Privacy and Personal Data Processing Policy

Version of 6 October 2026

This is a translation. The Russian version of this Policy is the official text.

This Privacy and Personal Data Processing Policy sets out the procedure for the processing and protection of personal data of users of the website of GALARIS LLC (hereinafter, the “Company”, “GALARIS”, the “Website”).

The Policy has been developed taking into account the Law of the Republic of Uzbekistan No. ZRU-547 “On Personal Data” of 2 July 2019, as amended, and other applicable regulatory legal acts of the Republic of Uzbekistan.

1. Personal Data Operator

The operator of personal data is:

GALARIS LLC
Republic of Uzbekistan
Legal address: 54v Billur Street, Husayn Boyqaro MFY, Bektemir District, Tashkent
TIN: 204696614
Email: ooogalaris@mail.ru
Telephone: +998 (93) 184-81-00

2. Data That May Be Processed

When the Website is used, the Company may receive and process:

first name and surname;
company name and position;
telephone number;
email address;
country and/or city;
the content of a commercial or technical request;
selected equipment items and the required quantity;
documents and files voluntarily attached by the user;
information provided by the user in the course of subsequent correspondence;
technical data about visits to the Website, including IP address, device and browser type, landing page, referral source and technical security logs;
advertising campaign parameters and analytics identifiers, if the relevant analytics and advertising systems are connected to the Website.

The Company does not ask users to submit special, biometric or genetic personal data through the Website, unless this is expressly required by law or by separate contractual relations.

3. Purposes of Processing

Personal data may be processed for the purposes of:

receiving and considering user requests;
communicating with the user;
checking the availability of equipment;
preparing technical and commercial information;
preparing and sending a commercial proposal;
conducting negotiations prior to the conclusion of a contract;
concluding and performing a contract;
arranging delivery and related services;
preventing abuse, fraud and automated spam;
ensuring the information security of the Website;
internal analytics of the effectiveness of the website and advertising channels;
complying with the requirements of the legislation of the Republic of Uzbekistan.

Data are not used for purposes incompatible with the purposes for which they were collected without an appropriate legal basis.

4. Legal Bases for Processing

Processing is carried out where one or more of the following bases exist:

the consent of the personal data subject;
the need to take steps at the request of the subject prior to entering into a contract;
the need to conclude or perform a contract;
the performance of the Company’s obligations provided for by law;
the exercise of the lawful rights and interests of the Company or a third party, provided that the rights and lawful interests of the subject are not violated;
other bases provided for by the legislation of the Republic of Uzbekistan.

5. Transfer of Data to Third Parties

The Company may provide the necessary personal data to persons involved in the technical support and fulfilment of the user’s request, solely to the extent necessary for the relevant purpose.

Such recipients may include:

the hosting and technical infrastructure provider;
email services used by the Company;
the Telegram service and the Telegram Bot API, used for internal notification of incoming requests;
providers of web analytics and advertising analytics systems, once these are connected;
carriers, logistics organisations, technical contractors, insurance organisations and other persons, where their involvement is necessary for the preparation or performance of a specific request or contract;
government authorities, in cases provided for by law.

The Company does not sell users’ personal data to third parties.

6. Cross-Border Transfer

Certain providers of information and communication services may process data outside the Republic of Uzbekistan.

Such transfer is carried out where there are grounds provided for by the legislation of the Republic of Uzbekistan, including transfer to states that ensure the level of protection required by law, the application of permissible protection mechanisms, or the consent of the subject to the relevant cross-border transfer.

By submitting a request through the Website and giving the relevant consent, the user agrees to the processing of his or her data for the purpose of considering the request, including transfer via the information and communication services used by the Company, to the extent necessary for considering the request.

7. Retention Period

Personal data are retained for no longer than is necessary for the purposes of their processing, unless a longer period is established by law or is required for the performance or protection of rights under contractual relations.

Upon achievement of the purpose of processing, expiry of the established period or withdrawal of consent, the data are destroyed or anonymised, except where their further retention is permitted or required by law.

Documents and files attached to requests that have not become part of the contractual documentation are recommended to be deleted once they are no longer of practical need.

8. Information Protection

The Company takes reasonable legal, organisational and technical measures to protect personal data against:

unauthorised access;
alteration;
loss;
destruction;
copying;
provision or dissemination without a lawful basis.

Access to information is granted only to persons who require it to perform the relevant functions.

9. Rights of the Personal Data Subject

To the extent provided for by law, the subject has the right to:

receive information about the processing of his or her personal data;
request the correction or supplementation of data;
withdraw previously given consent;
request the cessation of processing in cases provided for by law;
request the destruction of data where there are appropriate grounds;
seek protection of his or her rights from the authorised government body or a court.

To exercise these rights, the subject may contact: ooogalaris@mail.ru

The Company may request information necessary to verify the identity of the applicant in order to prevent disclosure of data to an unauthorised person.

10. Cookies and Analytics

The Website may use technically necessary cookies and similar technologies to ensure its operation, protect against abuse, save settings and analyse its technical performance.

When web analytics systems and advertising platforms are connected, the Website may use additional identifiers and cookies in accordance with this Policy and the applicable legal requirements.

Where necessary, the user is provided with a mechanism for managing the relevant technologies.

11. Links to Third-Party Resources

The Website may contain links to third-party websites and services.

The Company does not control the data processing rules of such third-party resources. The user is advised to review their own privacy policies.

12. Amendments to the Policy

The Company may amend this Policy in the event of changes in legislation, technical infrastructure or the procedure for processing data.

The current version is published on the Website with the date of its update indicated.

13. Contacts

For matters relating to the processing of personal data:

GALARIS LLC
Republic of Uzbekistan
Legal address: 54v Billur Street, Husayn Boyqaro MFY, Bektemir District, Tashkent
TIN: 204696614
Email: ooogalaris@mail.ru
Telephone: +998 (93) 184-81-00