Privacy Policy

1. Data controller and contacts

Data controller: PEPS Market

E-mail: contact@peps-market.com

Official Telegram: @peps_uzb

2. What data we may process

Depending on the user's actions, PEPS Market may collect and process first and last name, phone number, Telegram ID and username, delivery address, order details, payment information to the extent necessary, support messages, complaint and return details, and technical information necessary for the site to function and to protect against abuse, where such information is actually collected.

We do not request medical information for a standard order unless it is needed for a separate lawful purpose. Users should not send medical or other sensitive data that is not required for the order.

3. The site and cookies

Under the current configuration, the landing site does not contain order forms and is not intended for self-service checkout.

As of the publication of this Policy, the site does not use Google Analytics, Yandex Metrica, or other web analytics systems and does not set tracking cookies, provided this configuration is actually maintained.

If new analytics, advertising, or other data-processing technologies are introduced, this Policy and the corresponding notices will be updated before such processing begins.

4. Purposes of processing

Personal data may be processed to accept and fulfill orders, communicate with the buyer, confirm orders, arrange delivery, receive and review complaints, returns and replacements, for accounting and tax purposes, to comply with the law, to protect rights and legitimate interests, to prevent fraud, and to maintain contractual and evidentiary records.

5. Legal basis for processing

Depending on the operation, processing may be based on the necessity of concluding and performing a contract, compliance with a legal obligation, the controller's legitimate interest to the extent permitted by law, the data subject's consent where required, or another basis provided by law.

Where a specific processing activity requires separate consent, that consent is requested separately.

6. Telegram and other services

Orders and communication may take place through the Telegram Mini App and Telegram services.

When Telegram is used, part of the data processing is carried out by the Telegram platform itself under its own rules. PEPS Market does not control Telegram's internal data processing and is not responsible for Telegram's own processing to the extent Telegram acts as a separate controller/provider.

PEPS Market is responsible for the processing it carries out itself or entrusts to its contractors.

7. Disclosure to third parties

Necessary data may be shared with courier and logistics companies for delivery, payment organizations and banks to accept or confirm payment, IT contractors for the operation of services, accounting and legal contractors to the extent necessary, and government authorities where such disclosure is required or permitted by law.

We do not sell customers' personal data to third parties.

8. Cross-border processing

When using third-party information systems, including Telegram, technical data processing may take place using infrastructure located outside the Republic of Uzbekistan, to the extent and in the manner determined by the relevant service and applicable law.

PEPS Market does not claim that all data is physically located exclusively on servers in Uzbekistan unless this is documented.

9. Retention period

Data is retained no longer than necessary for the stated processing purposes, contract performance, compliance with mandatory legal requirements, and the protection of rights and legitimate interests.

Contractual, payment, accounting, and other mandatory documents may be retained for the period established by law or necessary to confirm transactions.

After the applicable period expires, data is subject to deletion, destruction, anonymization, or other lawful termination of processing, unless further retention is required by law.

10. User rights and requests

A user may submit a request regarding access to their data, its correction, cessation of processing, or deletion, where there are legal grounds for this.

Requests are submitted through the official support channel or to the e-mail address indicated above.

To prevent disclosure of data to an unauthorized person, PEPS Market may request reasonable identity verification.

Deletion will not be carried out to the extent that retaining the data is required by law, necessary for contract performance, dispute resolution, transaction confirmation, or the protection of rights and legitimate interests.

11. Marketing

Marketing messages are not sent based solely on the fact of placing an order where separate consent is required for the relevant mailing.

Where separate consent has been given, the user may opt out of marketing messages at any time.

Opting out of marketing does not affect mandatory notices about orders, payment, delivery, complaints, security, or legal requirements.

12. Security

PEPS Market takes reasonable organizational and technical measures to protect personal data.

However, no method of storing or transmitting data over the Internet can be guaranteed as completely secure.

Users must not share passwords, confirmation codes, or other account credentials with third parties.

13. Minors

PEPS Market's services are intended for persons aged 18 and older.

PEPS Market does not intentionally collect data from minors for the purpose of placing orders.

If it becomes known that an order was placed by a person under 18, PEPS Market may take steps to stop the relevant processing and resolve the order in accordance with applicable law.

14. Data shared with support

Users should provide only the information necessary to resolve their inquiry.

Do not send passwords, full bank card details, confirmation codes, or other unnecessary sensitive information to support.

If a user voluntarily provides additional information, PEPS Market processes it only to the extent necessary for the relevant purpose and as permitted by law.

15. Changes to this Policy

This Policy may be updated when legislation, services, ordering methods, data storage, infrastructure providers, or other material circumstances change.

The current version is published on the site with the date of the update indicated.

16. Contacts

E-mail: [EMAIL]

Telegram: [LINK]

Address: [ADDRESS]

When contacting us, please provide your name, a contact for a reply, and the substance of your request.