Privacy

Last updated: 2026-08-30

1. General Provisions

This Privacy Policy ("Policy") describes how the Operator — Individual Enterprise "OTABEK HASANOV" — collects, uses, and protects the personal data of users of the receipt.uz service ("Receipt"). Using the Service constitutes unconditional acceptance of this Policy.

2. Data We Collect

• Registration data: first name, last name, email address(es) (up to three), phone number;
• Wallet data: card type (Uzcard/Humo), last 4 digits of the card number, cardholder name (if provided) — the full card number, CVV code, and PIN are not stored by the Operator; they are processed only in tokenized form by the licensed payment system;
• Technical data: IP address, device and browser type, geographic location (at country level, determined via IP), session identifier;
• Activity data: login/logout times, list of active devices, in-service activity history.

3. Purposes of Processing

• Creating an Account and authenticating (email + one-time code);
• Enabling fast payments from a linked card without repeated confirmation;
• Ensuring Account security: detecting suspicious logins, managing active devices, allowing sessions to be forcibly terminated;
• Communicating with the User: sending one-time codes and important service notices;
• Improving the quality of the Service and identifying technical issues;
• Ensuring compliance with the legislation of the Republic of Uzbekistan.

4. Sharing Data with Third Parties

The Operator may share personal data with third parties in the following cases:

• With the licensed payment system — to tokenize the card and confirm the payment;
• With the Store where the payment is made — only to the extent necessary to confirm the payment;
• With authorized government bodies — as required by law;
• With a legal successor — in the event of a sale, merger, or reorganization of the business.

The Operator does not sell personal data to third parties for marketing purposes.

5. Cookies

Detailed information about how the Service uses cookies is provided in a separate Cookie Policy.

6. Data Retention and Security

Personal data is retained for as long as the Account is active, plus any additional period required by law. The Operator takes the necessary technical and organizational measures (encryption, card tokenization, session control) to protect data from unauthorized access, loss, or disclosure. The User can terminate all active sessions at any time from "Settings → Login Activity."

7. User Rights

The User has the right to:

• Access their personal data;
• Request correction of inaccurate data (independently via Settings, or by request);
• Request deletion of the Account and its associated data;
• Withdraw consent to the processing of personal data.

Such requests should be sent to support@checkout.uz and are reviewed within 30 days.

8. Changes to This Policy

The Operator may update this Policy; changes take effect once published within the Service.

9. Contact

For privacy-related questions: support@checkout.uz.