Privacy notice (interim)

This is not a final Privacy Policy and not a complete public legal notice. [TO BE PROVIDED] placeholders do not satisfy electronic-commerce identity disclosure or controller transparency. If the temporary operator cannot be identified with the required legal details, keep the site private or publish only a limited coming-soon page until a company is registered or a named individual entrepreneur is clearly identified.

Current status

JISO Group is presently a project / brand. It is not identified here as a registered legal entity, contracting party, or data controller.
Online lead / survey collection is disabled. No public email, telephone, or copy-to-clipboard contact invitation is offered on the main site while the operator is unconfirmed.
Advertising measurement scripts (including Meta Pixel) are removed from these development-stage source pages.
Remote Google Fonts loading has been removed from the main landing HTML shell.

Inquiry contact vs marketing consent (when collection resumes)

Under the Law of Georgia on Personal Data Protection, Article 5(1)(b) and Article 5(1)(j) may, depending on facts, support processing that is necessary to enter into a contract at the person’s request or to review an application / provide the requested service. That is different from optional consent for later direct marketing. Unticking a marketing/follow-up checkbox does not, by itself, mean every contact field must always be stripped if the person is asking to be contacted about a specific service request — but purpose limitation, necessity, transparency, security, retention, and international-transfer rules still apply. A qualified Georgian lawyer should map future form wording to the correct Article 5 ground(s) before reopening collection.

What this site may still process

Technical hosting and delivery by the website host (Vercel) — server logs and similar operational data as configured by that provider.
Language preference stored in your browser’s localStorage (not a lead submission).

No contact channel is published on the main site right now. If you somehow reach an operator by other means, providing an email address voluntarily does not remove privacy, security, retention, transparency, or international-transfer questions.

Controller identity — placeholders (incomplete)

Legal name / form: [TO BE PROVIDED — exact registered company name after registration, or the exact individual entrepreneur who temporarily operates the site]

Identification / personal number: [TO BE PROVIDED — Public Registry number]

Legal / business address: [TO BE PROVIDED]

Published contact channels: [TO BE PROVIDED — none published on the main site until then]

Who accesses inquiries: [TO BE CONFIRMED]

International processing note (Article 37)

Hosting and related infrastructure may involve processing outside Georgia. An EU region does not finish the analysis for every provider, subprocessor, backup, or support-access path. A processor contract or contractual “safeguard” under Article 37(2)(b) is not enough by itself where that route applies: Article 37(3) requires a prior permit from the current supervisory authority (as of 2 March 2026, the State Audit Office of Georgia) before transfer on that basis. Lawyer review required.

Supervisory authority

Current supervisory authority (from 2 March 2026): State Audit Office of Georgia. Older Personal Data Protection Service (PDPS) materials are historical unless reissued by the State Audit Office.