Privacy Policy

1. Introduction

This Privacy Policy (“Policy”) applies to all services provided through the Company’s website and mobile application (“Services”). The Policy governs how UNICORP LLC (“Company”) collects, stores, uses, and protects user data. The Company complies with the Law of the Republic of Uzbekistan No. ZRU-547 “On Personal Data” (2019) as well as international legal norms such as the European Union’s General Data Protection Regulation (GDPR) (dlapiperdataprotection.com, gdpr-info.eu). By using the site or the app, the User indicates consent to this Policy. If you do not agree with the content of the Policy, it is recommended not to use the app or website services.

2. Scope and Application

This Policy applies to the official website and mobile applications owned by UNICORP LLC, including all services offered through them. Within the scope of this Policy, all types of information collected by the Company (personal, technical, financial, location, etc.), their purposes of use, protection measures, and User rights are outlined. The data collected covers employees, customers, and any person using the site or app, including international users (in accordance with GDPR 2016/679 and other applicable standards) (gdpr-info.eu).

3. Data Collected

The Company may collect the following types of data through various channels:

• Personal data: Name, surname, date of birth, physical address, email address, phone number, and other information that can identify an individual.
• Login and account data: Username (login), password, and security questions for the user’s account.
• Financial data: Payment card number, bank details, and other information related to financial transactions (if you use payment services).
• Technical data: Technical information such as device type (smartphone, tablet, computer), hardware identifiers (IMEI, serial number), operating system, browser type, IP address, mobile network operator, and Internet service provider.
• Activity data: Information about which services you have used via the site or app, which pages you viewed, order history, search queries, login and logout times, and other similar data.
• Geolocation data: If you have given consent, the location of your device as determined by GPS or other technologies. This data may be needed primarily to customize services or to use location-based features.
• Cookies and tracking technologies: Data automatically collected through cookies and similar technologies installed on the website and app. This includes information such as access dates, session duration, navigation within the site, and the characteristics of the device and browser being used. Cookies can be considered personal data (gdpr.eu), so some of them require user consent (gdpr.eu).

The Company may also obtain information from third-party sources (social networks, advertising and analytics platforms, etc.) in accordance with a legal obligation or with the User’s consent.

4. Use of Data

The Company may use the collected data for the following purposes:

• Service provision: To fulfill your requests, process your orders, and provide services that require authentication. For example, this includes registration, login, sending activation codes, and configuring servers.
• Billing and financial operations: To use financial information for processing payments and conducting settlements. This process may be carried out in cooperation with banks and payment providers, which have their own privacy policies.
• User support: To respond to your questions and issues, to communicate with the customer support team, and to resolve technical problems.
• Service improvement: To enhance the user experience (for instance, improving the convenience of the site or app, fixing errors, introducing new features). This may involve using anonymized statistics and analytical data.
• Security and abuse prevention: To detect unauthorized access, implement protection measures against cyberattacks, investigate violations, and prevent fraud. For example, we may monitor IP addresses, login history, and maintain audit logs.
• Advertising and marketing: To show you personalized advertisements (online and on mobile networks), and to send promotions and news via email and push notifications. For such marketing communications, your prior permission may be requested, and you will always have the ability to opt out (gdpr-info.eu).
• Legal compliance: To provide and retain data as required by law (for example, to meet tax, audit, or other official reporting obligations).

Data processing is always carried out on a lawful basis (dlapiperdataprotection.com; gdpr-info.eu). For example, some services may obtain your consent, while other purposes are pursued on the basis of contract performance or legal obligations (see also the “Legal Bases” section).

5. Cookies and Tracking Technologies

We use cookies and similar technologies on the website and app. Cookies are small text files installed on your browser that store your preferences (for example, language selection or a list of favorites), track session duration, and analyze user experience. Cookies are categorized into the following main types:

• Essential cookies: These are crucial for the functionality of the website and can be set without the user’s consent. For example, they are used for secure login or to retain items in a shopping cart.
• Functional cookies: These cookies help preserve settings on the page (for instance, language and region selection). They ensure that instructions are saved so that when you return to the site or app, your preferences remain in place.
• Analytics cookies: These cookies collect information about site usage, gathering data on traffic and user behavior. Such cookies operate anonymously and are used to improve the website.
• Marketing cookies: These track your online activities to show you tailored advertisements. They are often set by third-party advertisers.

In accordance with European Union law (the ePrivacy Directive) and GDPR principles, user consent is obtained before using any non-essential cookies (gdpr.eu). By using cookies we support the performance of the site, save user preferences, analyze advertising effectiveness, and personalize content. You can delete or restrict cookies through your browser settings, although in some cases this may limit certain functionalities of the site.

6. Personalized Advertising and Marketing

We use personal data to send users advertisements and offers that might be of interest. This includes:

• Email marketing: If we intend to send you promotional emails, we will first ask for your consent (or if you are already a customer, we will rely on an appropriate legal basis). Each marketing email will include an option to unsubscribe at the bottom.
• Push notifications: Through our mobile app, we may send you useful information, news, and promotional announcements. Consent for push notifications is obtained at the device level, and you can disable them at any time in your device settings.
• Online advertising: Third-party advertising partners (e.g., ad networks) may use anonymous identifiers and cookies to track your browser and app activity in order to show you relevant ads.

Under the GDPR, processing personal data for direct marketing purposes can be based on the user’s consent or on legitimate interests (gdpr-info.eu gdpr-info.eu). You have the right to opt out of marketing communications at any time (for example, via the “unsubscribe” link in email messages) (gdpr-info.eu). If the user is subject to GDPR, under Article 21 they may object to the processing of data for direct marketing; in such case, we will immediately stop using the data for marketing purposes (gdpr-info.eu).

