Privacy Policy
PRIVACY POLICY AND PERSONAL DATA PROCESSING
Online platform for tourism products: Localtour . uz
Publication date: April 3, 2026.
Localtour.uz online travel platform ( hereinafter referred to as the "Platform"), the use of cookies and similar technologies, and measures to protect personal data. This Policy has been developed in compliance with the requirements of the legislation of the Republic of Uzbekistan on personal data and e-commerce. This Policy is part of the contractual terms applicable to users of the Website (including the public offer, if posted on the Website).
By using the Website and/or placing an order, the User confirms that they have read this Policy. If the User does not agree with the terms of this Policy, they should refrain from using the Website and providing personal data.
1. Personal data operator and contacts
Operator (owner and/or operator of the personal data base): Localtours LLC ( hereinafter referred to as the “Company”, “Operator”).
Legal address : Tashkent city, Mirzo-Ulukbek district, Okibat MFY, Mustakillik shoh kuchasi street 7.
INN: 312 209 070
E - mail for inquiries from personal data subjects: info @ localtour .uz
Phone/messenger: (+ 998 90) 014-11-15.
The User may use the specified contacts to send requests, applications, and requests related to the processing of personal data, as well as report possible privacy violations.
2. Terms and definitions
Personal data is any information that relates to a specific individual or that allows him or her to be identified.
Personal data subject is an individual to whom the personal data relates (User, order recipient, etc.).
Personal data processing is any action (operation) or set of actions with personal data (collection, recording, systematization, storage, clarification, use, transfer, depersonalization, blocking, destruction, etc.).
Automated processing is the processing of personal data using computer technology.
A personal database is a collection of personal data structured in such a way as to enable the search and processing of such data.
Cookies are small pieces of data stored on the User's device and used for the correct operation of the Site, security, and analytics.
Transfer of personal data – provision of personal data to third parties (including instruction for processing).
Cross-border transfer is the transfer of personal data to the territory of a foreign state.
User – a person visiting the Site and/or placing an order on the Site.
3. What data do we collect?
We collect only the data that is necessary for the operation of the Site and the fulfillment of orders, or that is provided voluntarily by the User.
Data categories may include:
Identification data: full name (if necessary), date of birth, passport details (for booking tour products), gender (optional).
Contact information: phone number, e - mail , delivery address, comments, preferred method of communication.
Account details (if a personal account is created): login/ ID , login history, settings, consent information (e.g., marketing consent). The Operator does not store passwords in plaintext (secure storage mechanisms are used).
Order details: order contents, cost, status, support request history, returns/exchanges, complaints, correspondence and call recordings (if any).
Payment data: The Operator does not store full bank card details; payments are processed through payment providers. The Operator may receive technical payment identifiers and status (successful/rejected/refunded) from the provider.
Technical and automatic data: IP address, cookies , user agent , device/browser identifiers, information about actions on the Site, diagnostic information (errors), and analytical data.
Additional data that the User may provide voluntarily: reviews, photographs (for example, when filing a complaint), and other information in messages.
The Operator does not request or process special categories of personal data (e.g., information about health, religious beliefs, etc.) unless required by law. If the User voluntarily provides such information, they do so on their own initiative, and the Operator will use it only for the purpose of processing the request and to the extent necessary.
4. Purposes and legal basis for processing
The operator processes personal data for the following purposes:
providing access to the functionality of the Site, registration and maintenance of a personal account;
processing, confirming and fulfilling orders, including assembly, delivery, pickup, returns and exchanges (if applicable);
payment processing and refunds;
Communication with the User regarding the order: confirmations, statuses, delivery notifications, electronic receipts/invoices, support responses;
consideration of claims and complaints, quality checks, examinations (if applicable), dispute resolution;
compliance with legal requirements (including accounting and tax records, responses to government inquiries);
ensuring the security of the Site and Users, preventing fraud, abuse and violations of the rules;
improving the quality of service, developing the Site, demand analysis and statistics (including in anonymized form);
Marketing communications and personalized offers - only with consent (if consent is required by law) and with the option to refuse.
Legal grounds for processing may include:
consent of the personal data subject (e.g. for marketing communications or optional features);
the need to conclude and/or execute an agreement with the User (including a public offer), including delivery and returns;
performance of duties imposed on the Operator by law;
the Operator's legitimate interests (e.g., ensuring security, preventing fraud, protecting rights in claims and litigation), subject to the observance of the rights of subjects.
5. Sources of data
directly from the User (forms on the Site, personal account, correspondence, calls, requests);
automatically when using the Site ( cookies , technical logs, device data);
from partners involved in order fulfillment (delivery services, travel service partners, payment providers) - to the extent necessary to confirm payment/delivery and returns;
The Operator does not purchase personal databases or obtain data from dubious sources. If the User provides data of third parties (e.g., an order recipient), the User confirms that they have a legal basis for such provision and has informed the relevant party of the data processing terms.
6. How we process data
Personal data may be processed both automatically and manually. The operator performs the following operations: collection, recording, systematization, storage, clarification, use, transfer, anonymization, blocking, and destruction.
