Discuss a project

Personal Data Processing Policy

Version of September 30, 2026

This Policy sets out what personal data of visitors to the acropolis.uz website and users of the Telegram bot @AcropolisIT_bot we process, why, how and where they are stored. The Policy has been developed in accordance with Law of the Republic of Uzbekistan No. ZRU-547 “On Personal Data” of July 2, 2019 (as amended) and other legislative acts of the Republic of Uzbekistan. Terms are used in the meanings established by that Law.

1. Owner and operator of the personal data database

ACROPOLIS INTEGRO MChJ is the owner and operator of the personal data database (“we”).
Address: TUT Workspace, 7, 1st Darkhan passage, Asaka mahalla, Mirzo-Ulugbek district, Tashkent.
E-mail: [email protected], phone: +998 99 802 18 71.

2. What data we process

Via the request form on the website:

  • name;
  • company name;
  • e-mail address;
  • phone number and/or Telegram username;
  • the text of your request;
  • the address of the website page from which the request was submitted.

Via the Telegram bot:

  • messages and files you send to the bot;
  • the details of your Telegram profile available to the bot (name, username, account ID);
  • the website page from which you came to the bot.

Technical data: when you open website pages or submit the form, our hosting provider Cloudflare processes your IP address, browser details and the time of the request; this is necessary to deliver the pages and protect the website against attacks. We do not use these data to identify visitors.

The website does not use web analytics counters, advertising trackers, or cookies for analytics or advertising. Cloudflare may set technical cookies required to protect the website against automated attacks.

We do not request or process special personal data (Article 25 of the Law), or biometric and genetic data. Please do not include in your requests any information that is not needed for us to respond.

3. Purposes of processing

  • responding to your request and providing a consultation;
  • preparing a commercial or technical and commercial proposal;
  • concluding and performing a contract, should you decide to work with us;
  • contacting you on matters related to your request;
  • recording requests in our CRM system.

We do not use your data for purposes not listed in this section. If the purpose of processing changes, we will ask for your consent to processing for the new purpose.

We process personal data on the following grounds (Article 18 of the Law):

  • your consent to processing, including consent to the cross-border transfer of data described in Section 6;
  • taking steps at your request prior to entering into a contract, and performing a contract to which you are a party;
  • fulfilling our obligations established by law.

You give your consent by ticking the corresponding checkbox in the website form before submitting a request, or by starting a conversation and sending messages to the Telegram bot. If you are under 18, consent to the processing of your personal data is given by your parents or other legal representatives.

5. How we process and store data

Processing includes the collection, systematization, storage, modification, supplementation, use, transfer (including cross-border transfer), depersonalization and destruction of personal data. Processing is carried out using automated means. We do not take decisions that produce legal effects for you based solely on automated processing.

Personal data are stored until the purposes of processing are achieved: for a request that did not lead to a contract, no longer than three years from the date of the last contact; if a contract is concluded, for the term of its performance and the document retention periods established by the legislation of the Republic of Uzbekistan. If consent is withdrawn, data are kept no longer than described in Section 8. When these periods expire, the data are destroyed.

We take legal, organizational and technical measures to protect personal data: the website runs over the secure HTTPS protocol, requests can be accessed only by employees who need them to handle the request, and those employees are obliged not to disclose personal data that become known to them.

6. Transfer of data and where they are stored

We do not sell your personal data or transfer them to third parties for their own purposes. We use the following services to receive, deliver and record requests:

  • Cloudflare, Inc. (USA) — website hosting, receipt and temporary storage of request form data; processing may take place on servers of the Cloudflare network in various countries;
  • Telegram — operation of the Telegram bot, delivery of requests and request notifications to our work chat and employees; Telegram servers are located outside the Republic of Uzbekistan;
  • Zoho (data center in the USA) — the corporate mailbox [email protected];
  • a cloud server we rent in the United Kingdom — operation of the Telegram bot and our own CRM system for recording requests.

Therefore, your personal data are transferred and stored outside the Republic of Uzbekistan, i.e. they are transferred cross-border (Article 15 of the Law). Mandatory storage in the territory of the Republic of Uzbekistan applies to biometric and genetic data and to data of users of telecommunications operators’ services (Article 27-1 of the Law); the data we process do not fall into these categories.

Some recipients are located in states included in the List of foreign states ensuring adequate protection of personal data (Resolution of the Cabinet of Ministers of the Republic of Uzbekistan No. 415 of July 29, 2026). Transfers to recipients in other states are made on the basis of your consent to cross-border transfer. By this Section we notify you of the transfer of personal data to the recipients listed above.

Personal data may be provided to government authorities only in the cases and in the manner established by the legislation of the Republic of Uzbekistan.

7. Your rights

In accordance with Article 30 of the Law, you have the right to:

  • know whether we hold your personal data and what they consist of;
  • obtain, upon request, information about the processing of your data: grounds and purposes, methods of processing, recipients, processing and retention periods, cross-border transfer;
  • obtain information about the conditions of access to your personal data;
  • demand the modification and supplementation of your data, as well as the temporary suspension of their processing if the data are incomplete, outdated, inaccurate, unlawfully obtained or not necessary for the purposes of processing;
  • withdraw your consent to the processing of personal data;
  • apply to the authorized state body in the field of personal data or to a court to protect your rights and legitimate interests.

Write to [email protected] with the subject line “Personal data”, send a message to the Telegram bot @AcropolisIT_bot, or send a letter to the address in Section 1. Please specify which data you provided and in connection with which request, so that we can locate them.

We make modifications and supplements to your data no later than three days after your request. If we refuse to provide information about processing, we will send you a written notice of refusal within ten days; the refusal may be appealed to the authorized state body or to a court.

Once consent is withdrawn, we stop processing and destroy your data in our systems, including the CRM system and work chats, except where their retention is required by law.

9. Changes to this Policy

We may update this Policy; the current version is always available on this page. If we start using web analytics counters, analytics cookies or new services for processing requests, this Policy will be supplemented before they are introduced.