Privacy
Policy.

Last updated: October 6, 2026

1. Who We Are (Data Controller)

The controller responsible for the processing of personal data on this website is:

Ltd Grand Fitness (შპს გრანდ ფიტნესი)
operating as Grand Fitness
196 Bagrationi St, Batumi 6000, Georgia
Identification number: 445784358
Phone: +995 557 19 27 27
Email: info@grandfitness.ge

We process personal data in accordance with the Law of Georgia on Personal Data Protection ("the Law"). This policy explains what data we collect on this website, why, and what rights you have.

2. Data We Process & Why

2.1 Visiting this website (hosting & server logs)

This website is delivered via Cloudflare, Inc. (USA/global network). When you visit any page, Cloudflare technically processes connection data such as your IP address, date and time of access, requested page, browser type and referring page. This processing is technically necessary to deliver the website securely and to protect it against attacks. Log data is not used by us to identify individual visitors.

Legal basis: our legitimate interest in operating a secure, functional website (Art. 5 of the Law — lawful processing necessary for legitimate interests).

2.2 Contact form

When you use our contact form, the data you enter (name, email address, optional phone number, chosen topic and your message) is transmitted to us by our form processing provider FormSubmit and delivered to our mailbox (info@grandfitness.ge). We use this data exclusively to answer your enquiry and for any follow-up communication you request (for example, booking your first session).

Legal basis: your consent, given by actively submitting the form, and the necessity of processing to respond to your request. We keep enquiry emails only as long as needed to handle your request and any legal retention obligations, after which they are deleted.

2.3 Contacting us directly

If you contact us by phone, email, Instagram or Facebook, we process the contact details and message content you provide, solely to handle your enquiry.

2.4 Fonts & links to third parties

Fonts: all fonts used on this website are hosted on our own servers. Loading a page does not transmit any data to Google or any other font provider.

Links to third parties: our website links to external services such as Instagram, Facebook and Google Maps. This privacy policy does not apply to those services — when you follow such a link, the privacy policy of the respective provider applies. We do not embed social media tracking elements (such as pixels or plugins) on this website.

2.5 What we do NOT do

We currently do not use advertising trackers, marketing pixels, or profiling of website visitors. We do not sell personal data. Should we introduce analytics in the future, this policy will be updated first.

3. Cookies & Local Storage

This website does not set tracking cookies. We use one item of local browser storage ("gf-consent") solely to remember that you have seen and dismissed our cookie notice — this contains no personal data and is never transmitted to us. No third-party services are loaded by this website.

4. Data Transfers Outside Georgia

Our hosting (Cloudflare) and form processing (FormSubmit) involve providers whose servers may be located outside Georgia, including in the United States and the European Union. We select providers that maintain recognized data protection and security standards, and we transmit only the minimum data technically required.

5. Your Rights

Under the Law of Georgia on Personal Data Protection, you have the right to:

• request information about whether and which of your personal data we process;
• access your data and receive a copy;
• request correction of inaccurate or incomplete data;
• request deletion or destruction of your data, or restriction/blocking of processing;
• withdraw any consent you have given, at any time, with effect for the future;
• object to processing based on legitimate interests.

To exercise any of these rights, simply contact us at info@grandfitness.ge. We respond to requests within the timeframes set by the Law.

6. Supervisory Authority

You have the right to lodge a complaint with the Georgian data protection supervisory authority:

Personal Data Protection Service of Georgia
Website: pdps.ge

7. Data Security

This website is delivered exclusively over encrypted connections (HTTPS/TLS). We apply appropriate technical and organizational measures to protect personal data against unauthorized access, loss or misuse.

8. Minors

This website is directed at the general public and does not knowingly collect personal data from children. Gym memberships for minors are handled in person with parental consent in accordance with applicable law.

9. Changes to This Policy

We may update this privacy policy to reflect changes in our services or legal requirements. The current version is always available on this page, with the date of the last update shown above.