Privacy Policy

1. Operator and legal basis

The data operator is TURONAVIA24 LLC, Samarqand, Yettitom, info@turonavia24.uz, +998 99 204 03 93.

Processing is carried out under the Law of the Republic of Uzbekistan ZRU-547 of 02.07.2019 "On personal data". The legal bases are the data subject's consent, the necessity of performing the contract (issuing the ticket), and statutory accounting obligations.

2. Data we collect

• Passenger data: surname and given name in Latin script, date of birth, gender, citizenship, passport series, number and expiry date.
• Contact data: email address and phone number.
• Order data: route, dates, fare, booking reference (PNR), order status and documents sent.
• Payment data: provider name, transaction id, amount and status. Card numbers and CVV are never received or stored by TuronAvia24.
• Technical data: IP address, browser and device type, language and currency settings, session id and activity logs.

3. Purposes of processing

• Searching, booking, issuing and delivering the air ticket.
• Processing and confirming payment.
• Sending order notifications: ticket, schedule changes, cancellation, refund status.
• Customer support and handling of claims.
• Accounting, tax and audit compliance, and fraud prevention.

4. Sharing with third parties

Data is shared only to the extent needed to fulfil the booking: with the airline and the GDS/consolidator GlobalTravelSpace (EASY TECHNOLOGIES LLC), and with the selected payment provider (Payme, Click, Uzum, Octobank).

Data may be provided to authorised state bodies on official request. Personal data is never sold or shared for advertising purposes.

5. Storage location and retention

Databases containing personal data are hosted on servers located in the Republic of Uzbekistan.

Order and payment records are retained for at least 12 months for audit, accounting and dispute resolution, or longer where the law requires. After that, data is deleted or irreversibly anonymised.

6. Security measures

• All traffic between the site and the API is encrypted with TLS.
• Database access follows a role model and is limited to authorised staff.
• Administrative panel logins are logged and reviewed regularly.
• Card details are entered on the payment provider's own page and never reach TuronAvia24 infrastructure.

7. Rights of the data subject

You may request information about the processing of your data, obtain a copy, have inaccurate data corrected, request deletion where no legal basis remains, and withdraw consent previously given.

Write to info@turonavia24.uz; requests are handled within 10 working days. Withdrawing consent does not cancel obligations under an order already issued, as some data remains necessary for contract performance and statutory reporting.

8. Changes to this policy

The Agency may amend this policy. A new version takes effect on publication; registered users are notified by email of material changes.