Privacy policy

1. Who processes the data

The personal data operator is the sole proprietor Yusupov Islom Umed o'g'li, registry entry No. 8114377 of 09.11.2026, place of business: 4 Uchuvchilar Street, Mirabad district, Tashkent. Data questions: phone +998 91 796 77 99.

2. What data we receive

• with an order: the sender's name and phone, e-mail (if given), the recipient's name and phone, delivery address and note, greeting card text, delivery date and time;
• if you connected the Kona bot in Telegram: your Telegram chat ID (to send order updates and reply in the chat) and the messages in “Chat with Kona”;
• “My dates”: the dates and names you asked us to remind you about;
• the photo of the finished gift we send you before delivery;
• technical data: IP address (protection against brute force and spam), site settings stored in your browser (cart, favourites, language, theme).

We do not receive or store bank card numbers: online payments are accepted by the payment institution Multicard Payment JSC (the Rahmat service). We only receive the payment result, method (e.g. Payme or an Uzcard card), amount, fee and a link to the fiscal receipt.

We do not collect biometric or genetic data.

3. Why

• to accept, prepare and deliver the order and contact the sender and recipient about it;
• to accept payment, issue a fiscal receipt and make refunds;
• to send order updates and answer questions (in Telegram — if you connected the bot);
• to remind you of dates in “My dates” — only if you added them;
• to protect the site from abuse and meet legal requirements (accounting and tax).

We publish a photo of the finished gift in our channel only with your explicit consent.

4. Legal basis

We process data with the consent you give when placing an order (the order button) or connecting the bot, and to perform the contract under the public offer and the laws of the Republic of Uzbekistan.

5. Who we share it with

• the courier or taxi service — the recipient's name and phone, address and time (for delivery only);
• Multicard Payment JSC (Rahmat) — the order number and amount, receipt lines (for payment, receipt and refunds); you enter card details on their page;
• Telegram — messages, if you use the Kona bot;
• the hosting and database providers the site runs on — for storage (under contract, with access protection);
• public authorities — only where the law requires it.

Where data is stored: the site's database is Supabase, in a data centre in Frankfurt (Germany). Germany is on the list of states with adequate protection of personal data approved by the Cabinet of Ministers of the Republic of Uzbekistan on 29.07.2026.

We do not sell personal data or share it for other companies' advertising.

6. How long we keep it

• orders and payments — as long as accounting and tax law requires;
• the photo of the finished gift — 90 days after the delivery date;
• messages in “Chat with Kona” — 12 months;
• the payment log (technical responses of the payment system, without card data) — 180 days;
• IP addresses used for protection — until the limit window ends (minutes or hours).

7. Your rights

You may ask what data we hold about you, correct it, request deletion (except what the law requires us to keep), withdraw consent, and switch off the bot and reminders. Write to the Kona bot or contact us (phone +998 91 796 77 99) — we reply within 10 business days.

8. Security

Order data is available only to staff who need it for their work (role-based), sign-in requires a password and a confirmation code. The connection to the site is encrypted (HTTPS).

9. Changes

We may update this policy; a new version applies from its publication on this page. Version of 10.11.2026.