Privacy Policy (GDPR & CCPA Compliance)
Last updated: October 1, 2026
Who is responsible
The controller of your personal data is CoreRation, Tbilisi, Georgia, Georgia (“CoreRation”, “we”). Contact: [email protected].
What we collect and why
- Waitlist: your email address, chosen delivery region, the time and IP address of sign-up and confirmation. Purpose: to send launch news and your discount. Legal basis: your consent (GDPR Art. 6(1)(a)), confirmed by double opt-in.
- Orders (once the store opens): name, delivery address, phone, email and order contents. Purpose: to fulfil the contract, prepare customs documents and handle support. Legal basis: contract (Art. 6(1)(b)) and legal obligations such as tax records (Art. 6(1)(c)).
- Payments are processed by our payment provider. We never see or store your full card number.
- Technical data: server logs (IP address, browser, pages requested) kept for up to 30 days for security.
Who receives your data
Only service providers we need to run the shop: our hosting provider, email delivery, the payment provider, and the carrier and customs authorities that handle your parcel (name, address and contents, as required for delivery and customs clearance). We do not sell personal data.
International transfers
Because we ship internationally, order data is transferred to the carriers and authorities of the countries the parcel passes through. Where data leaves the EU/EEA, we rely on the safeguards available under GDPR Chapter V, including transfers necessary to perform your contract.
How long we keep it
Waitlist data until you unsubscribe. Order data for as long as tax and commercial law requires (typically up to 10 years for invoices). Server logs for 30 days.
Your rights
You can ask for access, correction, deletion, restriction, portability, or object to processing, and withdraw consent at any time (every email has an unsubscribe link). California residents have the right to know, delete and correct personal information, and we do not sell or share it for cross-context advertising. To exercise a right, email us. You may also complain to your local data protection authority.
Cookies
We use one strictly necessary session cookie (cr_sid) for security (protection against forged form submissions) and, once the store opens, for your cart. We do not use advertising or analytics cookies without your consent.