The Operator may use automated security rules and anti-fraud filters (e.g., to identify suspicious orders). Such mechanisms are aimed at protecting Users and the Operator and must not violate the rights of personal data subjects.
7. Cookies and similar technologies
Cookies help the Site function correctly (for example, remembering the shopping cart), ensure security and allow analysis of Site usage.
We may use the following types of cookies :
strictly necessary (without them the Site will not function correctly);
functional (remember the User’s settings);
analytical (help us understand how Users use the Site);
Marketing (used to personalize offers and advertising, if applicable).
The User can manage cookies through their browser settings. Restricting cookies may affect certain features of the Website. If a cookie management banner/center is embedded on the Website , the User can use it for more detailed settings.
8. Transfer of data to third parties
The operator may transfer personal data to third parties only to the extent necessary for the purposes of processing and if there is a legal basis. Specifically, data may be transferred:
delivery services/couriers and logistics partners - for delivery and confirmation of delivery;
payment organizations and providers - to process payments and refunds;
IT infrastructure and service providers (hosting/cloud, CRM , call center, mailing lists, web analytics) - to ensure the operation of the Site and service;
to affiliated persons (if any) - for internal administrative and operational purposes;
to government agencies - upon legal request and/or in the performance of duties under the law.
Transfers are made on the basis of agreements stipulating recipients' obligations to maintain confidentiality and data protection, or in accordance with legal requirements. The operator reserves the right to disclose data to its consultants (lawyers, auditors) to the extent necessary to protect their rights and legitimate interests, provided they maintain confidentiality.
9. Cross-border transfer
When shipping internationally and/or using services located outside the Republic of Uzbekistan, cross-border transfer of personal data may be required. Such transfer is carried out in the presence of legally established grounds (e.g., consent of the subject, the need to fulfill a contract, or other grounds permitted by law) and in accordance with the requirements of the legislation of the Republic of Uzbekistan.
If necessary, the Operator may limit the volume of transmitted data and use security measures (e.g. encryption of communication channels, contractual confidentiality obligations, selection of reliable service providers).
10. Localization, storage and security
The operator ensures the collection, systematization and storage of personal data of citizens of the Republic of Uzbekistan in personal data bases on technical means physically located on the territory of the Republic of Uzbekistan, and registers personal data bases (if necessary) in accordance with the established procedure.
The operator applies organizational and technical security measures, including, but not limited to:
delimitation of access rights and the principle of "minimum necessary access";
control of access to systems and logging of actions;
use of secure communication channels, network protection and up-to-date software updates;
data backup and recovery;
internal regulations and employee training, access to data only for authorized persons;
security incident response procedures, including notification of users and/or government agencies, if required by law.
11. Storage periods
Personal data is stored no longer than is necessary for the purposes of processing, as well as for the periods established by law (including for accounting and tax purposes), and/or for the limitation period to protect the rights and legitimate interests of the Operator.
As a general guideline, order and payment data is retained for the period necessary to fulfill obligations and resolve potential claims and disputes. Once the processing purposes have been achieved, the data is destroyed or anonymized, unless otherwise required by law.
12. User rights and application procedure
The user (subject of personal data) has the right, within the limits and in the manner established by law:
receive information about the processing of your personal data;
demand clarification (correction) of incomplete, inaccurate or outdated data;
demand blocking or destruction of data if there are grounds for doing so;
revoke consent to the processing of personal data (in the form in which consent was provided, or in another form permitted by law);
unsubscribe from marketing communications at any time.
To exercise rights, the User sends a request using the contacts in Section 1. It is recommended that the request include: full name (if known), telephone number/ e - mail , the nature of the request and, if available, the order number.
The Operator reserves the right to request information to confirm the applicant's identity and/or the authority of the representative to prevent unauthorized access to data. The Operator will review requests within the timeframes stipulated by law and take reasonable measures to provide a response.
13. Marketing newsletters
Marketing messages ( SMS / email / push ) are sent with the User 's consent or in other cases expressly permitted by law. Service-related messages (e.g., order confirmation, delivery status, receipt, return notifications) may be sent as part of contract fulfillment.
Users can opt out of marketing communications at any time via the "Unsubscribe" link, their personal account settings, or by contacting the Operator. Opting out of marketing does not affect the receipt of service-related messages regarding orders.
14. Minors
The Operator's website and products/services are not intended for individuals who lack the necessary legal capacity to enter into transactions under the law. If the Operator learns that a minor's data has been provided without the required consent of their legal representatives (where such consent is required), the Operator reserves the right to delete such data and terminate the account.
15. Policy Changes and Final Provisions
The Operator reserves the right to update the Policy. The current version is posted on the Website. If changes materially affect Users' rights or require additional consent by law, the Operator will take reasonable measures to notify Users.
The Policy may be published in Russian and Uzbek. In the event of any discrepancies, the version designated by the Operator as the primary version on the Website shall prevail.
For matters not regulated by this Policy, the legislation of the Republic of Uzbekistan shall apply.