Privacy Policy
In effect from June 2026
We respect your privacy and collect the minimum data needed to take and deliver orders. This document explains what data we process and why.
1. Data controller
Sushi Family, Georgia. Data enquiries: privacy@sushi.family.
2. What we collect
Name, phone, delivery address and its comment, order contents and history, language, your messenger user id (when you contact us via Instagram or other channels), and your chat with the consultant. We do not store payment cards: payment is a transfer to a card, made outside the site.
3. Why
Taking and fulfilling orders, delivery and order-related contact, recognising a returning customer and speeding up checkout, supporting service quality, and anonymised sales analytics.
4. Legal basis
Processing to perform the contract (placing and delivering the order) and on the basis of the consent you give at checkout.
If you contact us in chat or a messenger without placing an order, the basis is the consent you give by starting the conversation and our legitimate interest in responding to your inquiry.
5. Sharing with third parties
Data is shared only as far as needed to fulfil the order: with the Poster point-of-sale system, the courier or delivery service, and — once online payment is enabled — the payment provider. We do not sell data or pass it on for third-party advertising.
6. AI consultant processing
Messages are processed by an AI consultant (provider Anthropic) to reply and assemble the order. The provider does not use request content to train its models. To tune the tone of communication we use anonymised transcripts with personal data removed.
7. Cookies
The site uses only functional cookies needed to operate: language, the selected branch and the cart session. We set no advertising or third-party trackers.
8. Retention
Data is kept for as long as needed to fulfil orders and meet legal requirements. Technical backups are kept for a limited period (14 days by default).
9. Security
Access is role-restricted, transfer is over a secure connection, keys and secrets are stored encrypted, and phones and addresses do not reach technical logs. Absolute security of data transmitted over the internet cannot be guaranteed.
10. Your rights
You may request access to your data, its correction or deletion, and withdraw consent. Send requests to privacy@sushi.family; we respond within a reasonable time under Georgian law.
11. Children
The service is not intended for persons under 18; we do not knowingly collect their data.
12. Changes
This policy may be updated; the current version is always published on the website.