PRIVACY POLICY

1. Scope and roles

This Privacy Policy applies to personal data collected and processed through the Davo Delivery platform (mobile app, website, and Telegram bot; hereinafter, the “Platform”). By using the Platform, you agree to this Policy.

Data controller / Operator: STARTUP LAB LLC (legal address: Mirzo Ulug’bek district, Olmachi neighbourhood, Parkent street, 199a; email: info@davodelivery.uz).

2. Definitions

Personal data — information that directly or indirectly identifies a user.

Special categories — information about health or from which health-related conclusions can be drawn (e.g. names or quantities of medicines ordered).

Law — applicable legislation of the Republic of Uzbekistan on personal data and related regulations.

3. What data we collect

3.1. Identification data: first and last name, phone number, user ID, Telegram username / chat ID.

3.2. Delivery: address, geolocation (with your permission).

3.3. Orders and transactions: order history, product names, quantities, prices, delivery status.

3.4. Payments: payment status, transaction ID; full card details are not stored on the Platform; processing is carried out by certified payment providers.

3.5. Technical data: IP address, device type/version, app version, event logs.

3.6. Communications: support requests, feedback, comments.

4. Legal bases for processing

4.1. Performance of a contract (placing and delivering orders).

4.2. Consent (geolocation, marketing messages, certain cookies/SDKs).

4.3. Legitimate interests of the operator (security, fraud prevention, service improvement).

4.4. Legal obligation (record-keeping, reporting, handling claims).

4.5. Vital interests (in emergencies).

5. Purposes of processing

5.1. Accepting, processing, and delivering orders; user support.

5.2. Managing profiles, personalisation, and improving service quality.

5.3. Processing payments and financial operations.

5.4. Security: preventing abuse and maintaining system stability.

5.5. Marketing and service notifications (where consent applies).

5.6. Analytics, error diagnostics, and performance measurement.

6. Cookies and mobile SDKs

We use functional and analytics cookies/SDKs and, where you consent, marketing cookies/SDKs. You can restrict or delete cookies in your browser or device settings; some features may not work properly.

7. Sharing data with third parties

7.1. Pharmacies — to fulfil and hand over orders.

7.2. Couriers — for delivery (address and contact details).

7.3. Payment providers — to process transactions.

7.4. Technical and communications providers — hosting, SMS/push/email, analytics.

7.5. Public authorities — where required by law.

Personal data are not sold for commercial purposes.

8. International transfers

Where data are transferred across borders, we apply appropriate safeguards (contractual guarantees, technical and organisational measures) in accordance with applicable law. If data localisation is required, we comply with it.

9. Retention periods

9.1. Profile data — for the life of the account and up to 3 years after deletion (for limitation periods).

9.2. Orders and financial data — for periods required by law.

9.3. Logs and technical records — typically 12–24 months.

After the retention period, data are deleted or anonymised.

10. Security

We apply organisational and technical measures (access control, encryption, auditing, backups). No system guarantees absolute security; if an incident occurs, we will take action and notify you where necessary.

11. Your rights

11.1. Access, rectification, erasure.

11.2. Restriction of processing and objection.

11.3. Withdrawal of consent (for marketing and other processing based on consent, where applicable).

11.4. Data portability (where technically feasible).

11.5. Complaint — to the competent public authority.

Requests: privacy@davodelivery.uz (we typically respond within 10–30 business days).

11.6. Request to delete personal data.

You may request deletion of your personal data in the following ways:

• by emailing privacy@davodelivery.uz;
• using the account deletion feature in the app (if available).

After we receive your request:

• your account will be deleted within 3 business days;
• personal data will be erased or anonymised within 30 days.

In certain cases, some information may be kept longer if required by the laws of the Republic of Uzbekistan (for example, financial reporting or fraud prevention).

12. Minors

The service is intended for users 18+. Data of minors are not processed without parental or guardian consent.

13. Third-party links

Third-party sites and services have their own policies; please review them when you use those resources.

14. Changes to this policy

We may update this Policy. We will notify you of material changes via the app, push notifications, or email. Continued use of the Platform constitutes acceptance of the updates.

15. Contact

Support: info@davodelivery.uz