Privacy Policy

Last updated: 27 June 2026

Data controller: IRC Tour — Step In Georgia
Address: David Gamrekeli St, Tbilisi, Georgia
Email: info@stepingeorgia.ge

Step In Georgia operates this website to present our tours and receive enquiries. This policy explains what personal data we collect, how we use cookies, and your rights.

Information we collect

Contact & booking forms — name, email, phone, message, travel dates, and tour preferences when you submit contact, newsletter, or book-now forms.
Technical data — IP address, browser type, and pages visited, processed in server logs for security and troubleshooting.
Communications — emails or messages you send to our addresses listed on the site.

We use this information to respond to enquiries, prepare offers, send requested information, and improve our services. We do not sell your personal data.

Cookies & similar technologies

Cookies are small text files stored on your device. We group them as follows:

Cookie / storagePurposeDurationType sig_sessionPHP session for form security and CSRF protectionSession (up to 2 hours)Strictly necessary sig_cookie_consentStores your cookie preferences12 monthsStrictly necessary YouTube (Google)Embedded hero video on the home pageSet by GoogleFunctional — only after consent Google MapsOffice map on the contact pageSet by GoogleFunctional — only after consent PWA cacheOffline access to pages you have visitedUntil cache clearedFunctional — only after consent

Optional embeds and the PWA are blocked until you accept functional cookies via the cookie banner. You can change your choice anytime using Cookie settings in the footer.

Learn more about Google's practices: Google Privacy Policy.

Legal basis (EEA visitors)

Contract / pre-contractual steps when you request a booking or quote.
Legitimate interest in operating a secure website and answering enquiries.
Consent for optional cookies and marketing subscriptions.

Retention

Form submissions are emailed to our team and may be kept in a secure server log for up to 90 days. Booking correspondence is retained as long as needed for customer service and legal obligations.

Your rights

You may request access, correction, deletion, or restriction of your personal data, and withdraw consent for optional cookies. Contact info@stepingeorgia.ge. You may also lodge a complaint with your local data protection authority.

International transfers

When you accept functional cookies, Google (USA) may process technical data under their own terms. We recommend reviewing their privacy notice before enabling optional embeds.

Children

Our services are not directed at children under 16 and we do not knowingly collect their data.

Changes

We may update this policy. Material changes will be reflected here with a new "Last updated" date and may trigger the cookie banner again.