Privacy and Personal Data Processing Policy

This Privacy and Personal Data Processing Policy governs the collection, use, storage, and protection of information provided by users when visiting and interacting with ymidbekchik.uz (hereinafter — the "Website").

By using the Website and submitting information through the feedback and contact forms, the user acknowledges that they have read and agree to the terms of this Policy.

1. General Provisions

1.1. This Policy is drafted in compliance with applicable personal data protection laws and international best practices, including the general principles of transparency and data minimization (GDPR).

1.2. The operator of personal data is independent web developer Umidbek Umrbekovich Gaipov (hereinafter — the "Operator").

1.3. The main objective of the Operator is to respect the rights and freedoms of individuals during personal data processing, including the protection of rights to privacy and personal confidentiality.

2. Categories of Data Collected

2.1. Information Provided Directly by the User

When submitting an inquiry via the website form, the user may provide the following information:

• Full Name;
• Contact details: Telegram username, email address, and/or phone number;
• Brief description of the intended project or task;
• Selected service plan or tier.

2.2. Technical and Analytics Data

When visiting the Website, certain technical data is automatically logged by edge servers and analytics tools:

• Client IP address;
• Browser type, engine version, and operating system;
• Device screen resolution;
• Referral URL, page views, and session duration;
• Anonymous cookie identifiers.

3. Purposes of Processing

The Operator processes personal data exclusively for the following legitimate purposes:

• Reviewing incoming inquiries and providing consulting feedback regarding website development;
• Calculating project estimates and coordinating the technical specification and agreement;
• Communicating with clients via Telegram, email, or telephone;
• Analyzing aggregate website performance and optimizing user experience (Core Web Vitals).

4. Legal Grounds for Processing

The Operator processes personal data on the basis of:

• Voluntary user consent granted upon submitting a form on the Website;
• Pre-contractual steps taken at the request of the user prior to entering into a service agreement;
• Legitimate interests of the Operator in maintaining website security, anti-spam defense, and service reliability.

5. Use of Cookies

5.1. The Website uses functional cookies and browser storage (localStorage) to store interface preferences:

• Selected color theme (light / dark);
• Selected language (ru / uz / en);
• Selected pricing currency (UZS, RUB, KZT, USD);
• Billing period preference for maintenance plans (monthly / yearly).

5.2. Users can disable cookies in browser settings at any time. Disabling cookies will not impair the primary functionality of the Website.

6. Third-Party Services

The Website utilizes trusted third-party cloud services for analytics, hosting, and notification delivery:

Google Analytics 4 & Google Tag Manager

Used to collect anonymized website traffic statistics, page navigation paths, and conversion events. Data is processed in accordance with Google's Privacy Policy.

Microsoft Clarity

Provides heatmaps and anonymized behavioral analytics to optimize UX clarity and remove layout friction.

Yandex Metrika

Supplementary traffic analysis and conversion goal verification for regional visitors in CIS countries.

Telegram Bot API

Used as an encrypted transmission channel to deliver instant form notifications directly to the Operator's private inbox.

Vercel Edge Network

Global cloud infrastructure hosting website assets with automated DDoS mitigation, rate limiting, and edge caching.

7. Data Sharing and Transfer

7.1. The Operator does not sell, rent, or lease personal data to third parties, advertising brokers, or marketing networks.

7.2. Disclosure of personal data is only permissible if strictly required by applicable law or competent court order.

8. Data Retention Period

8.1. Contact information received through website inquiries is retained only for the period necessary to communicate with the user, prepare contract documents, and fulfill contractual obligations.

8.2. Anonymized statistical logs are retained in accordance with the standard retention schedules of Google Analytics and server logs (typically up to 14 months).

9. Security Measures

The Operator implements robust technical and organizational security controls:

• End-to-end HTTPS/TLS data encryption on all network routes;
• Honeypot fields and automated client-side cooldown timers to prevent automated spam;
• Serverless rate limiting by client IP address to thwart DDoS abuse;
• Restricted access to the Telegram bot endpoint and strict origin headers verification.

10. User Rights

Users have the right at any time to:

• Request confirmation of whether their personal data is being processed;
• Request correction of inaccurate or outdated information;
• Request complete erasure (deletion) of their personal data from the Operator's records;
• Withdraw previously given consent to data processing.

11. Withdrawal of Consent

Consent may be withdrawn at any time by sending an email with the subject line "Personal Data Deletion Request" to: ymidbekchik@proton.me.

12. Policy Updates

The Operator reserves the right to amend this Policy as needed to reflect changes in regulatory requirements or website functionality. The updated version is effective immediately upon publication on the Website.

13. Contact Details

For any inquiries regarding personal data processing, you may reach out to the Operator:

Personal Data Controller:
Umidbek Umrbekovich Gaipov

Email:
ymidbekchik@proton.me

14. Final Provisions

This Policy applies to all visitors regardless of device, browser, or access channel. By using the Website and submitting inquiry forms, the user confirms that they have read, understood, and voluntarily accepted all provisions herein.

Effective Date: July 28, 2026