Privacy policy

What information we collect when you apply, why, and who may receive it.

Working draft — not legally approved

This page describes how the website works technically, but it is not a legally reviewed or approved document. Before public launch it must be reviewed by a lawyer familiar with Georgian law (including personal data protection and the data of minors). Highlighted places mark information the academy must provide or confirm. Working draft 0.1 · 2026-10-27

1. Who processes the data

HOMEOSTASIS (ჰომეოსტაზი) — an online academy.

[Needs confirmation: the legal entity / sole trader name, identification code and address]

2. What information we collect

Only what you enter yourself in the application or consultation form:

first name, last name, phone, e-mail (optional);
educational stage and age category (18 or older / under 18) — we do not ask for a date of birth;
for applicants under 18 — the name, phone and e-mail (optional) of a parent or legal guardian;
the desired course, subject, format, knowledge level, preferred days, times and language of instruction;
stage-specific details: grade; university, topics, exam date; international programme, level, exam board; language level and goal;
for a consultation request — name, contact details, subject, a short goal and the preferred contact time;
an optional comment;
the page or course the application was sent from (e.g. “course-page:igcse-chemistry”);
the interface language (Georgian or English) used when sending the application.

What we do not ask for: personal ID numbers, home addresses, health or other sensitive data, or documents. Please do not include such information in comments either. Uploading files (including a PDF syllabus) is currently not enabled on the website.

In your browser: your form selections (e.g. course, format) are kept temporarily only in your browser (sessionStorage) so they are not lost when you move between pages. Your name, phone, e-mail and comment are not stored there and disappear when the tab is closed. When you switch language, the data you entered is handed to the new page for a moment (in the same tab) and deleted immediately; consent is asked again in the new language.

Language choice: your chosen language is kept in a browser cookie (NEXT_LOCALE) only so that the site opens in the same language next time. We do not use your browser language.

Technical: to protect against abuse, the server temporarily uses the request origin (IP) in memory; this information is not stored separately and is not written to logs.

3. Why we process it

to review applications and consultation requests and to contact you;
to confirm the group, schedule and terms;
for internal record-keeping of applications (status, notes).

[Needs confirmation: the legal basis for processing (e.g. consent) and its wording must be confirmed by a lawyer]

4. Who may receive the data

the academy administrator — the application is passed to them by e-mail (the notification is written in Georgian);
the e-mail delivery service provider (technically Resend), through which this message is sent;
the website hosting provider (Vercel is planned);
optionally, if enabled — Google Sheets, for internal record-keeping of applications. The spreadsheet is not public.

[Needs confirmation: the final list of providers, the terms agreed with them and their status as data processors]

5. Transfers abroad

The providers listed above may process data outside Georgia.

[Needs confirmation: the legal requirements and necessary safeguards for international transfers]

6. How long we keep it

[Needs confirmation: the retention period and deletion procedure — to be defined and confirmed by the academy]

The period is deliberately not stated in this document because it has not been approved yet.

7. Your rights

You may request information about your data, its correction or deletion, and withdraw your consent. For applicants under 18, a parent or legal guardian may also exercise these rights.

[Needs confirmation: how requests are submitted and the response times]

8. Minors

The application asks for an age category: 18 or older / under 18. An application from someone under 18 must be submitted with the involvement of a parent or legal guardian, and we only ask for their contact details. We do not collect a child's date of birth, personal ID number or address.

[Needs confirmation: the age threshold for a child's consent and the mandatory rule for parent/guardian consent under current Georgian law — a lawyer must confirm that the 18-year threshold is correct]

9. Analytics

The website currently does not use third-party analytics or advertising scripts. In future, analytics may be added only with your consent and without personal information (e.g. which course page was opened).

10. Contact

[Needs confirmation: the academy's contact e-mail and phone for data protection requests]