Document

Privacy policy

What data the asmo.uz website receives, why we need it, where it is stored, who receives it and how you can control it.

Version 1.0Date 12.10.2026

01Who processes your data

This policy explains how ASMO GROUP processes the personal data of visitors to the asmo.uz website.

Operator: ASMO GOLD OSIYO LLC, TIN 309894170, registered address: 42-a Galaba Street, Galaba MFY, Yangiyul District, Tashkent Region, Republic of Uzbekistan (“ASMO GROUP”, “we”) is the owner and operator of the personal data database.
Scope: the asmo.uz website (in Uzbek, Russian and English), the request form, the AI assistant on the website, and website visit statistics. This policy does not cover other websites opened via links (IT boʻlim, ASMO Cargo, ASMO RFID, maps, social networks)
Law: the Law of the Republic of Uzbekistan “On Personal Data” No. ZRU-547 of 2 July 2019, as amended (the “Law”)

Terms are used as in the Law (Article 4): personal data is information that relates to a specific person or makes it possible to identify them; processing means actions with it — collection, systematization, storage, modification, use, transfer, anonymization, destruction.

02What data we receive

Only what we need: data you type yourself, and technical data without which the website doesn’t work.

Request: name and phone number; company name and comment (if you give them); the division you choose; website language; the page the request was sent from; advertising campaign tags (UTM) if you came via an advertising link
Conversation with the AI assistant: the text of your questions to the assistant and of its answers, plus the address, language and text of the page you are on — so the assistant can answer. The assistant does not see the name, phone and company you type into the request form; if you write them in the conversation itself (so the assistant fills in the form), they are sent along with the question text. Along with the question, Vercel also receives your IP address — the request can’t be delivered without it, and it is used to limit the number of questions from one address
Bot protection: before a request is sent, your browser solves a small computing task (the check runs on our server, without third-party services); to limit the number of requests from one address, the IP address is counted and stored only as a hash
Visit statistics: which pages were opened, where you came from, UTM tags, browser language, screen size, browser, operating system and device type, country, region and city by IP address, and site events: request sent or not sent (outcome tag only), language changed, a tap on the phone, Telegram or email link. The IP address is not stored — only a session hash with a monthly salt; there are no names, phone numbers, request texts or questions to the assistant in the statistics
Technical data: IP address, page address, browser type and request time — in the web server log; the request service stores the IP address only as a hash
Website settings: display mode (light or dark), whether the AI assistant window is open, the conversation with the assistant and the log of its entries in the form, UTM tags — stored in your browser; of these only the UTM tags (with a request) and the conversation text (when you ask the assistant a new question) go to a server (section 10)

We don’t ask for special categories of data, such as health, beliefs or criminal record. Please don’t share them in a request or with the AI assistant.

03Why we need it

To call you back, answer your questions and prepare an offer for your request.
So the AI assistant can answer your question, point to the right place on the page and, if you wish, help you fill in the request form.
To protect the website from bots and abuse.
To keep the website running and secure, find errors and keep anonymized statistics — which pages are read and from which devices, so we can improve the site.
To prove that you gave consent: we keep the version of the consent text, the time, the language and the page.
If you become our client — to perform the contract.

We don’t sell data, share it for advertising or use it for other purposes. If the purpose changes, we will ask for your consent first (Article 19 of the Law).

04Legal grounds and consent

We process data on the grounds set out in Article 18 of the Law:

Your consent: request — when you tick “I agree to a call from a manager and to the processing of my personal data under the Privacy Policy, including transfer abroad” before the send button (without the tick the request is not sent); AI assistant — when you send a question after seeing the notice “the text of your questions is sent to a server in the USA” in its window
Your request: steps at your request before a contract is signed: calling you back and preparing an offer
Contract: if you become our client — to perform it
Legitimate interest: server logs, bot protection and anonymized statistics — to keep the website running and secure without infringing your rights

You can withdraw consent at any time — in the same form in which you gave it, or in writing, for example by email to info@asmo.uz (Article 21 of the Law). Withdrawal does not affect processing carried out before it.

05Where data is stored and who receives it

Data goes only to those without whom the service can’t work, and only as much as they need:

Company server (France) and the primary copy in Uzbekistan: requests and the consent log, address hashes, limit counters, visit statistics, server logs
Our call center gateway and Telegram: the request card (name, company, phone, division, comment, page) is written to our call center request database on the same server and arrives as a message from our Telegram bot in the managers’ chat; Telegram’s servers are outside Uzbekistan, and the transfer is based on your consent
Vercel (USA): the server part of the AI assistant runs on this hosting: the question text, the latest part of the conversation and the page data pass through it to the language model; your IP address stays here — to limit the number of questions from one address — and is not sent to the language model. We do not store the questions there
Ollama (USA) — language model: a language model in the Ollama Cloud service prepares the assistant’s answer from the question text and the page data; the text is processed under the provider’s terms
Government bodies: only where the law requires it

Each recipient gets data only for its own task. We pass data to third parties, or entrust its processing to them, only with your consent, to perform a contract with you or where the law provides for it (Articles 28 and 31 of the Law).

