Skip to content
Free delivery across Georgia — on orders over 300 ₾
Help

Privacy policy

What information we receive, what we use it for and how we protect it — and how to ask us to delete it.

What we receive

  • When you order: your name, phone, delivery address, personal number and — if you give it — your e-mail.
  • When you create an account: the same details and a password. We never store the password itself — only a one-way hash of it (scrypt) from which it cannot be recovered.
  • When you write a review: the name, rating and text you enter — they are published on the site.
  • When you pay: card details are handled by Stripe on its secure page and never reach us — we only learn whether the payment went through.
  • Technically: we count page views without cookies, using a daily one-way hash of the IP address and browser that cannot identify a person. Google Analytics too — with cookies only if you agree (see below).
  • Site usage analytics: on our own server, with no third party, we record which pages you view, how long you stay, how far you scroll and which buttons you press — to improve the site. We do not store what you type into forms (name, phone, address, password); search phrases are kept without personal data. If you choose “No, thanks” this is switched off; we link it to your account or order only if you choose “Accept”. Detailed records are kept for 60 days, after that only totals remain.

What stays on your device · cookies

Your cart, favourites, recently viewed items, library bookmarks, the page you last read, the name days of the people close to you, language and theme are kept in your browser's storage. Bookmarks and name days never reach us; the cart's contents do only when you place an order.

Google Analytics. The site carries Google Analytics 4 (Google LLC) in consent mode (Consent Mode). Until you agree it sets no cookies and stores nothing on your device — Google receives only an anonymous, cookieless signal that a page was opened. If you press “Accept” in the bar at the bottom of the page, its cookies (_ga, _ga_*, kept up to 2 years) are switched on to count how many people visit, where they come from and which pages they read; press “No, thanks” and no cookies are set. We use this only to improve the site — advertising features are off and nothing is passed to Google advertising.

The site’s own statistics. A random visit number is kept in your browser so that the pages viewed in one visit are counted together (see “What we receive” above). “No, thanks” switches these statistics off too and deletes what was already recorded.

You can change your mind at any time: cookie settings. The site uses no advertising cookies.

What we use it for

  • to process and deliver your order;
  • to issue your invoice;
  • to tell you about your order's status — by e-mail, or in Telegram if you switch that on yourself;
  • to answer your questions — in Messenger, by the automated assistant or a person from our team.

We do not sell your data and do not use it for advertising.

Who receives it

  • the courier — only what delivery needs: name, phone and address;
  • Stripe — to take the payment;
  • Google — for visit statistics (Google Analytics): anonymously and without cookies, with cookies only if you agree; the data may be processed in the USA;
  • public authorities — only where the law requires it.

If you write to us on Facebook Messenger, that conversation is also subject to Meta's terms.

Messenger and the automated assistant

When you write to our Facebook Page in Messenger, an automated assistant may answer first — it says so itself, and you can ask for a person at any time. To answer, it reads your message (and a photo you send), your name as shown on Facebook, and our catalogue, delivery tariffs and church calendar; it looks up an order only when you give its number together with the phone number it was placed with.

  • Anthropic (Claude, Anthropic PBC, USA) — the messages of that conversation are sent to it to write the reply. Anthropic does not use them to train its models and keeps them only for a limited time, to provide the service and prevent misuse.
  • Storage: the conversation is kept on our server for up to 180 days — so replies keep their context and the team can follow up — and then deleted. Photos you send are not stored by us.
  • To have a conversation deleted sooner, write to info@kandeli.ge or in the same chat.

The Kandeli app

The Kandeli mobile app works with the same shop and the same account, so everything above applies to it too. In addition:

  • Kept only on your phone: bookmarks, favourites, the basket, name days, font size, language, theme and your place in a text. Reminders are local: your own phone schedules and shows them — we do not know what reminders you have.
  • Anonymous statistics: the app counts how often it is opened, which screens are used and whether anything fails. A screen is recorded by its shape, not its contents — “/saint/[key]/[slug]”, not whose life you were reading. The device marker is a random string the app made up for itself: not an advertising identifier, and not tied to an account. The server keeps only a daily hash of it, and the numbers are deleted after 90 days. You can turn this off: Settings → Privacy → Anonymous statistics.
  • Not collected: location, contacts, photos or sound. There is no advertising in the app, no tracking and no third-party analytics — Google Analytics runs on the website only.
  • Deleting the account in the app: Settings → Account → Delete account. The account and its personal details, the saved basket, back-in-stock alerts and your reviews are deleted. Placed orders stay as bookkeeping documents, but are no longer linked to an account.

Storage and protection

Data is kept on our server and in its backup; the connection to the site is encrypted (HTTPS), and only the shop's responsible staff can access the data. Order data is kept as long as the order, the warranty and the accounting required by law need it.

Seeing, correcting and deleting your data

Registered customers can see and correct their details in their profile. The account can be deleted on the spot — on the site: Profile → Security → Delete account; in the Kandeli app: Settings → Account → Delete account. You can also have your data or your account deleted by writing to info@kandeli.ge from that e-mail address, or by giving the phone number the account or order was made with. We delete everything except what the law obliges us to keep (such as invoices), and write back when it is done.

Contact and changes

For questions — info@kandeli.ge or Facebook Messenger. If this policy changes, the new version is published on this page. Last updated: 15 October 2026.

Still have a question?

Write to us — we answer every working day.