Personal data processing policy

1. Data operator

The personal data operator is the Tour Operator, whose details are given at the end of this Policy and on the contacts page.

This Policy applies to all personal data the Tour Operator receives through the site, by telephone, via messengers and in person.

2. What data is processed

When a request is submitted through the site: the name, phone number and message text you provide voluntarily.

When a trip is arranged, additionally: travellers' surnames and given names, passport details, date of birth and citizenship — to the extent required for booking, visa processing and ticket purchase.

Technical visit data: IP address and time of the request — stored in the server log and used to protect against automated submissions.

The Tour Operator does not process biometric or genetic personal data and does not request it from site visitors.

3. Purposes of processing

Contacting you about the request you submitted and selecting a trip option.

Concluding and performing the travel services contract: booking, issuing travel documents and visas, arranging accommodation.

Fulfilling obligations imposed on the Tour Operator by law, including tax and accounting records.

Data is not used for marketing messages without your separate consent.

4. Legal basis

The consent of the data subject, given by ticking the consent box when submitting a request.

Performance of a contract to which the data subject is a party.

Fulfilment of obligations laid down by the law of the Republic of Uzbekistan.

Consent may be withdrawn at any time by contacting us using the details in the «Enquiries» section.

5. Methods of processing

Data is collected through the forms on this site — the enquiry form and the seat booking form — and through the Telegram bot when you confirm your phone number.

Processing is automated, by means of computing equipment: the data is stored in the booking system database and processed by software without manual entry.

Data is passed to the Tour Operator's staff who need it to provide the service, and to counterparties to the extent required for the trip.

Depersonalised data, from which no individual can be identified, is used for statistics.

When the retention period expires, or at your request, the data is destroyed.

6. Automated processing and decisions

Decisions producing legal consequences are not taken solely by automated processing.

The site runs automatic protection of its forms: a limit on the number of submissions from one connection per hour and filtering of automated submissions. Its only consequence is that the submission is not accepted, and the visitor is shown a way to contact a manager directly.

If such a limit was applied wrongly, you have the right to object: write to us marking the message “Personal data”. We reply in writing within ten days.

7. Retention period

Data from requests that did not lead to a contract is kept for 24 months from the date of the enquiry and is then deleted.

Data on completed trips is kept for the period laid down by law for accounting and tax records.

If consent is withdrawn, the data is deleted, except for information that must be kept by law.

8. Transfer to third parties

Data is transferred only to the extent required to deliver the service: to carriers, accommodation providers, insurers, consular authorities and visa centres, and payment organisations.

The Tour Operator does not sell personal data and does not transfer it for purposes unrelated to delivering the service.

Requests submitted on the site are forwarded to the Tour Operator's staff through the Telegram messenger, whose servers are located outside the Republic of Uzbekistan. This constitutes a cross-border transfer of personal data. The basis for that transfer is your consent, given when you submit the request. If you would prefer your data not to be transferred in this way, please contact us by phone or in person.

The requirement to store personal data within the Republic of Uzbekistan, in force from 27 March 2026, applies to biometric and genetic data, which the Tour Operator does not process.

9. Rights of the data subject

To be told what data about you is processed and for what purpose.

To require data to be corrected, blocked or destroyed where it is incomplete, out of date, inaccurate or obtained unlawfully.

To withdraw consent to processing.

To appeal against the Tour Operator's actions to the competent state authority or to a court.

10. Security measures

The site operates over the secure HTTPS protocol.

Only those Tour Operator staff who need it for their work have access to request data; access is protected by individual accounts.

Staff actions on the data are recorded in a log that cannot be altered.

Service access keys are stored outside the public part of the site and are never sent to a visitor's browser.

11. Cookies and analytics

The site stores your chosen interface language in the browser. This is a technical record required for the site to work.

No third-party advertising or analytics scripts are placed on the site.

12. Changes to the Policy

The Tour Operator may amend this Policy. The current version is always published on this page with its date.

Material changes are brought to the attention of data subjects at their next enquiry.

13. Enquiries

Enquiries about personal data processing should be sent to the contact details below marked «Personal data».

An enquiry is considered within 15 days of receipt.

Personal data is changed and supplemented no later than three days from your request. Inaccurate data is corrected without delay from the moment the discrepancy is established.

14. Operator details