Privacy policy

This is a translation provided for convenience. The legally binding redaction is the Russian one, published at ezgusavdo.uz/ru/legal/privacy. In case of any discrepancy, the Russian text prevails.

This Policy sets out how the personal data of users of the EzguSavdo service is processed and protected, and has been drawn up in accordance with the Law of the Republic of Uzbekistan “On Personal Data” No. ZRU-547.

---

1. Key definitions

1.1. Operator — EZGUPRO LLC, which carries out the processing of personal data.

1.2. Personal data — information relating to a natural person (data subject) who is identified or identifiable on the basis of that information.

1.3. User / Customer — a person using the EzguSavdo service.

1.4. Processing of personal data — any operation (collection, organisation, storage, modification, use, transfer, anonymisation, destruction) performed on personal data.

2. Categories of data processed

2.1. Customer data (on registration and while using the Service):

• surname, first name and patronymic, or the name of the organisation;
• contact phone number, email address;
• payment details (processed by payment systems; the Operator does not store full bank card data);
• account identifiers in the connected messengers.

2.2. Data of the Customer’s own customers, processed by the Service in the course of automating communications (messages, contact details, enquiry history). In respect of this data the Customer acts as an independent operator, while the Provider acts as a party processing data on the Customer’s instructions.

2.3. Technical data: IP address, device and browser data, cookies, Service usage logs.

2.4. Data received from Meta platforms. When the Customer connects the Instagram Direct and/or WhatsApp channels, the Service receives from the Meta Platforms, Inc. platforms the data required to conduct correspondence on the Customer’s behalf (messages from the Customer’s customers, identifiers, profile data available through the official APIs). The terms for processing such data are set out in section 7 of this Policy.

3. Purposes of processing

3.1. Personal data is processed in order to:

• conclude and perform the Agreement (provide access to the Service);
• process payments and generate fiscal documents;
• provide technical support and communicate with the Customer;
• maintain the operability and security of the Service;
• comply with statutory requirements.

4. Legal grounds and consent

4.1. Processing is carried out on the basis of the data subject’s consent, as well as for the performance of a contract to which the data subject is a party, and on other grounds provided by law.

4.2. By using the Service and accepting the Public Offer, the User consents to the processing of their personal data on the terms of this Policy.

5. Storage and localisation of data

5.1. In accordance with the law of the Republic of Uzbekistan, the processing of personal data of citizens of the Republic of Uzbekistan using information technologies is carried out on technical facilities physically located within the territory of the Republic of Uzbekistan. The Operator stores such personal data on servers located within the territory of the Republic of Uzbekistan.

5.2. Personal data is stored no longer than required by the purposes of processing, or for the period established by law. Once the retention period expires, the data is destroyed or anonymised.

5.3. At the data subject’s request their data is deleted, except for information the Operator is required by law to retain (for example, accounting and tax records).

6. Transfer of data to third parties

6.1. The Operator does not sell personal data to third parties.

6.2. Data may be transferred to:

• payment systems — to process payments;
• the Fiscal Data Operator and the tax authorities — to the extent required by law;
• providers of infrastructure and technology services engaged for the operation of the Service, provided they ensure an adequate level of protection;
• public authorities — in the cases expressly provided by law.

6.3. Cross-border transfer of personal data is carried out only in compliance with the requirements of the law of the Republic of Uzbekistan and where an adequate level of protection is ensured.

7. Special terms for data received from Meta platforms

7.1. When the Customer connects the Instagram Direct and/or WhatsApp channels, the Service receives data from the Meta Platforms, Inc. platforms (hereinafter — “Meta Platform Data”): messages from the Customer’s customers, identifiers and profile data required to receive and handle enquiries and to conduct correspondence on the Customer’s behalf.

7.2. The Operator uses Meta Platform Data solely to provide the service to the Customer to whom that data belongs: receiving inbound messages, replying to customers, advising them, helping them choose a product and place an order, and passing the order to the Customer’s back-office system.

7.3. The Operator does not use Meta Platform Data for its own purposes. In particular, the Operator does not sell or transfer it to third parties for advertising or targeting purposes, does not use it to build advertising profiles, does not combine data belonging to different Customers, and does not use it for purposes unrelated to providing the service to the relevant Customer.

7.4. Meta Platform Data is stored no longer than necessary to provide the service to the Customer and is deleted at the Customer’s request or when the provision of the service ends, except for information subject to statutory retention.

7.5. Meta Platform Data is processed in accordance with the applicable Meta platform terms (Meta Platform Terms and Developer Policies) and the law of the Republic of Uzbekistan, including the localisation requirements set out in section 5 of this Policy.

8. Protection measures

8.1. The Operator applies organisational and technical measures to protect personal data against unlawful access, alteration, disclosure or destruction, including encryption, access-rights segregation, data isolation between Customers (tenants), audit logging of administrator actions and a secure connection (SSL/TLS).

9. Rights of the data subject

9.1. The data subject has the right to:

• obtain information about the processing of their data;
• require the correction, blocking or destruction of data if it is incomplete, outdated or processed in breach of the law;
• withdraw consent to processing;
• appeal against the Operator’s actions to the authorised public body and to court.

9.2. Enquiries regarding the processing of personal data should be sent to i@ezgupro.uz.

10. Cookies

10.1. The Site uses cookies to keep the service operational and to improve its quality. By continuing to use the Site, the User agrees to the use of cookies. The User can disable cookies in their browser settings.

11. Changes to the Policy

11.1. The Operator may amend this Policy. The current redaction is published at ezgusavdo.uz.

12. Operator details

EZGUPRO LLC (ООО «EzguPro»)

• Tax ID (INN): 313189635
• Registered address: Republic of Uzbekistan, Tashkent, Yakkasaray district, MFY Meros, 186/188 Bogiboston St.
• Official email: i@ezgupro.uz
• Support: i@ezgusavdo.uz
• Phone: +998 93 933 90 90
• Website: ezgusavdo.uz