Skip to main content
Geotour

Privacy Policy

Last updated: 24 September 2026

1. Who we are

Geotour (10 Ekaterine Gabashvili St, Tbilisi, Georgia) runs geotour.ge, sells private tours in Georgia and helps visitors arrange medical travel. We decide how the personal data described here is used. Questions or requests: shota@geotour.ge or +995 599 15 68 40.

2. What we collect and why

  • Tour booking request: your name, email, phone, travel dates, number of adults, children and infants, and any special requests. Used to answer and arrange the tour.
  • Custom tour request (tour planner): your name, email, optional phone, number of travellers, preferred dates, notes and the stops you chose. Used to prepare a quote.
  • AI tour planner chat: what you type in the chat is sent to OpenAI to generate a suggested route. We do not store the chat. Please do not type personal details into it.
  • Contact form: your name, email, optional phone and your message.
  • Medical travel enquiry: your name, email, optional phone, the treatment area, rough timing, the clinic you were viewing, how you want to be contacted, whether you want travel offers, and an optional note. The treatment area is health-related data. The form sends nothing until you tick the box asking us to contact you about the enquiry, and the note asks you not to include medical details.
  • Newsletter: your email address, plus the IP address and browser details (user agent) of the sign-up.
  • Account: your email and password, or your Google account if you sign in with Google. Authentication is handled by Supabase.
  • Ad source: if you arrive from a link carrying campaign parameters (for example from one of our ads), we remember those parameters, the page you landed on, the referring website and the time, and store them with any request you then send. See the Cookie Policy (gt_attr).
  • Technical data: your IP address is used briefly to limit repeated form submissions, and our hosting provider keeps standard request logs.

Every request form notifies us by email, so the details you enter are also in our business inbox.

3. Legal basis

  • Steps before a contract, and the contract: booking and tour requests, accounts.
  • Consent: analytics and marketing cookies, the Meta Pixel and Conversions API, the newsletter, travel offers, and the medical enquiry (explicit consent, as it involves health-related data). You can withdraw consent at any time.
  • Legitimate interest: answering contact messages, preventing abuse, and knowing which of our own ads brought a request (the ad-source record above).
  • Legal obligation: keeping records the law requires.

4. Analytics and advertising

  • Google Analytics 4 loads on every page in Google Consent Mode. Until you allow analytics it sets no cookies and Google receives only cookieless measurements.
  • Microsoft Clarity and Hotjar record how pages are used (clicks, scrolling, page content) and run only if you allow analytics. They are not loaded on our medical travel pages. If a recording started on another page, Clarity stops when you open a medical page; Hotjar may continue until the page is reloaded.
  • Meta Pixel runs only if you allow marketing, and never on medical travel pages. It tells Meta which pages and tours you view and when you start a booking, send a request or contact us.
  • Meta Conversions API: if you allowed marketing when you sent a booking, custom tour request or contact form, our server tells Meta about the request, and later about a paid booking, with your email and phone hashed (SHA-256), your IP address, browser details and Meta cookie IDs. Meta uses this to measure our ads. Medical enquiries are never sent to Meta.

We do not sell your personal data.

5. Who receives your data

We use these providers to run the site:

  • Supabase: database and sign-in (requests, bookings, sign-ups, accounts).
  • Vercel: website hosting.
  • Resend: sends the notification emails about your request to us.
  • OpenAI: the AI tour planner chat.
  • Google: Google Analytics; Google sign-in if you use it.
  • Microsoft (Clarity) and Hotjar: session recording, with your consent.
  • Meta: Pixel and Conversions API, with your consent.
  • CARTO, OpenStreetMap and the OSRM demo server: map tiles and driving routes in the tour planner. Your browser requests them directly, so they see your IP address.
  • WhatsApp (Meta): only if you choose to contact us on WhatsApp; its own privacy policy applies.

We also disclose data where the law requires it.

6. International transfers

Several of these providers are based in, or process data in, the United States and other countries outside Georgia, the EU and the UK, so your data may be processed there.

7. How long we keep it

We keep requests, bookings and sign-ups as long as we need them to handle your request and keep the records the law requires, and delete them when you ask unless we must keep them. The ad-source cookie expires after 90 days; cookie durations are listed in the Cookie Policy.

8. How we protect it

The site is served over HTTPS, and our servers handle requests and bookings with a key that never reaches the browser. Forms are rate-limited. No system is completely secure, so please do not send us more than a request needs.

9. Your rights

Under the EU and UK GDPR and Georgia's Law on Personal Data Protection you can ask to access, correct or delete your data, restrict or object to its use, receive it in a portable format, and withdraw consent at any time without affecting earlier use. To use these rights, email shota@geotour.ge.

To change your cookie choices, use "Cookie settings" at the bottom of any page. You can also complain to a data protection authority: in Georgia the Personal Data Protection Service, in the EU your local authority, in the UK the ICO.

10. Children

Our services are not directed at children. Bookings record only how many children travel, not their details.

11. Changes

We will post any change on this page and update the date above.

12. Contact

Email: shota@geotour.ge

Phone: +995 599 15 68 40

Address: 10 Ekaterine Gabashvili St, Tbilisi, Georgia