06Transfers outside Uzbekistan

The primary copy of the data is kept in Uzbekistan; the company’s working server is hosted in France, Telegram’s servers are outside Uzbekistan, and the AI assistant’s hosting (Vercel) and language model (Ollama) are in the USA. So your data is transferred abroad — this is cross-border transfer (Article 15 of the Law). France is on the list of countries with adequate protection approved by the Cabinet of Ministers; the USA is on it only for participants in the EU-US Data Privacy Framework. We do not claim that Vercel and Ollama are such participants, so the transfer to the USA of what you write to the AI assistant, together with your IP address, is based solely on your consent.

Each recipient gets only what it needs: Telegram — the request card; Vercel and Ollama — your questions to the AI assistant, its answers and the page data, plus your IP address to Vercel (the request can’t be delivered without it), while what you type into the request form is not sent to them. The basis is your consent: for a request you give it with the tick before the send button, in the AI assistant — by sending a question after seeing the notice in its window. Using the assistant is optional: if you prefer, ask your question by phone, on Telegram or in a request.

The Law requires the personal data of citizens of Uzbekistan to be stored in the country (Article 27¹): the primary copy of the website data is kept in Uzbekistan, and processing takes place on a server in Europe on the conditions set by the Law.

07How long we keep data

We keep data until the purpose for which it was collected is achieved (Article 10 of the Law). Retention periods by type:

Requests: while we discuss the work; if no contract is signed, we delete them 12 months after the last contact; if one is signed, we keep them while it is in force and as long as the law requires. Copies in the call center database and in Telegram follow the same period: we delete the message from the chat, and Telegram keeps it under its own rules
Consent log: text version, time, language, page, address hash — 3 years
Conversation with the AI assistant: in your browser — until you close the tab; our server does not store the conversation; Vercel and Ollama process the question text, and Vercel also the IP address, under their own terms
Limit counters and bot protection: the request counter per address — 24 hours; used bot-check solutions — until the challenge expires (30 minutes)
Visit statistics: 14 months, then deleted
Server logs: rotated daily, kept for no longer than 90 days
Website settings: in your browser until you delete them (some — until you close the tab)

When the period expires, the purpose is achieved, consent is withdrawn or a court decision takes effect, the data is destroyed beyond recovery (Article 17 of the Law).

08Your rights

Under the Law (Article 30, unless another article is given), you have the right to:

know whether we hold your data and what it is;
get information about processing: on what grounds and why, by what methods, who has access, where the data came from, how long it is kept and whether it is transferred abroad (Article 22);
have inaccurate or incomplete data corrected or completed — within three days of your request (Article 11);
demand a temporary suspension of processing if the data is incomplete, outdated, inaccurate, unlawfully obtained or not needed for the purpose;
withdraw consent — we will then destroy the data processed on that basis (Article 17);
apply to the authorized state body for personal data or to a court to protect your rights.

Send your request via the contacts in section 12. To avoid disclosing data to a stranger, we may ask you to confirm that the number or email is yours. If we refuse to provide information, we will tell you in writing within ten days (Article 22).

The AI assistant answers questions and helps fill in the request form, but it does not send the request itself and makes no decisions that have legal consequences for you (Article 24). Its answers are for information: the manager confirms prices, timing and terms.

09Security and data breaches

We take legal, organizational and technical measures so that data isn’t lost, altered or accessed by outsiders (Articles 27 and 31 of the Law):

only employees who need it for their work have access to requests;
employees must not disclose personal data they learn at work;
data is transferred over a secure connection (HTTPS);
the IP address is stored only as a hash; the bot check runs on our server without third-party services; server access is by key only, and keys and passwords are kept in closed files;
the AI assistant cannot send a request and cannot enter a name or phone number in the form that you did not write in the conversation; you confirm every entry in the form.

If a data breach or other personal data incident occurs, we will act without delay to stop it and limit the consequences, tell the people affected what happened and what they should do, and notify the authorized body within the time limits set by law.

11Children

The website is intended for adults and companies. If you are under 18, please don’t leave a request or share personal data with the AI assistant: under the Law, consent for minors is given in writing by their parents or guardians (Article 21). If we learn that we have received a child’s data without such consent, we will delete it.

12Contacts and changes

For questions, requests or withdrawing consent regarding personal data, write to us or call.

Email: info@asmo.uz
Phone: +998 71 200 01 77, +998 97 401 50 00 (Mon–Sat, 9:00–18:00)
Postal address: 42-a Galaba Street, Galaba MFY, Yangiyul District, Tashkent Region, Republic of Uzbekistan

If this policy changes, the new version and its date will appear on this page. If the purpose of processing data we already hold changes, we will ask for your consent again (Article 19 of the Law).

If the language versions differ, the Uzbek text prevails.

Version 1.0 for asmo.uz of 12 October 2026.