Privacy policy

1. General provisions

This Policy explains how Compass Management collects, uses, stores and protects the personal data of website visitors and people who submit a request for services.

This Policy takes into account the Law of the Republic of Uzbekistan No. ZRU-547 of 2 July 2019 “On Personal Data”, as amended, and other applicable regulations. Terms have the meanings established by the legislation of the Republic of Uzbekistan.

2. Data we process

Through the website forms, we may receive:

• your name;
• your phone number;
• information you voluntarily provide in subsequent communications;
• the source of your request and the date and time it was submitted.

When you visit the website, the server and technical infrastructure may automatically record your IP address, browser and device type, technical request logs and error information. We do not request biometric, genetic or other special categories of personal data through public forms.

3. Purposes and legal grounds

We process data to:

• contact you about your request and provide a consultation;
• prepare a proposal, enter into and fulfil a contract;
• maintain the website’s functionality and security;
• fulfil obligations established by law.

The grounds for processing include your consent, steps taken at your request before entering into a contract, entering into and fulfilling a contract, and other grounds expressly provided by law. If the purpose of processing changes, we will request new consent where required by law.

4. Processing procedures and retention periods

Processing may include collecting, organising, storing, updating, using, disclosing to authorised recipients, anonymising and destroying data, solely to the extent necessary for the stated purposes.

Data is retained no longer than required by the purposes of processing or by law. Once the purpose has been achieved, consent withdrawn or the legal basis has ceased to apply, data is blocked or destroyed in accordance with the established procedure, unless continued retention is required by law.

Requirements for storing data within the Republic of Uzbekistan, registering the relevant databases and processing data outside the country apply to the extent established by Article 27¹of Law No. ZRU-547 and other applicable regulations.

5. Sharing with third parties

We do not sell personal data. To process your request, data may be accessible to Compass Management employees and contractors, as well as hosting, communications and corporate messaging providers, only to the necessary extent and subject to confidentiality and data protection requirements.

Cross-border transfers are made only where there is a legal basis and in compliance with the requirements for adequate protection, notification or other conditions applicable at the time of transfer. Data may also be provided to public authorities in the cases and according to the procedures established by law.

6. Your rights

To the extent provided by law, you have the right to:

• find out whether we process your data and obtain information about that processing;
• request the correction of inaccurate or incomplete data;
• withdraw consent and request suspension of processing where there is no other legal basis;
• seek protection of your rights from the competent public authority or a court.

When contacting us, provide the phone number used in your request, the nature of your demand and your preferred way to receive a response. We may request information necessary to verify the applicant’s identity.

7. Data protection and cookies

We take the necessary legal, organisational and technical measures to prevent unauthorised access, alteration, disclosure, loss or destruction of data. Access is granted only to people who need it to perform their duties.

The public part of the website may use only technically necessary storage mechanisms that support the interface and security. If analytics or advertising cookies are introduced, information about them and the necessary consent settings will be added before their use begins.

8. Operator and contacts

This Policy may be updated when processing procedures or legislation change. The current version is always published on this page.

Legal basis

• Law of the Republic of Uzbekistan No. ZRU-547 “On Personal Data”
• Amendments of 26 March 2026, No. ZRU-1125
• State Register of Personal Data Databases