Privacy Policy

1. Controller

1.1. The personal data controller is the self-employed individual [provider's full name to be added] (the “Controller”), website https://bazi.uz. Contact for personal data matters: info@bazi.uz.

1.2. This policy is drawn up in accordance with the Law of the Republic of Uzbekistan “On Personal Data” (ZRU-547).

2. What data we process

2.1. Email — to sign in and to send emails about orders and readings.

2.2. Date, time and place of birth, gender — to calculate the BaZi chart and prepare the reading.

2.3. Phone number — only if you provide it when ordering, so that we can send an invoice in Paynet.

2.4. Order data: code, amount, status, time. We do not receive bank card data — payment takes place in Paynet.

2.5. Consent log: the text and version of the consent, time, IP address and browser details.

2.6. Messages sent via the Contacts form: name, email, text.

2.7. Technical cookies: sign-in session, selected language, cookie choice.

3. Purposes

3.1. Registration and sign-in.

3.2. Calculating the chart and preparing the reading.

3.3. Placing, confirming and recording orders; performing the agreement under the offer.

3.4. Emails about orders and ready readings; replies to enquiries.

3.5. Newsletters — only with separate consent, which you can withdraw at any time.

4. Legal grounds

4.1. The consent of the data subject, given at registration, when ordering a reading or when sending the Contacts form. Each consent is recorded in the log.

4.2. Performance of the agreement concluded under the public offer.

5. Where data is stored

5.1. Personal data is stored on a server in the Republic of Uzbekistan (Tashkent). Backups are stored there too.

6. Transfer to third parties

6.1. We do not sell or transfer personal data to third parties for advertising.

6.2. To prepare the reading text, only the calculated chart is sent to OpenAI (USA): pillars, elements, periods and the calculation date. Your name, email, phone and place of birth are not sent.

6.3. Emails from the website are currently delivered via Yandex's mail service, which receives the recipient's address and the text of the email. We are moving email delivery to our own server in Uzbekistan.

6.4. Payment takes place in Paynet; data you enter when paying is processed by Paynet under its own rules.

7. Retention

7.1. Account data, charts and readings — until the account is deleted.

7.2. Order data — 3 years, for payment reconciliation and dispute resolution.

7.3. Consent log — 3 years after consent is withdrawn or the account is deleted.

7.4. Backups — up to 14 days; server logs — up to 30 days.

8. Your rights

8.1. You may find out what data about you is processed, access it, correct it, request its deletion and withdraw your consent.

8.2. Send your request to info@bazi.uz from the address linked to your account. We reply within 10 days.

8.3. You may appeal the Controller's actions to the authorised state body for personal data protection or to a court.

9. Cookies

9.1. The website uses only technical cookies, without which sign-in and language selection do not work. There are no advertising or analytics trackers on the website.

10. Data protection

10.1. Connections to the website are protected by TLS, passwords are stored only as hashes, and access to the server is restricted.

11. Changes to this policy

11.1. A new version is published on this page with its date. We notify you by email of significant changes.