This is a translation for your convenience. The Georgian version is the legally binding one.
Last updated: September 29, 2026.
The data controller is ი/მ გიორგი გუშარაშვილი, identification number 35001116153, address: 31 მეგობრობის გამზირი, რუსთავი 3700. Website: bang.ge, brand “Bang! Burger”.
When you order: your name, mobile number, email, delivery address, comment, order contents, amount and payment method.
Via WhatsApp: if you verify your number with WhatsApp, sign in with WhatsApp or message us on WhatsApp, we store your WhatsApp number, the time of your last message (so we know whether we're allowed to reply), your messages as a support request and your WhatsApp profile name.
In your account: email, name, phone, order history, points, Bang Club status, giveaway tickets, consent to marketing emails, and your Instagram or Facebook name if you claim the follow bonus.
When a friend invites you: which link brought you to us (to credit points to the person who invited you).
Customer profile: from your order history we calculate your statistics (number and total of orders, average order value, favorite products, usual order time, delivery or pickup, date of the last order) and put you in a group based on them (for example, “new”, “loyal”, “hasn't ordered in a while”). We also keep your order rating if you leave one, and internal service notes (for example, about allergies).
For marketing emails: when and where you gave consent or when you withdrew it; which email we sent you, whether it arrived, whether you opened it (via a small image inside the email) and whether you clicked a link. If you tick the marketing emails box on the order form, we save your email and cart contents so we can remind you once if you don't finish the order.
We never see or store your card details: payment happens on the bank's secure page.
Technical data: when you order, sign in or change your profile, we store your IP address and browser information (device and browser type). We need this to process orders, prevent fraud and keep the site secure. We keep this data for 12 months and then delete it automatically. We don't share it with third parties, except where the law requires.
To take, prepare and deliver your order, and to call you if needed; to tell you the order status by email and, if you verify your number with WhatsApp, by WhatsApp too; to verify your number; to send your sign-in code; to run points, Bang Club, rewards and the monthly giveaway; to prevent coupon abuse; for tax and accounting records; to improve our service (ratings, statistics). We send marketing emails only with your consent (see below).
We send marketing emails only to people who actively agreed to them: they ticked the box “Send me deals, news and reminders by email” when signing up, on the order form or in account settings. This box is not ticked by default, and ticking it is not a condition for ordering.
With your consent you may get: a welcome email, a reminder about an unfinished order, a thank-you and rating request after an order, a reminder before your points expire, news about a new level and Bang Club, giveaway reminders, personal offers (including a one-time coupon if you haven't ordered in a while) and news. The content may be tailored to your orders (for example, your favorite product). We limit how many emails we send (no more than one a day and three a week) and don't send them at night.
Withdrawing consent is as easy as giving it: at the end of every marketing email there's an “Unsubscribe” link that works in one click; you can also use “Email preferences” or your account page. Once you unsubscribe, we stop marketing emails right away. Order status and sign-in code emails are service emails and don't depend on consent. We don't send marketing messages on WhatsApp, only order status updates and replies to your messages.
Fulfilling your order and running your account (contract), obligations imposed by law (record keeping), our legitimate interest (fraud prevention, service improvement, site visit statistics) and your consent (marketing emails).
We don't sell data. We share it only with partners we need to provide the service, and only as much as necessary:
Some of their servers may be located outside Georgia; in that case we use only services with proper data protection safeguards.
We use essential cookies (the sign-in session, the WhatsApp verification session for 1 day) and browser storage (cart, order form fields, a friend's invite link for 30 days). When you come in through a link in a marketing email, we keep a cookie for 7 days that tells us which email you came from (only to measure how well our emails work).
For site visit statistics we use Google Analytics (provider: Google Ireland Limited and Google LLC). It stores the cookies _ga and _ga_* in your browser and uses them to count how many visitors come and how they use the site. This tells us which pages people view, which devices and browsers they use, where they come from (for example, a search engine or a social network) and roughly where they are (the city or country Google works out from the IP address). We only see summarized, anonymous statistics and use them only to improve the site. We don't send your name, phone, email, address or order details to Google. Google Analytics keeps this data for no more than 14 months, and the cookies last no longer than 2 years.
If you don't want your visit counted, delete or block cookies in your browser settings (or just the _ga cookies), install the Google Analytics opt-out add-on (tools.google.com/dlpage/gaoptout) or use a private (incognito) window, which deletes cookies when you close it. The site and ordering will still work as usual. We don't use advertising cookies.
We keep order data for as long as tax and accounting law requires. We keep account data for as long as the account exists; after a deletion request we delete it or make it anonymous, except for records the law requires us to keep. Sign-in codes expire after 15 minutes. We keep records of sent marketing emails and engagement for 2 years, an unfinished order's cart for 30 days, and records of consent and its withdrawal for as long as the account exists (as proof of consent). We keep IP addresses and browser information for 12 months. Google Analytics periods are listed above, in the cookies section.
You can ask us what data we process and request a copy of it, its correction or deletion, or a restriction of processing. You can also withdraw consent and opt out of marketing emails. We reply to requests within the time set by law. If you think your rights have been violated, you can contact Georgia's Personal Data Protection Service (personaldata.ge).
The site uses an encrypted connection (HTTPS), admin access is password-protected, and only staff who need the data to fulfill an order can access it.
People under 16 may create an account and order only with a parent's consent.
When the policy changes, we update the date on this page. For questions and requests, contact us at this address: 31 მეგობრობის გამზირი, რუსთავი 3700.