

We will update this notice when our processing changes in a way you should know about. The date of the current text is the date this page was last issued on the site.