Effective date: 22 September 2026
The controller is Individual Entrepreneur Alexander Umantsev, ID 306210310, trading as Mika, Mirian Mepe St. 13b, Tbilisi, Georgia; [email protected]; +995 599 744 184.
Mika offers guest checkout and does not receive or store full payment-card details. It nevertheless processes the limited personal data necessary to operate the site and fulfil orders.
Data, purpose and ground
- Name, email, delivery address, optional/necessary phone, cart and order: answer enquiries, take requested pre-contract steps, make and fulfil the contract, deliver and support the order.
- Payment amount, date, reference and status: reconcile payment, provide refunds, meet contractual/legal duties and prevent fraud. Full card credentials remain with the bank/payment provider.
- Invoice, order and refund records: accounting, tax, audit and other legal obligations.
- Correspondence and claim information: customer service and establishing, exercising or defending legal claims.
- IP address, device/browser and security logs: deliver and secure the site, diagnose faults and prevent abuse, based on necessity and proportionate legitimate interests.
- Essential cookies: operate the cart/session and remember a requested language.
- Analytics and attribution: used only on the consent basis where enabled.
- Telegram messages: if the visitor chooses the Telegram link, Telegram processes account/profile and message data under its own terms; Mika receives the message to answer the visitor’s request.
Required checkout information is necessary to handle the order. Without it, Mika cannot fulfil the request. Optional fields are marked optional. Mika does not sell personal data.
Recipients and international transfers
Mika shares only necessary information with the applicable Georgian bank/payment provider, courier/logistics provider, website hosting and IT/security suppliers, WooCommerce/WordPress-related processors where applicable, optional analytics providers after consent, professional advisers and public authorities where lawfully required.
Where a provider processes data outside Georgia, Mika will use a transfer basis and safeguards required by Georgian law and provide relevant information on request.
Retention
- Accounting, order, payment and refund records: six years after the end of the relevant accounting period, or longer only where another law or unresolved claim requires it.
- Unpaid/unsuccessful order requests: 90 days unless needed for a dispute, fraud investigation or legal duty.
- Routine support correspondence: two years after closure; dispute records until final resolution and expiry of the applicable claim period.
- Security logs: up to 12 months unless an incident requires longer evidence preservation.
- Cookie/analytics information: the duration shown in the Cookie Policy and provider controls.
Data is erased, destroyed or irreversibly anonymised when retention is no longer justified.
Facebook, Instagram & AI-Assisted Support
When an individual messages Mika or interacts with an official Mika page through Facebook, Messenger or Instagram, Meta may send the relevant interaction to Mika’s customer-support system.
Information received may include:
- a platform-specific user identifier, display name, profile name or username;
- private messages, replies, public comments and mentions directed to Mika;
- attachments or media voluntarily submitted by the individual;
- the page, post, story or other content connected with the interaction;
- dates, times, delivery information and conversation status; and
- internal support notes, classifications, summaries and response drafts.
Mika may use artificial-intelligence tools to classify enquiries, summarize conversations and prepare suggested responses. Relevant message or comment content may be processed by an AI service provider for these purposes. AI-generated text may be reviewed, edited or approved by authorized Mika staff and may be inaccurate or incomplete.
AI-assisted customer-support responses provide general information only and do not constitute medical, legal or other professional advice. Individuals should not submit unnecessary health, financial, identity-document or other sensitive information through public comments or informal social-media messages.
Mika does not use private customer conversations to independently train its own general-purpose AI model. Use of Facebook, Messenger and Instagram also remains subject to Meta’s own terms and privacy policy.
Rights
Subject to Georgian law, a person may request confirmation and information about processing; access and a copy; correction, updating or completion; termination, erasure or destruction; blocking; portability where applicable; withdrawal of consent; and applicable automated-decision rights. Mika will act within the statutory period, normally no later than ten working days for access/copy, correction and erasure-related requests, subject to a lawful extension or restriction.
Send requests to [email protected]. Mika may request proportionate identity verification. A person may complain to the State Audit Office of Georgia in its data-protection supervisory capacity or apply to a court.
Instructions specifically for deleting information received through Facebook, Messenger or Instagram are available on our Facebook and Instagram User Data Deletion page.
Mika does not use checkout details for direct marketing without separate prior consent. If marketing is introduced, every message will identify the sender and provide a simple free withdrawal method; withdrawal will be implemented as soon as reasonably possible and no later than seven working days.
Mika uses proportionate technical and organisational safeguards. This notice will be updated when actual processing, providers or legal requirements change.