DRAFT — lawyer review required
This text is a draft and has not yet been approved by a lawyer. Places highlighted in yellow will be filled in once the company details are entered.
Payment and Data Security
How we protect your money and personal data — only measures that are actually in place.
Version 0.9 · effective October 18, 2026
Contents
1. Encrypted connection
The site works only over HTTPS (TLS) and sends an HSTS header to the browser, so an unencrypted connection is never opened.
2. Bank card details
Payment is currently accepted in cash or by bank transfer; TuronAvia24 does not ask for or store card numbers, expiry dates or CVV codes.
When card payment is launched, card details will be entered only on the page of a PCI DSS compliant payment provider, with 3-D Secure / SMS confirmation. This page will be updated.
3. Beware of fraud
- Bank details are published only on the Company Details page and in the order invoice.
- Our staff never ask for SMS codes, passwords or card details.
- If you receive a suspicious message, check by calling +998 99 204 03 93.
4. Protecting personal data
- Database access is role-based and limited to authorised staff.
- The admin panel is protected by two-factor authentication and actions are logged.
- Emails, phone numbers and passport numbers are automatically masked in error-monitoring reports.
- Servers are hosted in a data centre in Finland (EU); see the Privacy Policy for details.
5. Reporting a vulnerability
If you find a security issue on the site, email info@turonavia24.uz with the subject "Security". We will review it promptly.