Privacy policy

1. General provisions and legal bases

This Privacy Policy (hereinafter — "Policy") defines the procedure for collecting, storing, processing and protecting user personal data by the HADAF Marketplace (hereinafter — "Platform").

This document was developed based on the Law of the Republic of Uzbekistan "On personal data" (No. ZRU-547), the laws "On electronic commerce" and "On informatization", and fully complies with international data protection standards.

2. What information do we collect?

The Platform may collect the following categories of information in the process of serving users:

Identification data

Full name, phone number, delivery address, email, and login credentials.

Technical data

IP address, browser type and version, time zone, operating system, device model and ID.

Transaction data

Purchase history, order statuses, discounts and payment methods (bank card data is not stored by us).

Usage data

Products you have viewed, search queries, and the wishlist on the Platform.

3. Purposes of data processing

We use the collected information solely for the following strictly defined purposes:

1
Execution of transactions: Processing orders, accepting payments and delivering products by couriers to your address.
2
Security: Preventing fraud, protecting accounts from unauthorized access and ensuring system stability.
3
Improving the quality of service: Adapting the Platform interface to user interests and eliminating technical errors.
4
Communication: Sending notifications about order status and answers to your questions.

4. Data Security and Storage

The HADAF Platform uses a multi-level security system to protect data. Our control servers are located in the territory of the Republic of Uzbekistan and fully comply with the sovereignty requirements of the legislation of the Republic of Uzbekistan.

AES-256 Encryption

All personal data is encoded using the world's strongest encryption keys.

TLS 1.2 Protocol

Communication between the browser and server is carried out through encrypted TLS channels.

5. Providing data to third parties

Without your consent, we never sell your personal data to advertising agencies or other commercial organizations. Data is transferred only in the following limited circle:

Logistics partners: Your name and address are passed to the courier service delivering the order.

Payment authorities: For safe transactions, data required by payment gateways is transferred.

State authorities: In cases provided by the legislation of the Republic of Uzbekistan, at the request of official judicial or law enforcement agencies.

6. User rights

The buyer has the following rights regarding their personal data:

Right to view and receive a copy of data

Right to correct incorrect data

Right to delete data from the Platform database (Right to be forgotten)

Restriction of processing or opting out of marketing messages