Privacy policy

1. General provisions

1.1. This Policy sets out how the operator, Khizmatrasonii Nav Limited Liability Company (the “Operator”), processes personal data of users of https://catalog.tj (the “Site”) in accordance with the Law of the Republic of Tajikistan “On Personal Data Protection” and other regulations of the Republic of Tajikistan.

1.2. The Policy applies to all personal data the Operator receives through the Site.

1.3. By using the Site, the user confirms having read the Policy. Consent to optional web analytics is given separately in the banner on the Site.

2. What data we process

• Account data — name, e-mail address and Google account identifier if you sign in with Google.
• Data about added websites — domain, name, description, category, ownership verification method, moderation decisions.
• Order and payment data — order number, tariff, amount, date, status and the transaction identifier in the payment service. The Operator does not receive bank card numbers, passwords or other payment credentials.
• Technical data for protecting the ranking — IP address, session identifier (cookie), browser characteristics (user agent, language) and click time when you click a website in the ranking.
• Web analytics data, only with your consent — IP address, country and city derived from the IP, device type and model, operating system, browser, page viewed, referrer, language, date and time of the visit.
• Requests — complaints about websites, refund requests and personal data requests.

2.2. The Operator does not process special categories of personal data (health, racial or ethnic origin, political or religious views, etc.) or biometric data.

3. Purposes and legal grounds

• Signing in and the Account — performance of the Terms of Use.
• Providing paid services, recording payments and issuing documents — performance of the agreement (public offer) and the Operator’s obligations under tax and accounting legislation.
• Counting unique clicks and protecting the ranking from manipulation — performance of the Terms of Use and ensuring the reliability of the ranking. This data is used only to determine uniqueness and detect abuse.
• Traffic statistics — the user’s consent.
• Handling requests and complaints — performance of the Terms of Use and legal requirements.
• Security of the Site and accounts — performance of the Terms of Use and legal requirements.

4. Cookies

4.1. The Site uses cookies necessary for its operation and to remember your choices:

• ct_sid — session identifier for counting unique clicks (up to 1 year).
• ct_lang — selected interface language (up to 1 year).
• ct_consent — your choice in the consent banner (up to 1 year).
• ct_user — signing in to the Account (up to 30 days).

4.2. Web analytics is enabled only if you click “Accept” in the banner. If you choose “Essential only”, no analytics data is collected. You can change your decision by deleting the Site’s cookies in your browser or by writing to info@hizmatrason.tj.

4.3. If you click “Accept”, the Site also enables the Yandex.Metrica (including Webvisor, which records on-page actions: scrolling, clicks and mouse movements) and Google Analytics statistics services. They set their own cookies (_ym_*, _ga*) and process data under their own privacy policies.

5. Sharing data with third parties

5.1. The Operator does not sell personal data. Data is shared only to the extent necessary for the stated purposes:

• Google — to sign in with a Google account.
• The payment service (SmartPay) and banks, e-wallets — to process payments.
• The hosting provider and the content delivery and protection service (Cloudflare) — to run and protect the Site.
• Yandex LLC (Yandex.Metrica) and Google (Google Analytics) — for visit statistics, only with your consent.
• Public authorities — on the grounds and in the manner provided by the legislation of the Republic of Tajikistan.

5.2. Some of these parties are located outside the Republic of Tajikistan. Cross-border transfer of personal data is carried out in accordance with the legislation of the Republic of Tajikistan.

6. Storage location and retention

6.1. Personal data is stored on servers located in the Republic of Tajikistan.

6.2. Retention periods:

• account and website data — until the account is deleted, and then no longer than 30 days in backups;
• order and payment data — for the periods established by the tax and accounting legislation of the Republic of Tajikistan;
• click and web analytics data — 12 months;
• requests — 3 years after they are handled.

6.3. After these periods, data is deleted or anonymised.

7. Your rights

7.1. You have the right to:

• receive information about the processing of your data and a copy of it;
• request that your data be clarified or corrected;
• request deletion of your data where its retention is not required by law;
• withdraw your consent to web analytics at any time;
• lodge a complaint about the Operator with the authorised state body for personal data protection or with a court.

7.2. Requests are sent to info@hizmatrason.tj from the e-mail address linked to the account. The Operator responds within no more than 30 calendar days.

8. Data protection

8.1. The Operator applies legal, organisational and technical safeguards: encrypted connections (HTTPS), storing administrator passwords only as hashes, restricting staff access, logging administrator actions and making backups.

9. Minors

9.1. The Site’s paid services are intended for adults. Persons under 18 may use the Account only with the consent of their legal representatives.

10. Changes and contacts

10.1. The Operator may amend the Policy by publishing a new version on the Site. Users with an account are notified of material changes by e-mail.

10.2. Operator: Khizmatrasonii Nav Limited Liability Company, address: 55/9 Bukhoro St., Dushanbe, Republic of Tajikistan. Personal data enquiries: info@hizmatrason.tj.