Privacy Policy

1. Who we are

The data controller is Individual Entrepreneur Ivane Kutateladze, trading as Quta Studio, identification number 01019013820, registered address 57 Revaz Uridia Street, Tbilisi 0180, Georgia. Contact: qutastudio.one@gmail.com or WhatsApp +995 557 87 69 69.

2. Laws that apply

We process personal data in line with the Law of Georgia on Personal Data Protection, and, where they apply to our clients, the UK GDPR and Data Protection Act 2018, the EU General Data Protection Regulation (GDPR), and US state privacy laws such as the California Consumer Privacy Act (CCPA/CPRA).

3. What we collect

• Details you send in our forms: name, email address, website address, project type, budget range, call preference and project description.
• Messages you send us by email or WhatsApp.
• Basic technical data our host records automatically (such as IP address, browser type and pages visited) to keep the site secure and working.

We don't collect payment card details on this site, and we don't knowingly collect data from anyone under 16.

4. Why we use it and our legal basis

• To reply to your request and prepare a scope, preview and quote — steps taken at your request before entering a contract.
• To deliver and invoice a project — performance of a contract.
• To keep the site secure and keep business records — legitimate interests and legal obligations (for example tax and accounting rules).
• Where we ask for it, such as the form checkbox — your consent, which you can withdraw at any time.

We don't use your data for automated decision-making or profiling, and we don't send marketing without your permission.

5. Who we share it with

We never sell or rent your personal data, and we don't "share" it for cross-context behavioural advertising. We use these service providers (processors), only as needed to run the service:

• Website hosting and content delivery (Lovable and Cloudflare).
• Email delivery that forwards form submissions to our inbox, and Google (Gmail) for email correspondence.
• An AI service that analyses a public website address when you use the free website check. Don't enter personal data into that tool.
• WhatsApp (Meta) if you choose to message us there.
• Payment providers such as Stripe or Wise when you pay an invoice.

We may also disclose data where the law requires it.

6. International transfers

We are based in Georgia, and some providers process data in the US, UK or EU. Where data leaves the UK or EU, we rely on adequacy decisions or standard contractual clauses offered by our providers.

7. How long we keep it

Enquiries that don't become projects are deleted within 12 months. Client project and invoicing records are kept for as long as Georgian tax and accounting law requires (generally up to 6 years), then deleted.

8. Your rights

Depending on where you live, you can ask to access, correct, delete or receive a copy of your data, restrict or object to processing, and withdraw consent. California residents can also ask what personal information we hold and ask us to delete it; we won't treat you differently for using these rights. Email qutastudio.one@gmail.com and we'll reply within 30 days. We may need to confirm your identity first.

You can also complain to a supervisory authority: the Personal Data Protection Service of Georgia, the UK Information Commissioner's Office (ICO), or your local EU data protection authority.

9. Cookies

This site doesn't use advertising or tracking cookies. Our host may use strictly necessary technical storage to deliver the site securely.

10. Security

We use encrypted connections (HTTPS), access-restricted accounts and reputable providers. No system is perfectly secure, but we'll notify you and the relevant authority of a breach where the law requires it.

11. Changes

We'll post any updates here with a new date.