Privacy Policy

This Policy describes how personal data is processed in the https://traveluzbekistan.to website and the "traveluzbekistan.to" mobile application (the "Service").

Data controller: "PRODUCTLAB" LLC («PRODUCTLAB» MCHJ), TIN (STIR) 312 329 452, registered address: Republic of Uzbekistan, Samarkand Region, Samarkand District, Konigil MFY, 49 Samarkand Darvozasi Street, email: info@traveluzbekistan.to.

The Policy follows the Law of the Republic of Uzbekistan on Personal Data of 2 July 2019 No. ZRU-547, the Law on Informatisation, the Law on Electronic Commerce (ZRU-792) and other Uzbek legislation.

Only data needed to run the Service is processed:

• Sign-in identifiers: a mobile number in +998XXXXXXXXX format or an email address, and the Google or Apple account identifier where those sign-in methods are used.
• Profile data provided voluntarily: first and last name, date of birth, gender, country, interface language, profile picture.
• Partner data: company name, business type, contact details and the listings a partner publishes.
• User content: saved places, reviews, ratings, uploaded images.
• Technical data: IP address, device and app type and version, a device identifier for sessions, system language, request timestamps, pages viewed.
• Consent records: which revision of a document was accepted, when and from which device — kept so that consent can be evidenced.

The Service does not request or process special categories of personal data (health, religious beliefs, biometrics) and does not collect precise location in the background. Location is used only on request, for example to show nearby places, and is not stored on the server.

• creating an account and signing in with a one-time code;
• providing Service features: favourites, personal selections, interface language;
• publishing and moderating partner listings;
• responding to enquiries from users and partners;
• security: preventing fraud, code guessing and abuse;
• anonymised traffic statistics used to improve the Service;
• complying with obligations under Uzbek law.

Data is not used for automated decision-making with legal effects and is not sold to third parties.

• consent of the data subject (art. 16 of the Law on Personal Data), given at registration and revocable at any time;
• performance of a contract to which the data subject is a party — the Terms of Use and the partner offer;
• compliance with the controller's statutory obligations.

Account data is kept while the account exists. After deletion it is erased within 30 days, except for data whose retention period is set by law and anonymised statistics that cannot identify a user.

One-time codes are stored as irreversible hashes and expire after a short period.

The controller uses service providers that process personal data solely on its instructions and only as far as the service requires. Such providers receive no more than the minimum data without which the relevant function of the Service cannot work.

Cross-border transfer of personal data (for example, email addresses passed to message delivery services abroad) takes place on the basis of the data subject's consent (art. 27 of the Law on Personal Data) and strictly for transit (communication) purposes, to technically enable the delivery of messages. The Operator warrants that foreign service providers act solely as processors, do not use the data for their own purposes and do not build independent databases from it.

Data may be disclosed to state authorities on a reasoned request in the cases and manner provided by law.

Under arts. 20–26 of the Law on Personal Data you may:

• find out whether your data is processed and obtain information about the processing;
• require correction, blocking or erasure of data that is incomplete, outdated, inaccurate or unlawfully obtained;
• withdraw your consent to processing;
• delete your account — in the mobile app profile section or by contacting the controller;
• appeal the controller's actions to the competent state authority or to a court.

Requests go to info@traveluzbekistan.to and are answered within the statutory period and in any case no later than 30 calendar days from receipt. The controller may ask you to confirm that the request comes from the data subject.

Legal, organisational and technical measures are in place: access is limited by roles and permissions, connections are protected with TLS, passwords and one-time codes are stored as hashes, sessions rely on short-lived tokens, and access is logged.

The website uses cookies and similar technologies. They are described in the Cookie Policy.

The Service is not intended for persons under 14. Data of persons aged 14 to 18 is processed with the consent of their legal representatives.

The current revision is published in the Service with its version and effective date. Where processing changes materially, users are notified in the Service and fresh consent is requested if required.

• Controller: "PRODUCTLAB" LLC («PRODUCTLAB» MCHJ)
• Address: Republic of Uzbekistan, Samarkand Region, Samarkand District, Konigil MFY, 49 Samarkand Darvozasi Street
• Email: info@traveluzbekistan.to
• Phone: +998 92 082-44-48