At Bronla.uz, we value the privacy of our Users and strive to protect their personal data. This Privacy Policy (hereinafter — the «Policy») is drawn up by «Bronla» LLC (hereinafter — «Bronla», «we») and explains how personal data is collected, processed, stored, disclosed and protected when using the bronla.uz website and mobile application (hereinafter — the «Platform»).
The Policy has been developed on the basis of the Law of the Republic of Uzbekistan «On Personal Data» (No. O'RQ-547, 02.07.2019) and other applicable legislation. When processing personal data, Bronla acts as an operator (data controller) within the meaning of this law.
1. Definitions
- Personal data — information relating to a specific natural person or that allows such a person to be identified.
- Subject (User) — the natural person to whom the personal data relates.
- Operator (Bronla) — the party carrying out the processing of personal data.
- Processing — the collection, systematization, storage, modification, use, disclosure, distribution and destruction of data.
- Host (Lessor) — the party offering a property for rent on the Platform and receiving the User's data once a booking is made.
2. Data We Collect
2.1. Data provided by the User:
- first and last name, phone number, email address;
- data required to make a booking (date, number of guests, etc.);
- payment-related data (subject to clause 2.3 below).
2.2. Data collected automatically:
- IP address, browser and operating system type, device information;
- referring URLs, pages viewed, statistics on the use of the Platform;
- data obtained through cookie files (see Section 7).
2.3. Payment data:
Payments are made through licensed payment systems (Payme, Click, Paynet). The full details of a bank card (card number, expiry date, CVV) are not stored by Bronla and are processed directly by the relevant payment system.
3. Purposes and Legal Grounds for Processing Data
- Carrying out and confirming the booking process and connecting with the Host (for the purpose of performing the contract).
- Supporting the User, responding to inquiries and complaints.
- Improving the operation, security and quality of the Platform's services.
- Sending advertising and informational messages based on the User's consent (the User may unsubscribe at any time).
- Fulfilling legal obligations and responding to lawful requests from government authorities.
Legal grounds for processing: the User's consent (Article 21 of the Law), the necessity of performing the contract, and the requirements of applicable legislation. By registering on the Platform and using its services, the User consents to the processing of their data for the purposes set out in this Policy.
4. Disclosure of Data to Third Parties
4.1. To the Host.
Once a booking is made, the data required to fulfil it (name, phone number, booking details) is transferred to the relevant Host. The Host must use this data solely for the purpose of fulfilling the relevant booking and independently bears responsibility for it. Bronla is not liable for any unlawful use of this data by the Host or any use beyond its control.
4.2. To payment operators and technical providers.
Data may be shared with providers of payment systems, hosting, IT and analytics services — only to the extent necessary to perform their functions and subject to confidentiality obligations.
4.3. On the basis of legal requirements.
Data may be disclosed in accordance with applicable legislation, lawful requests of a court or authorized government bodies, and also to protect the rights and safety of Bronla or third parties.
4.4. Business transactions.
In the event of a merger, acquisition or transfer of assets, data may be transferred as part of the transaction; in such a case the User will be notified in advance.
Except for the cases specified above, Bronla does not sell or distribute the User's personal data to third parties without their consent (Article 28 of the Law — confidentiality).
5. Data Storage and Localization
- Personal data is retained for the period necessary to achieve the purposes set out in this Policy, unless a longer retention period is required by law.
- In accordance with Article 27-1 of the Law «On Personal Data», the personal data of citizens of the Republic of Uzbekistan is collected, systematized and stored on technical means physically located within the territory of the Republic of Uzbekistan, as well as in databases registered in the State Register of Personal Data Bases.
- When the purpose of processing has been achieved, consent has been withdrawn, or the retention period has expired, the data is destroyed in the manner prescribed by law.
6. Cross-border Transfer of Data
The transfer of personal data outside the territory of the Republic of Uzbekistan is carried out only to the territory of states that ensure equal protection of the rights of subjects, and in accordance with the requirements of Article 15 of the Law.
7. Cookies and Analytics
- The Platform uses cookie files and similar technologies to improve the user experience, remember settings and collect statistics.
- The User may restrict or disable cookie files through their browser settings; this may affect certain functions of the Platform.
8. Data Security
- We take reasonable legal, organizational and technical measures to protect data from unauthorized access, disclosure, alteration or loss.
- Since no method of transmission over the Internet or electronic storage is 100% secure, we cannot guarantee absolute security, but we make every reasonable effort to protect data.
- The User must keep their account credentials (password, etc.) confidential and must not disclose them to third parties. Bronla is not liable for any consequences arising from the disclosure of login credentials by the User.
9. User Rights and Withdrawal of Consent
In accordance with the Law «On Personal Data», the User has the following rights:
- to obtain information about the processing of their data;
- to clarify or correct inaccurate or incomplete data;
- to request the deletion of their data or the restriction of its processing;
- to withdraw their consent to processing at any time.
If consent is withdrawn or data is deleted, this may restrict or make it impossible to use certain functions of the Platform, including making a booking. To exercise these rights, please contact us through the channel indicated below.
10. Children's Privacy
The Platform's services are not intended for persons under the age of 18. We do not knowingly collect personal data from minors. If it is discovered that the data of a minor has been collected inadvertently, we will take appropriate measures to delete it. We ask that you notify us of any such case.
11. Third-party Links
The Platform may contain links to third-party websites or services that we do not control. We are not responsible for the privacy practices or content of such sites. We recommend reviewing their privacy policies before providing any personal information.
12. Limitations of Liability
- As an operator, Bronla is responsible for protecting the data under its control and is not liable for the subsequent misuse, by the Host or any other third party, of data lawfully transferred to them. The Host is considered an independent operator with respect to the data provided to it.
- Bronla is not liable for information that the User has voluntarily disclosed to the public or to third parties.
13. Changes to the Policy
We reserve the right to update this Policy at any time. In the event of significant changes, the User will be notified by means of a visible notice on the website or by email. The updated Policy takes effect from the date it is published on the website.
14. Contact Us
For questions and requests regarding this Policy or the processing of data:
«Bronla» LLC
Telegram @bronlahelp | Email: mail@bronla.uz | Phone: +998785551991
Address: Tashkent, Yakkasaray district, Mirobod street, 10.
Authorized government body in the field of personal data: State Personalization Center (pd.gov.uz).
By using the Platform and its services, the User confirms that they have read and understood this Privacy Policy and consent to the processing of their data in the manner described therein.
Last revised: 24.06.2026