7. Third-Party Services

The Company’s services may be linked to or provided by a number of third-party platforms. For example, we use third-party analytics (such as Google Analytics), advertising networks, social media integrations, cloud hosting, and email services. Additionally, credit card and financial services are carried out through banks or payment providers.

We share your data only with third parties that facilitate service provision, as allowed by law, and that adhere to confidentiality obligations with us. For instance, payment information may be transmitted exclusively to trusted payment providers.

Advertising partners displayed on the site may use their own cookies and tracking technologies to monitor your activities online and show you personalized ads. These companies operate independently and we do not control their data practices. Therefore, before accessing third-party services through our app or website, we advise you to read their Privacy Policies.

We may also share personal data with other parties (such as insurance companies, other business partners, or in the context of acquisition or merger processes) only to the necessary extent (for example, for civil protection or legal requirements).

We sign appropriate agreements with third-party providers to ensure they fulfill their obligations to protect personal data. However, we are not responsible for their own policies and practices.

8. Legal Bases

According to the laws of the Republic of Uzbekistan (Law No. ZRU-547), personal data can only be processed on certain legal bases (dlapiperdataprotection.com). These include:

• User consent: If you have voluntarily given consent for specific purposes (such as for email marketing), your data is processed on this basis. You have the right to withdraw your consent at any time.
• Contract performance: If we have entered into a contract with you to provide a service (or are in the process of doing so), we process the data necessary to fulfill that contract (for example, delivering orders or processing money transfers).
• Legal obligation: Data processing may be required for the Company to fulfill its legal obligations (for instance, complying with tax, audit, or other regulatory requirements).
• Legitimate interests: We may process data when necessary for our business operations, services, or your safety, provided this does not infringe on your rights. For example, analyzing the performance of the site and app, fixing errors, detecting fraud, or for internal audit purposes.

Under GDPR principles, the processing of personal data must always be lawful, fair, and transparent (gdpr-info.eu; dlapiperdataprotection.com). The Company’s internal documentation specifies the purposes for which data is collected and used; if the purposes change, we are required to obtain your updated consent (dlapiperdataprotection.com).

9. Data Protection and Retention Period

The security of user data is a priority for the Company. We take modern technical and organizational measures to protect your data from unauthorized access, loss, alteration, and disclosure. For example, we use database encryption, access controls, firewalls, and data center security systems. In accordance with Law No. ZRU-547, data is protected throughout its entire lifecycle from collection to deletion (dlapiperdataprotection.com).

Personal data is retained only for as long as necessary to achieve the purpose for which it was collected. Retention periods vary depending on the purpose (for example, financial data must be kept for at least 5 years under tax requirements). Once the purpose is fulfilled or the legal requirement has expired, the data is promptly deleted or anonymized (dlapiperdataprotection.com).

If the processing of a user’s data causes any inconvenience (for instance, if consent is withdrawn), we can promptly remove the data.

10. User Rights

You have a number of rights over your personal data:

• Right to information: You have the right to know what information we hold about you and how it is being processed.
• Right to rectification: If your information is incorrect or outdated, you can request that it be corrected or updated.
• Right to erasure (“right to be forgotten”): Under certain conditions (for example, the data is no longer needed for its original purpose or you have withdrawn consent), you can request the deletion of your personal data.
• Right to restrict processing: In certain cases, you can ask that we only retain your data but not use it further, or only use it for specific purposes.
• Right to object: If your data is being processed on the basis of legitimate interests and you believe this processing infringes on your rights, you can object to it. For direct marketing purposes, you have the right to object at any time.
• Right to data portability: You can request a copy of your data in a standard format and ask that it be transferred to another provider (if technically feasible).
• Right to withdraw consent: If your personal data is processed based on consent you have given, you may withdraw that consent at any time. This will stop any future processing based on that consent (but does not necessarily require deletion of data already processed).
• Right to lodge a complaint: If you believe your data rights have been violated, you can contact local supervisory authorities or the relevant data protection agencies in your region.

To exercise your rights, please contact us via email (info@unicorp.com) or through the contact form on our website. We will review your requests as quickly as possible. Our Company takes the security and confidentiality of your personal data very seriously. Your consent and trust are our most important values.

11. Children’s Privacy

The Company’s services are mainly intended for users aged 16 and above. If a person under 16 has provided personal data without parental consent, please inform us. As soon as such information is identified, we will delete it from our system. We never knowingly or intentionally collect personal data from children under 16 without proper consent.

12. International Data Transfer and Compliance

The Company operates globally, so some data may be stored or processed on servers in other countries. If you are from the European Union, any such transfer of data is given special attention under the GDPR. All cross-border transfers include necessary safeguards (such as standard contractual clauses) in accordance with Uzbekistan law and EU regulations. According to Uzbekistan law, the personal data of citizens can be stored and processed abroad only if certain conditions and restrictions are met (dlapiperdataprotection.com). As the list of approved countries has not yet been established, if your personal data is transferred outside of Uzbekistan, this will be done only with your consent or under guarantees provided by international agreements.

13. Policy Updates

We reserve the right to update this Privacy Policy periodically. When significant changes are made (due to new purposes, laws, or technology), they will be announced on the website and app and users will be notified through the site/app. Each updated version will display a “Last updated” date. We recommend that you review the latest version of the Policy whenever you visit the site or app to stay informed

14. Contact Us

If you have any questions or requests regarding this Policy or your personal data, please contact us through the following:

We will review any inquiries related to the exercise of your rights in a timely manner. Our Company takes on the responsibility of ensuring the security and confidentiality of your personal data very seriously. Your consent and trust are our highest values.