Privacy policy

This Privacy Policy (the "Policy") sets out how the personal data of users of the website chenye.uz (the "Website") are processed and protected. It has been prepared in accordance with the Law of the Republic of Uzbekistan "On Personal Data" (No. ZRU-547).

1. Personal data operator

1.1. The operator and owner of the personal data database is GREEN PHOENIX LLC (TIN 311384316), registered address: 2 Parkent 7th Lane, Do'stobod MFY, Yashnobod District, Tashkent, Uzbekistan, director: DUAN JING (the "Operator").

1.2. Contacts for personal data enquiries: email info@chenye.uz, phone +998 50 787 28 68, office address: 119 Makhtumkuli Street, Tashkent, Uzbekistan.

2. Data we collect

2.1. Data you provide in the forms on the Website:

• name or contact person;
• phone number;
• email address;
• company name and company TIN;
• city, line of business, client type, preferred contact method;
• comment and request contents (products and quantities).

2.2. Technical data:

• a hash of the IP address — an irreversible salted SHA-256 transformation; the IP address itself is not stored in the requests database;
• cookies and similar technologies (see section 10);
• traffic source: UTM tags, the fbclid ad click identifier, and the addresses of the referring and landing pages;
• web analytics data (with your consent): information about your device and browser, the pages you view and your actions on the Website.

2.3. The Website is intended for representatives of legal entities and sole proprietors. We do not collect special categories of personal data (health, beliefs, etc.).

3. Purposes of processing

• processing requests and enquiries and preparing commercial offers;
• concluding and performing supply agreements;
• contacting you by your chosen method (phone, Telegram, WhatsApp, email);
• analysing and improving the Website — only with your consent to analytics cookies;
• showing advertising and measuring its effectiveness — only with your consent to marketing cookies;
• complying with legal requirements (accounting and tax records).

4. Legal grounds for processing

4.1. The consent of the data subject given when submitting a form on the Website and in the cookie settings.

4.2. The need to conclude and perform an agreement to which the data subject, or the person they represent, is a party.

4.3. Performance of obligations imposed on the Operator by the legislation of the Republic of Uzbekistan.

5. How consent is obtained

5.1. Consent to the processing of personal data is given by ticking the "I consent to the processing of my personal data…" box before submitting a form. A form cannot be submitted without consent.

5.2. Consent to analytics and marketing cookies is given in the cookie banner ("Accept" or "Customise"). You can change your choice via the "Cookie settings" link at the bottom of the Website.

5.3. When a form is submitted, the fact of consent, the date and time, and the versions of the Policy and the Public Offer in force at that moment are recorded.

5.4. Consent may be withdrawn as described in section 9.

6. Retention periods

6.1. Request and enquiry data are kept for to be confirmed: 3 (three) years from the date of the last contact with the data subject, unless a longer period is required by law (for example, for accounting documents relating to concluded agreements).

6.2. Technical data used to limit the frequency of form submissions are kept for no longer than 24 hours.

6.3. Web analytics data are kept for the periods set by the analytics services (Yandex Metrica, Google Analytics, Meta).

6.4. When the retention period expires or consent is withdrawn, the data are deleted or anonymised, unless otherwise required by law.

7. Storage location and transfer to third parties

7.1. To operate the Website, the Operator uses the following services (processors):

• Vercel Inc. (USA) — Website hosting; server functions run in the Frankfurt (Germany) region;
• Neon Inc. (USA) — database; servers in the AWS eu-central-1 region (Frankfurt, Germany);
• Vercel Blob — storage for Website images and files (it does not store personal data from forms);
• Telegram (Telegram FZ-LLC, UAE) — delivery of notifications about new requests to the Operator's managers;
• Yandex Metrica (Yandex LLC, Russia) — web analytics, subject to consent to analytics cookies;
• Google Analytics (Google LLC, USA) — web analytics, if enabled, subject to consent to analytics cookies;
• Meta Platforms (Meta Platforms Ireland Ltd., Ireland; Meta Platforms Inc., USA) — Meta Pixel and Conversions API for measuring advertising effectiveness, subject to consent to marketing cookies. Phone number, name and email are sent to Meta only as SHA-256 hashes.

7.2. Physical storage location of personal data: PLACEHOLDER — to be confirmed with a lawyer, taking into account the requirement to localise the personal data of citizens of the Republic of Uzbekistan (collection, systematisation and storage on technical means physically located in the Republic of Uzbekistan) and to register the personal data database in the State Register of Personal Data Databases

7.3. The Operator does not sell personal data. Data are disclosed to public authorities only where required by law.

7.4. Cross-border transfer of personal data is carried out provided that adequate protection of data subjects' rights is ensured to be confirmed with a lawyer: conditions for cross-border transfer.

8. Security measures

• data are transmitted only over the secure HTTPS protocol;
• IP addresses are stored only as an irreversible salted hash;
• the frequency of form submissions is limited and automated submissions are blocked;
• access to the admin panel is limited to authorised staff and protected by a password; credentials are stored encrypted, and sign-in is temporarily locked after several failed attempts;
• service secret keys are kept in protected environment variables and are never sent to the browser.

9. Rights of the data subject

9.1. You have the right to:

• receive information on whether we hold your personal data and what data we hold, and on the purposes and methods of processing;
• request that your data be clarified, corrected, blocked or deleted;
• withdraw your consent to the processing of personal data;
• lodge a complaint about the Operator's actions with the authorised public body for personal data or with a court.

9.2. To exercise your rights, send a request to info@chenye.uz or to 119 Makhtumkuli Street, Tashkent, Uzbekistan, stating your name, the phone number given in the request and the nature of your request.

9.3. The Operator considers the request and replies within to be confirmed: no more than 10 (ten) business days of its receipt.

9.4. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal and may make further processing of a request impossible.

10. Cookies

10.1. Cookies are small files that the Website stores in your browser.

10.2. We use:

• necessary cookies — for the request basket (the product list is stored in your browser), language selection, remembering your choice in the cookie banner, and the traffic source for processing requests. Always on;
• analytics cookies — Yandex Metrica (including Session Replay) and Google Analytics. Loaded only after your consent;
• marketing cookies — Meta Pixel. Loaded only after your consent.

10.3. Vercel Analytics collects anonymised visit statistics without using cookies.

10.4. The map on the Contacts page is loaded from Yandex Maps only after you click "Show map"; Yandex may then set its own cookies.

10.5. You can change your choice at any time via the "Cookie settings" link at the bottom of the Website, and you can delete cookies in your browser settings. Your choice is kept for 12 months.

11. Changes to the Policy

11.1. The Operator may amend the Policy. The new version is published on the Website with its version number and effective date.

11.2. Previous versions of the Policy are retained and available on the Website.

11.3. The Policy is published in Russian, Uzbek and English. In the event of any discrepancy between the texts, the to be confirmed: Russian or Uzbek text prevails.

11.4. Please send any questions about the Policy to info@chenye.uz.