PRIVACY POLICY

This Privacy Policy (hereinafter — the "Policy") applies to all information that the website lazafade.uz (hereinafter — the "Website") may obtain about the User while the User is using the Website.

Using the Website means the User unconditionally agrees to this Policy and the terms of processing their personal data set out in it. If the User does not agree with the terms of the Policy, the User must stop using the Website.

General provisions

This Policy has been developed in accordance with the Constitution of the Republic of Uzbekistan, the Law of the Republic of Uzbekistan No. LRU-547 of 2 July 2019 "On Personal Data" (hereinafter — the Personal Data Law) and other regulatory legal acts of the Republic of Uzbekistan in the field of personal data.

• owner and/or operator — TOJIBOYEV ABDULLAZIZ ABDULATIF O'G'LI, 51807017040065 (hereinafter — the "Operator"), who, independently or jointly with other persons, organizes and/or carries out the processing of personal data, and determines the purposes of processing personal data, the composition of personal data to be processed, and the actions (operations) performed with personal data;
• User — any individual using the Website;
• personal data — any information relating to a directly or indirectly identified or identifiable individual (data subject);
• processing of personal data — any action (operation) or set of actions (operations) performed with personal data, with or without the use of automation tools;
• automated processing of personal data — processing of personal data using computing equipment;
• disclosure of personal data — actions aimed at revealing personal data to a certain person or a certain group of persons;
• cross-border transfer of personal data — the transfer of personal data to the territory of a foreign state.

Categories of personal data

The Operator processes the following personal data of the User:

• name (or alias) provided by the User;
• phone number;
• the name of the master the User is booking with;
• date of the appointment;
• the type of service the User is booking;
• cost of the service;
• data automatically transmitted to the Website's server when it is visited, including: IP address, browser type, operating system, date and time of the visit, addresses of the pages requested, information about activity on the Website, and cookies.

Purposes of processing personal data

The Operator processes the User's personal data for the following purposes. Processing personal data for any other purpose is not permitted:

• booking the User for barbershop services and enabling use of the online booking service;
• identifying the User and contacting them regarding bookings and service delivery;
• keeping records of services provided and booking statistics;
• improving the quality and usability of the Website.

Legal grounds for processing personal data

The legal grounds for the Operator's processing of personal data are:

• the Constitution of the Republic of Uzbekistan;
• the Law of the Republic of Uzbekistan No. LRU-547 of 2 July 2019 "On Personal Data";
• the User's consent to the processing of personal data;
• this Privacy Policy;
• other regulatory legal acts of the Republic of Uzbekistan governing relations in the field of personal data.

Personal data is processed only with the User's consent, except in cases provided for by the legislation of the Republic of Uzbekistan.

Procedure and terms for processing personal data

The Operator processes personal data both with and without the use of automation tools.

The Operator takes the necessary legal, organizational and technical measures to protect personal data from unauthorized or accidental access, destruction, alteration, blocking, copying, disclosure, distribution, and other unlawful actions.

Only persons authorized by the Operator, who are required to maintain the confidentiality of personal data, have access to personal data.

The Operator may transfer the User's personal data to third parties only with the User's consent, except in cases established by the legislation of the Republic of Uzbekistan. The Operator notifies the User of the transfer of their personal data to third parties.

The period for processing and storing personal data is determined by the purposes of processing. Personal data is subject to destruction or depersonalization once the purposes of processing have been achieved or the need to achieve them has ceased, unless otherwise provided by the legislation of the Republic of Uzbekistan.

When collecting personal data, the Operator ensures its recording, systematization, accumulation, storage, clarification (updating, amendment) and retrieval on the territory of the Republic of Uzbekistan, using databases located on the territory of the Republic of Uzbekistan and/or beyond its borders in accordance with the legislation.

Cross-border transfer of personal data

The Operator may carry out cross-border transfer of the User's personal data to the territory of foreign states that provide adequate protection of the rights of personal data subjects, as well as to the territory of foreign states that do not provide adequate protection, provided the User has given consent and the conditions set out in the Personal Data Law are met.

Cross-border transfer of personal data may be carried out where:

• the User has consented to such a transfer;
• a contract has been concluded with the User;
• standard contractual terms approved by the authorized body are used;
• the recipient holds a certificate confirming an adequate level of data protection;
• other grounds provided for by the legislation of the Republic of Uzbekistan apply.

User rights

The User has the right to:

• receive information regarding the processing of their personal data;
• request the clarification, blocking or destruction of their personal data if it is incomplete, outdated, inaccurate, unlawfully obtained, or not necessary for the stated purpose of processing;
• withdraw consent to the processing of personal data;
• appeal the actions or inaction of the Operator to the authorized body for the protection of the rights of personal data subjects or in court;
• protection of their rights and legitimate interests, including compensation for damages and/or moral harm;
• exercise other rights provided for by the legislation of the Republic of Uzbekistan.

Cookies

The Website uses cookies and similar technologies to ensure the Website functions, to collect statistics, and to improve the quality of service.

Detailed information on the types of cookies used, the purposes of their use, and how to manage them can be found in the Cookie Policy, which forms an integral part of this Policy.

Final provisions

This Policy takes effect from the moment it is approved and published on the Website and remains in effect indefinitely until replaced by a new Policy.

The Operator has the right to amend this Policy. The new version of the Policy takes effect from the moment it is published on the Website, unless otherwise provided by the new version.

All matters not settled by this Policy are governed by the legislation of the Republic of Uzbekistan.

The User may obtain clarification on matters related to the processing of their personal data by sending a request to the email address: tadjibaev001@icloud.com.

Approval date: 21.09.2026

Operator: TOJIBOYEV ABDULLAZIZ ABDULATIF O'G'LI