Privacy policy

1. What data we collect

We collect only the data you enter yourself in the “Free consultation” form and the details needed for the form to work:

• your name;
• your phone number;
• your comment (optional);
• if you opened the form from a specific tour or service, the tour code, destination or service;
• technical details of the request: the page address, the site language, the date and time it was sent, a record that you consented by sending the form, and the version of this policy;
• your IP address and technical browser signals, used only to protect the form against spam; we do not store them or send them to Telegram.

We do not ask for passport details, payment details or special categories of data (such as health or religion). Please do not include them in your comment.

2. Why we process it

• to contact you about your request and advise you on our tours and services;
• to find a tour, flights, a hotel or a transfer that matches your request;
• to be able to confirm that you consented to the processing of your personal data.

We do not use your data for newsletters or advertising, and we do not sell it. We do not make automated decisions that affect your rights.

3. Legal basis and consent

We process your data on the basis of your consent (Article 21 of the Law). You give it by sending the form: a notice with a link to this policy is shown above the send button. Your consent is linked to the name and phone number given in the form; we do not ask for identity document details because they are not needed for this purpose (Article 19 of the Law). Declining to provide your data has no consequences other than not being able to send a request through the site: you can always call us instead.

You can withdraw your consent at any time by writing to grandvoyage0770@mail.ru or calling +998 95 066 07 70. We will stop the processing and destroy your data no later than the next working day after receiving your request, and let you know by the same channel you used to contact us.

4. How and where your data is processed

Processing is automated: collection, transmission, storage, use and destruction. The website does not store requests: when you send the form, the data is transferred over a secure connection to a private Telegram group of Grand Voyage managers. Only the staff who handle requests have access to the group.

To run the website and the form we use the services of the following companies. They receive the data only to the extent needed to provide their services:

• Telegram (Telegram Messenger Inc. and its group companies: Telegram Group Inc. and Telegraph Inc., British Virgin Islands; Telegram FZ-LLC, Dubai, UAE): delivering and storing the request in the managers’ group. According to Telegram’s privacy policy, the data of users who registered from Uzbekistan is stored in data centres in the Netherlands;
• our website hosting and security provider (USA) and its data centres in various countries: hosting the website, transmitting the request, protecting the form against spam and collecting anonymous visit statistics.

Your data is therefore transferred outside the Republic of Uzbekistan. It may be stored and processed in the Netherlands (Telegram data centres) and in the USA (our hosting provider, a participant in the EU-U.S. Data Privacy Framework); both are on the list approved by Cabinet of Ministers Resolution No. 415 of 29 July 2026 (Articles 15 and 27-1 of the Law). It may also be made available to Telegram group companies registered in countries not on that list (British Virgin Islands, United Arab Emirates); this transfer is based on your consent under Article 15 of the Law. We disclose data to other third parties only in cases expressly provided for by law.

5. How long we keep it

We keep request data until the purpose of processing is achieved, but no longer than 90 days from the date the request was sent. If you sign a contract with us after the consultation, the data needed to perform it is kept for the period set by the contract and by law. When the period ends or the purpose is achieved, the data is destroyed within three days; if you withdraw consent, no later than the next working day.

6. Your rights

Under Articles 11, 17, 21, 22 and 30 of the Law you have the right to:

• know whether your data is being processed and receive information about it, the purposes, methods and periods of processing, and its recipients;
• receive information on the conditions under which access to your data is granted;
• have inaccurate data changed, completed or corrected;
• have processing suspended or your data destroyed if it is incomplete, out of date, inaccurate, unlawfully obtained or not needed for the stated purpose;
• withdraw your consent to processing;
• complain about the operator’s actions to the authorised state body or to a court.

To exercise your rights, write to grandvoyage0770@mail.ru or call +998 95 066 07 70. We change or complete data within three days of your request and carry out a request to destroy it no later than the next working day, and we let you know by the same channel you used to contact us. If we refuse to provide information, we will tell you in writing within 10 days; you may appeal the refusal to the authorised state body or a court. To protect your data, we may ask you to confirm that the request comes from you (for example, by calling the number given in the request).

7. How we protect your data

We take legal, organisational and technical measures to protect data (Article 27 of the Law): transfer only over a secure connection (HTTPS), a private group with a limited number of staff, two-step verification on accounts, destruction of handled requests, and protection of the form against automated submissions.

8. Minors

The form is intended for people aged 18 and over. A request on behalf of a minor must be made by their parent or legal representative. Please do not include children’s names or dates of birth in the comment; the number and ages of travellers are enough.

9. Cookies, browser storage and statistics

The website does not use advertising cookies. Your browser’s storage (localStorage) keeps only your chosen language and your list of saved tours; this stays on your device and is not sent to us. Visit statistics are collected anonymously, without cookies. The form’s spam protection checks technical signals from your browser to tell people from automated programs.

10. Complaints

If you believe your rights have been violated, please write to us first and we will try to resolve the issue. You may also contact the authorised state body for personal data, the Department of Migration and Personalization under the Ministry of Internal Affairs of the Republic of Uzbekistan (pd.gov.uz), or go to court.

11. Changes to this policy

We may update this policy. A new version is published on this page with its number and date and applies to requests sent after publication. Each request records the version of the policy you agreed to. If the language versions differ, the Uzbek text prevails.