Privacy Policy
Bog'ot Master
Effective date: 12 October 2026
Last updated: 12 October 2026
1. Data Controller
The controller responsible for processing personal data through bogotmaster.org is:
- Full registered legal name: “BOG OT MASTER” Family Enterprise
- Registered address: 220204, Bogot district, Khorezm region, Republic of Uzbekistan.
- Privacy contact: info@bogotmaster.org
- Website: https://bogotmaster.org
This Privacy Policy explains how we collect, use, disclose, store and protect personal data when you visit our website, submit a business enquiry, request a quotation or communicate with us concerning our products.
Our primary business involves agricultural products and international B2B trade. Personal data may concern representatives, employees, suppliers, customers and other individuals who communicate with us.
This Policy must be read alongside any additional privacy notice that applies to a particular transaction or service.
2. Personal Data We Collect
Depending on your interaction with us, we may process:
- Contact information: name, business email address, telephone number and other contact details you provide.
- Business information: company name, professional role and relevant business contact information.
- Enquiry and transaction information: requested products, quantities, delivery destinations, proposed delivery terms, correspondence and information needed to prepare a quotation or fulfil an order.
- Technical information: IP address, browser and device information, requested pages, timestamps and server-log information, to the extent collected by our systems and service providers.
- Website interaction information: product selections, quotation-list information and usage statistics, where these are actually collected.
We do not intentionally request sensitive personal data for ordinary business enquiries. Please do not submit such information unless it is necessary and we have provided an appropriate method for doing so.
3. Purposes and Legal Bases
We process personal data only for specified and legitimate purposes, subject to applicable law.
| Purpose | Potential legal basis, where applicable |
|---|---|
| Responding to enquiries and quotation requests | Steps taken at the individual's request before entering into a contract, where applicable; otherwise, an appropriate lawful basis such as legitimate interests |
| Managing a business relationship or fulfilling an order | Contractual necessity where the individual is a party to the contract; otherwise, the applicable legal basis must be assessed |
| Maintaining legally required business records | Compliance with a legal obligation where one applies |
| Protecting the website and preventing abuse | Legitimate interests or another applicable legal basis |
| Measuring website performance | An appropriate lawful basis, taking account of identifiability, applicable device-access rules and any consent requirement |
| Establishing, exercising or defending legal claims | Legitimate interests or another applicable legal basis |
Where processing relies on legitimate interests under the GDPR, we assess the purpose, necessity of the processing and the interests and rights of affected individuals.
Where consent is required, we will request it through an appropriate affirmative mechanism. Submitting a business enquiry does not, by itself, constitute blanket consent to unrelated processing or every international data transfer.
Where different laws apply, we will assess the relevant legal basis and requirements under each applicable regime.
We do not use personal data for unrelated purposes without an appropriate lawful basis and any additional notice or consent required by law.
4. Disclosure to Service Providers and Other Recipients
We may disclose personal data to service providers that support our business, including website hosting, database, email, communications, security and IT providers.
We may also disclose relevant information to logistics providers, freight forwarders, customs brokers, banks, insurers, professional advisers and public authorities where necessary for an order, a legitimate business purpose or compliance with applicable law.
Where a provider processes personal data on our behalf, we will implement the contractual and organisational safeguards required by applicable law. A provider's own independent processing will be assessed separately.
We do not sell personal data.
5. International Data Transfers and Storage
Personal data may be stored, transmitted or accessed in countries other than the country in which it was collected.
We will identify relevant storage locations, processing locations, remote-access locations and recipients before determining the applicable transfer requirements.
For processing subject to the GDPR, transfers to third countries will be conducted in accordance with Chapter V of the GDPR, where applicable. Depending on the circumstances, this may require an adequacy decision, appropriate safeguards or another permitted transfer mechanism.
We will separately comply with the applicable requirements of the Law of the Republic of Uzbekistan No. LRU-547 of 2 July 2019, including the current rules governing storage in Uzbekistan and registration of relevant personal-data databases.
The use of a foreign hosting provider does not, by itself, establish compliance with these requirements.
6. Cookies, Local Storage and Website Analytics
Our website may use local storage, server logs and other technical mechanisms necessary to operate its functions and protect against abuse.
Where a technology stores information on or accesses information from a user's device, we will assess whether consent or another permitted exception is required under applicable law.
Where consent is required, the relevant technology will not be activated before valid consent is obtained. Users will be provided with an appropriate way to manage or withdraw consent.
7. Data Retention
We retain personal data only for as long as necessary for the purpose for which it was collected, subject to applicable legal obligations and the establishment, exercise or defense of legal claims.
We will maintain documented retention periods or objective retention criteria for:
- Business enquiries that do not lead to an order;
- Contractual, accounting, tax and customs records;
- Business correspondence;
- Security and server logs;
- Email-delivery records;
- Website analytics and backups.
When data are no longer required, we will delete or anonymise them where appropriate and technically feasible, subject to applicable legal requirements and documented backup-retention arrangements.
8. Your Rights
Depending on the law applicable to the processing, you may have the right to:
- Request access to personal data concerning you;
- Request correction of inaccurate data;
- Request deletion where the relevant legal conditions are met;
- Request restriction of processing where applicable;
- Object to certain processing;
- Request data portability where the statutory requirements are satisfied;
- Withdraw consent where processing is based on consent;
- Lodge a complaint with a competent supervisory authority.
These rights are not absolute and may be subject to statutory conditions or exceptions. The rights available under Uzbek law may differ from those under the GDPR or UK GDPR.
To submit a request, contact info@bogotmaster.org with the subject line "Privacy request". We may request proportionate information to verify your identity and will respond within the time limit prescribed by the applicable law.
Where a request cannot be fulfilled, we will explain the reason to the extent required by law.
9. Data Security
We implement appropriate technical and organizational measures to protect personal data against unauthorized access, disclosure, alteration, loss or destruction.
Such measures may include access controls, secure transmission, credential management, backup procedures, provider oversight and incident-response procedures, as applicable to the systems actually in use.
No method of transmission or electronic storage guarantees absolute security.
Where a personal-data breach occurs, we will assess it promptly and make any notifications required by applicable law, including notifications to competent authorities and affected individuals where the relevant statutory conditions are met.
10. Third-Party Services
Our website may link to third-party websites or provide links to communication services such as email, WhatsApp or Telegram.
When you choose to use an external service, its own privacy terms may apply to the processing it conducts. We do not claim responsibility for processing independently carried out by third parties outside our control.
We will disclose relevant third-party integrations and the data they receive where required by applicable law.
11. Changes to This Policy
We may revise this Policy when our processing activities, service providers or legal obligations change.
The current version will be published on our website with its effective date. Where required by law, we will provide additional notice or obtain consent before introducing new processing activities.
12. Contact
For privacy questions or requests, contact:
- Email: info@bogotmaster.org
- Subject: Privacy request
- Postal address: 220204, Bogot district, Khorezm region, Republic of Uzbekistan.
This Policy must be interpreted and applied consistently with the applicable laws of Uzbekistan and any additional data-protection laws that govern the relevant processing.