Legal document
This Privacy Policy explains how Blue Peak Advisory processes personal data in connection with our website and services, in accordance with the Law of Georgia on Personal Data Protection (No. 3144/2023) and, where applicable, the GDPR for individuals in the European Union.
The controller responsible for processing personal data in connection with the Services is:
Depending on how you use our Services, we may process in particular:
We process personal data for the following purposes:
Processing is based on Article 5 of the Law of Georgia on Personal Data Protection: your consent, contract performance, legal obligations, legitimate interests in operating a secure website, or your request to receive a response (Article 5(1)(j)). Where required by law, we will request separate explicit consent.
Access to personal data is limited to Blue Peak Advisory staff and service providers who need this information to operate, maintain, and support the Services (e.g. cloud infrastructure providers, support tools).
When data is transferred to countries whose data protection laws differ from those of Georgia or the EU, we will apply appropriate safeguards in accordance with applicable law (e.g. standard contractual clauses or other recognized transfer mechanisms).
We retain personal data only as long as necessary for the purposes described above, including for the duration of the contractual relationship with your organization and for any retention periods required by applicable law (tax, accounting, archival).
Upon expiry of the retention period, data is securely deleted or anonymized.
In accordance with the Law of Georgia on Personal Data Protection and, where applicable, the GDPR, you have the following rights:
To exercise your rights, contact us at bluepeak.advisory1@gmail.com. We will respond within 10 working days, which may be extended by up to 10 additional working days in justified special cases, with immediate notice to you.
You can request a copy of the data we hold about you.
You can request correction of inaccurate or incomplete data.
You can request deletion of data under certain conditions provided by law.
You can object to certain processing activities based on legitimate interest.
You can receive your data in a structured format where technically feasible.
You can request limitation of processing of your data in certain situations.
If you believe your data protection rights have been violated, you have the right to lodge a complaint with the competent supervisory authority.
In Georgia, the competent authority is:
We maintain technical and organisational measures to protect personal data. If a personal data incident occurs that is likely to cause significant harm, we will notify the Personal Data Protection Service of Georgia within 72 hours where required by law and inform affected individuals without undue delay when necessary.
The PEAK·AI chat on this website is a demonstration tool that generates predefined responses in your browser. It is not used for automated decision-making with legal or similarly significant effects. Demo chat content is not transmitted to our servers unless you separately contact us.
Our website and contact form are intended for business inquiries by adults. If you are under 18, please use the website only with the consent of a parent or legal guardian. If we learn that we collected personal data from a minor without appropriate consent, we will delete it.