Personal Data Processing Policy of credtech.uz

POLICY

on the processing of personal data
at "CREDIT TECHNOLOGY GROUP" LLC

Approved by Order No. 10 of 18 September 2025
Tashkent, Republic of Uzbekistan

1. General provisions

1.1. This Policy (hereinafter the "Policy") sets out the procedure and conditions for the processing of personal data of visitors to the website https://credtech.uz (hereinafter the "Website"), as well as the measures taken to protect such data by "CREDIT TECHNOLOGY GROUP" LLC (hereinafter the "Company" or the "Operator").

1.2. The Policy has been developed in accordance with the Law of the Republic of Uzbekistan "On Personal Data" No. ZRU-547 of 2 July 2019 and other regulatory legal acts governing the protection of personal data.

1.3. The purpose of the Policy is to ensure the protection of the rights and freedoms of individuals in the processing of their personal data, including the right to privacy.

1.4. The Policy applies to all information that the Company may obtain about users of the Website in the course of their interaction with the Website.

2. Purposes of collecting and processing personal data

2.1. Personal data is processed solely for the following purposes:

ensuring the operation of the Website and enabling users to submit requests through feedback forms;
reviewing incoming inquiries, suggestions or complaints;
responding to users' requests;
improving the quality of service and keeping the information on the Website up to date.

3. Composition and categories of data processed

3.1. The Company may process the following categories of users' personal data:

surname, first name, patronymic (if any);
e-mail address;
phone number;
information contained in the user's requests or messages.

3.2. The Company does not process special categories of personal data or biometric data, nor any data relating to the disclosure of state, commercial or other legally protected secrets.

4. Legal grounds for processing

4.1. Personal data is processed on the basis of the data subject's consent.
4.2. Providing personal data when completing forms on the Website is voluntary and confirms the user's consent to its processing.

5. Procedure and conditions of data processing

5.1. Personal data is processed by automated means and without the use of such means — by collection, recording, systematization, storage, updating (modification, amendment) and deletion.
5.2. Personal data is stored in information systems located in the Republic of Uzbekistan.
5.3. The Company takes all necessary organizational and technical measures to protect personal data against unauthorized access, modification, blocking, destruction or dissemination.

6. Transfer to third parties and storage

6.1. Personal data is not transferred to third parties without the data subject's consent, except in cases expressly provided for by the legislation of the Republic of Uzbekistan.
6.2. Access to personal data is granted only to authorized employees of the Company who need such data to perform their job duties.

7. Processing and deletion periods

7.1. Personal data is processed until the purposes of processing are achieved or until the data subject withdraws consent.
7.2. Once the purposes of processing have been achieved or a withdrawal of consent has been received, personal data shall be deleted or depersonalized.

8. Rights of the data subject

8.1. The data subject has the right to:

obtain information about their personal data, the sources from which it was obtained and the purposes of processing;
request that their personal data be updated, blocked or destroyed where the data is incomplete, outdated, inaccurate or processed unlawfully;
withdraw consent to the processing of their personal data by notifying the Company.

9. Personal data protection measures

9.1. The Company takes the necessary legal, organizational and technical measures to ensure the security of personal data, including:

restriction of access to personal data;
use of antivirus software and firewalls;
data backups;
regular updates of software and security tools.

10. Contact information

Operator of personal data (data controller):
"CREDIT TECHNOLOGY GROUP" LLC
TIN 312353360
37 Kuylyuk-3, Yuksalish MFY, Mirabad district, Tashkent 100080, Uzbekistan
E-mail: This email address is being protected from spambots. You need JavaScript enabled to view it.

11. Final provisions

11.1. This Policy is a publicly available document and is published online at: https://credtech.uz.
11.2. The Policy takes effect upon publication and remains in force until a new version is approved.

Full Compliance with Uzbek Legislation

CODE OF ETHICS

The company has a Policy on Handling Citizens' Requests and Complaints in place. Official feedback channels have been set up, and a rapid response system for requests is in operation. Every message is reviewed on a case-by-case basis in accordance with the legislation of the Republic of Uzbekistan.

A free line for complaints, suggestions and consultations is available — you can reach us by phone or via the feedback form on the website.

FEEDBACK

CREDIT TECHNOLOGY GROUP (CTG) is committed to the principles of openness and ethical engagement. A Policy on Handling Citizens' Requests and Complaints is in place, and every request is reviewed within the established time limits, with the applicant always notified of the outcome.

For the convenience of our clients, a single feedback line and an online form on the website are available for submitting suggestions and complaints.

Tel.: +998-78-707-20-26

QUALITY CONTROL

CTG has a dedicated quality control department. All requests and calls are analyzed by an AI system that provides 100% communication monitoring and ensures compliance with ethical engagement standards.

Tel.: +998-78-707-20-26

IN-HOUSE TRAINING CENTER

CTG runs its own in-house training center. Employees regularly undergo training and professional development, which ensures a consistently high standard of communication quality.

Tel.: +998-78-707-20-26

Address

37 Kuylyuk-3, Yuksalish MFY, Mirabad district, Tashkent 100080, Uzbekistan

Phone

+998-78-707-20-26
+998-78-333-82-96

Email

mail@credtech.uz

"CREDIT TECHNOLOGY GROUP" LLC

Address: 37 Kuylyuk-3, Yuksalish MFY, Mirabad district, Tashkent 100080, Uzbekistan
TIN 312353360
Bank TIN 207275139
Account No. 20208000907292190001
with JSC "KAPITALBANK"
Bank MFO code 01158

Feedback

I give my consent to the processing of my personal data in accordance with the operator's personal data processing policy.

I confirm my consent to the transfer of information (including personal data) in the form of electronic notifications over open Internet communication channels.