Privacy Policy

1. General

This Privacy Policy applies to the NutriZone sports nutrition store website nutrizone.uz, its Telegram bot and Mini App, and to services provided through our store tills.

By using our services, signing up or placing an order, you agree to your data being processed as described in this policy. Personal data is processed in accordance with the Law of the Republic of Uzbekistan “On Personal Data” and other applicable legislation.

2. Data we collect

Account data: phone number, full name, Telegram ID and username, profile photo, language and notification settings.
Profile (optional): birthday, height, weight and goal — only for personal recommendations and your daily plan.
Delivery: addresses, the point you pin on the map and the recipient's phone.
Purchases: orders, receipts, returns, payment method and status, your NutriZone Coins balance and tier.
Communication: support chat messages and files, reviews, the contact form and “Find a product” requests (product name, description, link and photo).
Technical data: IP address, browser and device type, sign-in time — for security, fraud prevention and fixing errors.

3. How we use it

Signing you in (one-time code via Telegram) and protecting your account.
Accepting orders, payment, delivery or store pickup.
Issuing electronic and fiscal receipts, handling warranty and returns.
Loyalty programme: coins, tiers and gifts.
Notifying you about order status, payment reminders and answers to your requests.
With your consent — news and promotions (you can turn them off in settings at any time).
Improving search, assortment and recommendations (based on aggregated, anonymised statistics).

4. Payment data

Online payments are made on the secure pages of Payme, Click and Uzum Bank. Card numbers, expiry dates and SMS codes never reach NutriZone servers and are not stored — we only receive the transaction ID, amount and payment status.

5. Who we share data with

We do not sell your personal data or share it with third parties for advertising. Data is shared only to the extent needed to provide the service:

Couriers and store staff — to deliver or hand over your order (name, phone, address).
Payment systems (Payme, Click, Uzum Bank) — to process the payment.
Telegram — to send sign-in codes and notifications.
The fiscal data operator and tax authorities — the receipt data required by law.
Hosting and technical providers — under confidentiality and only on our instructions.
If you use the AI shopping assistant — the text of your question is sent to the service provider to prepare an answer.
Public authorities — only where and as required by law.

6. Cookies and browser storage

We only use cookies and browser storage that the site needs to work: your sign-in session, language, cart, theme (light/dark), compare list and recent searches. No advertising or third-party tracking cookies are used. You can disable cookies in your browser, but sign-in and the cart will then stop working.

7. Retention

Account data is kept while your account is active. Order, receipt and payment records are kept for the periods required by accounting and tax law. Technical logs and expired sessions are deleted regularly. If you ask us to delete your account, your data is deleted or anonymised, except records we are legally required to keep.

8. Security

All traffic with our website and apps is encrypted with HTTPS (TLS).
Payment system keys are stored encrypted; staff access data only as far as their role requires.
The database is backed up regularly and the system is monitored.
Suspicious sign-in attempts are rate-limited; you can “Sign out of all devices” from your account.

9. Your rights

To know which of your data is being processed.
To correct inaccurate data — yourself in Profile and Addresses, or through us.
To request deletion of your data or restriction of its processing.
To withdraw consent to marketing messages at any time — Settings → Notifications.
To complain to the competent public authority if you believe your rights have been violated.

10. Minors

Our services are intended for users over 16. People under 16 should use sports nutrition only after consulting a parent or doctor. If we learn that a child has given us personal data, it will be deleted.

11. Changes to this policy

We may update this policy. We will announce significant changes on the website or in Telegram. The current version is always published on this page with its effective date.