Personal data processing policy
Who processes the data, what exactly, why, where it goes, how long it is kept and how to withdraw consent.
Revision of 17 September 2026.
1. Operator and scope
This policy describes how SILA SVETA private enterprise (xususiy korxona), TIN 303213404, address: 85 Bodomzor yoʻli 1-tor koʻchasi, Yunusabad district, Tashkent 100052, phone +998 97 771 11 83, processes the personal data of visitors to silasveta.uz.
The company is a personal data operator within the meaning of Article 4 of the Law of the Republic of Uzbekistan “On Personal Data” (No. ZRU-547). The policy covers the data you enter into the site forms and the technical data generated when they are sent.
Requests concerning personal data are handled by the company director at the phone number and address above.
2. What data we receive
We receive only what you type into the request or calculation form: name, phone, a second contact (Telegram or email), company name, facility type, area, mounting height, a description of the existing lighting and your message. The form itself marks which fields are required.
The interface language and the address of the page you sent the form from travel with the request. During the “not a robot” check, Cloudflare Turnstile receives your IP address and technical characteristics of your browser.
A floor plan or technical specifications file selected in the form is not sent to the server yet: file upload is not connected, and the field says so. When upload appears, this policy will be updated before it is switched on.
We do not ask for special categories of personal data (health, beliefs and the like). Please do not enter them in the message field.
3. Purposes and legal basis
The data serve one purpose: to contact you, clarify the task and prepare a lighting calculation or a quotation for your site.
The legal basis is your consent, given by ticking the checkbox or sending the form (Articles 18 and 21 of Law No. ZRU-547), and the need to take steps at your request before a contract is concluded (Article 18 of Law No. ZRU-547).
We run no mailing lists, do not sell the data and do not use it for advertising or profiling. If the purpose changes, we will ask for separate consent (Article 19 of Law No. ZRU-547).
4. How a request travels and who receives the data
The site is static: it has no database of its own and no user accounts. The form is sent to the /api/lead handler, which runs on Cloudflare infrastructure (Cloudflare Workers).
The handler verifies the Turnstile response, limits field length and sends the request as a single message via the Telegram Bot API to the company's working chat. The request is not stored on Cloudflare servers; the error log receives technical codes, not field contents.
Only company staff who handle requests have access to the working chat. The data are not passed to anyone else except where the law expressly requires it (a request from the authorised state body or a court).
5. Cross-border transfer
The servers of both services are outside Uzbekistan, so sending a request is a cross-border transfer of personal data (Article 15 of Law No. ZRU-547).
Cloudflare, Inc. (USA) processes the request in its network and performs the Turnstile check; the company is certified under the EU-US Data Privacy Framework. Telegram Messenger Inc. (a group of companies with an office in Dubai, UAE) stores the working chat message on its servers outside Uzbekistan.
The transfer is based on your consent: Article 15 of Law No. ZRU-547 allows it as a basis for transfer to states not included in the list of countries with adequate protection (Cabinet of Ministers Resolution No. 415 of 29 July 2026). Consent to such transfer is part of the consent text under the form.
If you do not want your data to pass through these services, call us: we will take the request by phone.
The site does not collect data that the law requires to be stored only in Uzbekistan (Article 27-1 of Law No. ZRU-547: biometric and genetic data, data of telecom subscribers).
6. Retention and deletion
Data are kept until the purpose of processing is achieved (Article 10 of Law No. ZRU-547). The request stays in the working chat while work on your enquiry continues.
If the enquiry does not lead to a contract, we delete the request message from the working chat no later than 12 months from the date it was received. If a contract is concluded, the contact person's data are kept in the contract and accounting records for the periods set for such documents.
When consent is withdrawn, the data are destroyed (Article 17 of Law No. ZRU-547) unless we have another legal ground to keep them, such as a concluded contract.
7. Your rights and how to exercise them
Under Article 30 of Law No. ZRU-547 you may: know which of your data we hold; obtain information about their processing (Article 22); demand correction, suspension of processing or destruction of the data; withdraw consent.
Consent is withdrawn in the same form in which it was given, or in writing, including by email (Article 21 of Law No. ZRU-547).
Send your request by phone to +998 97 771 11 83 or by letter to the company address in section 1. We reply within ten days; if we refuse, we state the reason in writing, as Article 22 of Law No. ZRU-547 requires.
A complaint may be filed with the authorised state body, the State Personalisation Centre under the Cabinet of Ministers of the Republic of Uzbekistan, or with a court.
8. Cookies and browser storage
The site sets no cookies and uses no visitor counters or advertising trackers.
Browser storage (localStorage) keeps one value: the colour theme you chose, light or dark. It is not sent to the server and is cleared together with the site data in your browser settings.
According to Cloudflare, the Turnstile check sets no cookies. If analytics or other cookies appear on the site, we will update this section before they are switched on.
9. Data protection, changes and contacts
We apply safeguards proportionate to the amount of data: transfer over HTTPS only, server-side validation and limits on fields, working chat access only for staff who handle enquiries, service keys never stored in the site code.
The policy may change together with the site. The current revision is always on this page, with its date at the top.
Questions about data processing: +998 97 771 11 83; the company's postal address is given in section 1.
This revision was prepared on 17 September 2026 and applies from the date of publication on the site; approval by the director's order is in progress.