Who we are
HirePoint is a trading name of LTD Tergis Khma, a company registered in Georgia under identification number 406 284 943. LTD Tergis Khma is the controller of the personal data described in this document, for the purposes it determines.
- Registered address: Apartment 86, Building 13, Vazisubani 1st Microdistrict, Isani-Samgori District, Tbilisi 0152, Georgia
- Business address: Kostava 14, Stamba, D Block, Tbilisi, Georgia
- Privacy requests: privacy@hirepoint.ge
We have not designated a Data Protection Officer. The address privacy@hirepoint.ge is our contact point for privacy questions and requests; it is not a Data Protection Officer contact.
This Privacy Policy explains how we process personal data when you visit our website or contact us. If you are a candidate or professional, our Candidate Privacy Notice gives more detail about recruitment-related processing.
Applicable law
We process personal data in accordance with the Law of Georgia on Personal Data Protection. The EU General Data Protection Regulation (GDPR) does not apply to all of our activities automatically. It may apply where we offer our services to individuals in the European Union or process their personal data in that context — for example, when we correspond with contact persons at EU-based client companies. Where the GDPR applies, we describe the corresponding legal bases and rights below.
Personal data we collect
Company inquiry form
When you use the form on our contact page, we collect your full name, business email, company, country, the position or talent profile you need, the number of hires, your hiring timeline, the services you are interested in and any optional message.
Professional form
When you use the form on our professionals page, we collect your full name, email, role or specialisation, years of experience, an optional LinkedIn profile or CV link and, if you tick the optional box, your consent to remain in our talent network. See our Candidate Privacy Notice.
Email and other correspondence
If you email us, we process your contact details and the content of your message.
Technical data
When you visit the website, our hosting provider and font provider process technical data such as your IP address, browser information and the time of your request.
Purposes and legal bases
We use personal data for the purposes below. For each purpose, we rely on the legal grounds available under Georgian law and, where the GDPR applies, the corresponding basis under Article 6 GDPR.
| Purpose | Legal basis |
|---|---|
| Responding to inquiries and managing the business communication you requested | Our legitimate interest in responding to business inquiries; and, where you are considering our services, steps taken at your request before entering into a contract |
| Preparing proposals and providing services to client companies | Performance of a contract or steps before entering into one; our legitimate interests in managing client relationships |
| Assessing professional profiles and communicating about opportunities | See our Candidate Privacy Notice |
| Operating, securing and troubleshooting the website | Our legitimate interest in providing a secure, functioning website |
| Keeping records and meeting legal obligations | Compliance with legal obligations, such as accounting and tax requirements |
| Establishing, exercising or defending legal claims | Our legitimate interests |
Acknowledging this Privacy Policy is not the same as giving consent. Where we rely on consent, we ask for it separately and you can withdraw it at any time.
We do not make decisions about you based solely on automated processing that produce legal or similarly significant effects.
Recipients and service providers
We use the following service providers:
- Web3Forms — receives form submissions from our website, delivers them to our email inbox and keeps a submission history for up to 30 days.
- Netlify — hosts this website and may process visitors’ IP addresses and related technical data in server logs.
- Google Fonts — provides the fonts used on this website and receives visitors’ IP addresses when the fonts are requested.
- Google Workspace (including Gmail and Google Drive) — provides our business email and is used to store information after we receive it.
Depending on their actual role and the contractual terms that apply, these providers may act as processors on our behalf or as independent controllers of some data (for example, data they process for their own security or service-improvement purposes). Their own privacy notices apply to such processing.
We may also share personal data:
- with client companies — only candidate profiles, and only with the candidate’s consent, as described in our Candidate Privacy Notice;
- with benefit partners chosen by a professional — only the data necessary to arrange the benefit, and with consent where required;
- with professional advisers, such as lawyers and accountants, where necessary;
- with public authorities, where we are legally required to do so.
We do not sell personal data.
International transfers
Some of our service providers, and some recipients such as client companies, may process personal data outside Georgia or the European Economic Area, including in the United States.
Where applicable law requires safeguards for such transfers, we will make the transfer only on the basis of a lawful transfer mechanism, such as an adequacy decision or appropriate contractual clauses offered by the provider. You can contact privacy@hirepoint.ge for more information about the mechanism that applies to a specific transfer.
How long we keep data
We keep personal data only for as long as it is needed for the purposes described in this document, or for longer where this is permitted or required by law — for example, to meet accounting obligations or to establish, exercise or defend legal claims. When data is no longer needed, we delete it or make it anonymous. We review the information we hold periodically.
Cookies and tracking
This website currently does not use cookies, analytics tools or advertising trackers, and it does not store information in your browser for tracking purposes. Because of this, we do not show a cookie banner.
This does not mean that no personal data is processed: the forms and the technical services described above process personal data, such as form contents and IP addresses. If we introduce cookies or similar technologies that require consent, we will update this policy and ask for your consent before using them.
Security
We take steps intended to protect personal data in a way that is appropriate to its nature and the risks involved, including limiting access to personal data to people who need it for the purposes described in this document, and using the account security features offered by our service providers.
No method of transmission over the internet or of electronic storage is completely secure, so we cannot guarantee absolute security.
Your rights
Depending on the applicable law and the circumstances, you may have the right to:
- Access — ask whether we process your data and receive a copy of it.
- Rectification — ask us to correct inaccurate or incomplete data.
- Erasure — ask us to delete your data.
- Restriction — ask us to limit how we use your data.
- Objection — object to processing based on our legitimate interests.
- Portability — where processing is based on consent or a contract and carried out by automated means, receive your data in a structured, commonly used format.
- Withdrawal of consent — where we rely on consent, withdraw it at any time. This does not affect processing carried out before the withdrawal.
These rights are not absolute and may be limited where the law allows, for example where we must keep certain data to comply with a legal obligation.
How to make a request
- Email privacy@hirepoint.ge.
- Tell us what your request is about and give us enough information to locate your data (for example, the email address you used and approximately when you contacted us).
- We may ask you to verify your identity when this is reasonably necessary to protect your data.
- We will respond within the time limits set by applicable law.
- If we cannot fully meet your request — for example, if we must keep certain data to comply with a legal obligation — we will explain the reason and any relevant retention requirement.
Complaints
If you have concerns about how we handle your personal data, please contact us first so that we can try to resolve them. You also have the right to lodge a complaint with the Personal Data Protection Service of Georgia. Where the GDPR applies, you may also lodge a complaint with the data protection supervisory authority in the EU member state where you live, work, or where the alleged infringement took place.
Children
Our website and services are intended for businesses and adult professionals. They are not directed at people under 18, and we do not knowingly collect their personal data.
Changes to this policy
We may update this policy from time to time, for example when our services or the technologies we use change. The date at the top of this page shows when it was last updated. Where changes are significant, we will take reasonable steps to bring them to your attention.
Questions about this document? Email privacy@hirepoint.ge.