Personal data processing policy

1. Data operator

The personal data operator is the Agency, whose details are given at the end of this Policy and on the contacts page.

This Policy applies to all personal data the Agency receives through the site, by telephone, via messengers and in person.

2. What data is processed

When a request is submitted through the site: the name, phone number and message text you provide voluntarily.

When a trip is arranged, additionally: travellers' surnames and given names, passport details, date of birth and citizenship — to the extent required for booking, visa processing and ticket purchase.

Technical visit data: IP address and time of the request — stored in the server log and used to protect against automated submissions.

The Agency does not process biometric or genetic personal data and does not request it from site visitors.

3. Purposes of processing

Contacting you about the request you submitted and selecting a trip option.

Concluding and performing the travel services contract: booking, issuing travel documents and visas, arranging accommodation.

Fulfilling obligations imposed on the Agency by law, including tax and accounting records.

Data is not used for marketing messages without your separate consent.

4. Legal basis

The consent of the data subject, given by ticking the consent box when submitting a request.

Performance of a contract to which the data subject is a party.

Fulfilment of obligations laid down by the law of the Republic of Uzbekistan.

Consent may be withdrawn at any time by contacting us using the details in the «Enquiries» section.

5. Retention period

Data from requests that did not lead to a contract is kept for 24 months from the date of the enquiry and is then deleted.

Data on completed trips is kept for the period laid down by law for accounting and tax records.

If consent is withdrawn, the data is deleted, except for information that must be kept by law.

6. Transfer to third parties

Data is transferred only to the extent required to deliver the service: to carriers, accommodation providers, insurers, consular authorities and payment organisations.

The Agency does not sell personal data and does not transfer it for purposes unrelated to delivering the service.

Requests submitted on the site are forwarded to Agency staff through the Telegram messenger, whose servers are located outside the Republic of Uzbekistan. This constitutes a cross-border transfer of personal data. The basis for that transfer is your consent, given when you submit the request. If you would prefer your data not to be transferred in this way, please contact us by phone or in person.

The requirement to store personal data within the Republic of Uzbekistan, in force from 27 March 2026, applies to biometric and genetic data, which the Agency does not process.

7. Rights of the data subject

To be told what data about you is processed and for what purpose.

To require data to be corrected, blocked or destroyed where it is incomplete, out of date, inaccurate or obtained unlawfully.

To withdraw consent to processing.

To appeal against the Agency's actions to the competent state authority or to a court.

8. Security measures

The site operates over the secure HTTPS protocol.

Only Agency staff who need it for their work have access to request data; access is protected by individual accounts.

Staff actions on the data are recorded in a log that cannot be altered.

Service access keys are stored outside the public part of the site and are never sent to a visitor's browser.

9. Cookies and analytics

The site stores your chosen interface language in the browser. This is a technical record required for the site to work.

No third-party advertising or analytics scripts are placed on the site.

10. Changes to the Policy

The Agency may amend this Policy. The current version is always published on this page with its date.

Material changes are brought to the attention of data subjects at their next enquiry.

11. Enquiries

Enquiries about personal data processing should be sent to the contact details below marked «Personal data».

An enquiry is considered within 15 days of receipt.

12. Operator details