Photography and personal data on tour

A tour needs some personal data — a name for the hotel, a flight number for the driver. This page says exactly what we collect, why, for how long, and what we do with photographs. The privacy policy covers the website; this covers the trip.

What we collect

• To book: names, e-mail, phone or WhatsApp, number and ages of travellers, dietary and mobility needs you choose to tell us.
• To run the tour: hotel address, flight number, and for multi-day tours with hotel registration, passport details as Georgian hotels are required to record by law.
• To pay: the bank handles card data; we keep the transaction reference and the last four digits.

Who sees it

Only the people who need it to deliver the tour: our office, your guide and driver (names, hotel, needs), the hotels (names and passport data for registration). Nothing is sold or shared with advertisers. Suppliers are bound by our supplier code.

How long we keep it

Booking and payment records: as long as Georgian tax law requires (currently six years). Guides and drivers delete guest data after the tour. Health and mobility notes are deleted 30 days after the tour unless you ask us to keep them for a future trip.

Photographs

• Your guide will take photographs for you on request, on your device.
• We publish a photograph in which a guest is recognisable only with that guest’s explicit, separate permission, which can be withdrawn at any time by e-mail; we then remove the picture within 7 days.
• Our website avoids identifiable faces as a rule; festival pages show public events as they happen.
• Please ask before photographing local people, and do not photograph children without a parent’s consent.

Messages

WhatsApp and e-mail conversations about a booking are kept with the booking record. If you write a review, it is published with the first name and country you give; e-mail addresses are never published.

Your rights

Ask us at info@castle.ge to see, correct or delete your data; we reply within 10 days. Georgian residents may complain to the Personal Data Protection Service of Georgia; EU residents keep their rights under the GDPR, which we honour for all guests.

G Tour is a brand of Sheni LLC (შპს „შენი“, identification number 406548222, registered 9 February 2026, legal address Gorgasali Lane 3, Krtsanisi district, Tbilisi; director Ioseb Demetrashvili). Office: Castle in Old Town, 3 Betlemi Rise, 0105 Tbilisi. Paris office: 32 Boulevard de Rochechouart, 75018 Paris. Contact: info@castle.ge, WhatsApp +995 577 41 63 14. Version 1.0 — 26 October 2026. This document is reviewed at least once a year and whenever the law or our practice changes; the date above is the date of the current version.