Sanapiro
Sign in

Privacy Policy

Last updated: 1 August 2026

This policy explains what personal data we collect through the Sanapiro website and services (car rental, hotel, tours and transfers), how we use it, and what rights you have.

1. Who we are

Sanapiro is a company based in Kutaisi, Georgia, providing car rental, hotel accommodation, tours and transfers. We are the controller of the personal data described here. Our contact details are at the bottom of this page.

2. What data we collect

Booking data: your name, email address, phone number, booking dates, pickup and drop-off location, selected extras and any comments. Account data: your email and profile details if you create an account. At vehicle handover we check your driving licence and an identity document in person. Technical data: IP address, browser type and the pages you view.

3. Why we process your data

We process your data to confirm and fulfil your booking; to contact you about it by email, phone or WhatsApp; to issue invoices and meet our tax obligations; to protect our vehicles and resolve disputes; and to improve the website. The legal basis is performance of a contract, a legal obligation, our legitimate interest, or your consent.

4. Cookies and analytics

The site uses essential cookies (session, sign-in, chosen language and currency) and may use analytics cookies that help us understand how the site is used. You can delete or block cookies in your browser settings; some features may then stop working.

5. Who we share data with

We do not sell your data. We share it only with partners involved in delivering the service: our hosting and database provider, our email delivery service, the online booking channels used by the hotel, payment providers, our insurer and our accountant. We also disclose data where the law or a competent authority requires it.

6. International transfers

Some of our providers (hosting, email delivery) are located outside Georgia. Where that is the case we choose providers that offer an adequate level of data protection.

7. How long we keep your data

Booking and payment records are kept for the period required by law (usually 6 years for tax purposes). Account data is kept while your account is active. Other correspondence is kept only as long as it is needed.

8. Your rights

You have the right to ask what data we hold about you, to have it corrected, updated or deleted, to object to or restrict processing, and to withdraw consent. Send your request to the email address at the bottom of this page. If you believe your rights have been breached you may complain to the Personal Data Protection Service of Georgia.

9. Security

The site runs over an encrypted (HTTPS) connection, access to the admin panel is restricted, and only authorised staff can reach the database. No transmission over the internet can be guaranteed to be fully secure, but we take reasonable technical and organisational measures.

10. Children

Our services are intended for adults. We do not knowingly collect data from anyone under 16.

11. Changes to this policy

We may update this policy. The date of the latest version is always shown at the top of this page.

Still have questions?

Contact us about this document or about your data: