1. Who we are

The data controller is TOUR EAST LLC, trading as TourEast Travel, a tour operator registered in Uzbekistan. Registered address: 33/31 Mustakillik Street, Bukhara, Uzbekistan. Tax ID: 306151418. Tour operator licence: No. T-0033-03 of 19 April 2019, issued by the State Committee for Tourism Development of the Republic of Uzbekistan (inbound, outbound and domestic tourism; valid without time limit).

For any question about your data, write to info@toureast.uz or call +998 99 777 80 20.

2. What data we collect

Enquiry and contact forms: your name, email, phone number, country, preferred language, travel dates (and whether they are flexible), number of adults and children, budget, the destinations or services you are interested in, and the message you write to us.

Trip builder: if you use our trip builder, we receive the itinerary you assembled (destinations, days, options) together with your contact details when you send it to us.

Online assistant (concierge chat): the messages you type are sent to an AI service provided by Anthropic in order to generate an answer. We do not use them to build a profile of you, and we do not store them together with your name, email or phone number beyond what is needed to process the request. Please do not enter sensitive information in the chat, such as passport or card numbers, health details or religious beliefs. If you need us to know something of this kind to organise your trip, tell our team directly by email.

Marketing attribution: if you arrive from an advertisement or a campaign link, we record the UTM parameters (source, medium, campaign) together with your enquiry, so that we know which channels bring travellers to us.

Technical data: IP address, browser type, device and pages visited are processed by our servers and security tools. Analytics and advertising tools (Google Analytics 4, Google Tag Manager, Meta Pixel) collect usage data only after you accept them in the cookie banner.

Spam protection: our forms use Google reCAPTCHA, which analyses technical signals (such as IP address and browser behaviour) to tell people from bots. Google processes this data under its own privacy policy.

Booking data: when you confirm a trip we also need the details required to organise it, such as full names of travellers as in their passports, dates of birth, passport details for hotels, trains, flights and visa invitations, dietary needs and any accessibility needs you choose to share.

3. Cookies

We use a few small cookies to remember your language and market (te_market, NEXT_LOCALE, te_auto_locale) and, with your consent, for analytics and marketing. The full list, with purposes and lifetimes, is in our Cookie Notice.

4. Why we use your data and on what legal basis

To answer your enquiry, prepare a quotation and, if you decide to travel, to conclude and perform the booking contract. Legal basis: steps taken at your request before a contract, and performance of the contract.

To run, secure and improve the website and our services, prevent spam and fraud, and keep records of our business. Legal basis: our legitimate interests, which we balance against your rights.

To measure how the website is used and to promote our tours through analytics and advertising tools. Legal basis: your consent, which you can withdraw at any time.

To keep accounting, tax and other records required by law. Legal basis: legal obligation.

To send you news or offers by email, only if you have asked for them or agreed to them. You can unsubscribe at any time using the link in each message.

We do not sell your personal data and we do not make decisions about you based solely on automated processing.

5. Who we share data with

Partners who deliver your trip: hotels, guides, drivers, transport operators, restaurants and activity providers receive only what they need for your booking, usually names, dates and special requests.

Service providers who work for us: website hosting (our servers are provided by Hip-Hosting and located in the EU), email and communication tools, payment providers (for example WeTravel, or your bank for transfers), analytics and anti-spam tools, and the AI service used by the online assistant.

Authorities and advisers: where the law requires it, or to protect our legal rights, we may disclose data to public authorities, auditors, lawyers or insurers.

Our providers act on our instructions or under their own privacy terms. We do not share your data with anyone else for their own marketing.

6. International transfers

We operate in Uzbekistan and serve travellers worldwide, so your data may be handled in countries other than your own, including Uzbekistan, the EU and the United States (for example by Google, Meta and Anthropic).

Where your data comes from the European Economic Area, the United Kingdom or Switzerland and goes to a country without an equivalent level of protection, we rely on appropriate safeguards such as the European Commission's standard contractual clauses, or on your explicit request when the transfer is necessary for your booking. You can ask us for details at info@toureast.uz.

7. How long we keep data

Enquiries and leads that do not become a booking: up to 3 years after the last contact.

Booking and accounting records: 5 years after the end of the financial year, or as long as tax and accounting law requires.

Consent-based data, such as newsletters and analytics cookies: until you withdraw consent or the cookie expires.

When the period ends we delete the data or anonymise it so that it can no longer identify you.

8. Your rights

Depending on the law that applies to you (for example the GDPR for travellers in the EU), you can ask us to: give you access to your data; correct it; erase it; restrict its use; give you a copy in a portable format; or stop processing based on our legitimate interests. Where processing is based on consent, you can withdraw it at any time, without affecting what was done before.

To use any of these rights write to info@toureast.uz. We will answer within one month. We may ask you to confirm your identity first.

If you believe we have not handled your data properly, you have the right to complain to your local data protection authority. We would appreciate the chance to put it right first.

9. Children

Our website is meant for adults. We do not knowingly collect data from children through the website. Details of children travelling with you are given by a parent or guardian, and we use them only to organise the trip.

10. Security

We use encrypted connections (HTTPS), access controls, limited staff access and regular backups to protect your data. No system is completely secure, so please share only what is needed and never send card details by email or chat. If a breach affects you, we will inform you and the authorities as required by law.

11. Personal data law of Uzbekistan

We process personal data in line with the Law of the Republic of Uzbekistan on Personal Data. The consumer protection law of the Republic of Uzbekistan also applies to our relationship with travellers, to the extent that its rules are mandatory.

12. Changes to this policy

We may update this policy when our services or the law change. The current version is always on this page, with the date of the last update below. If a change is important, we will tell you in a clearer way, for example by email.

13. Contact

TOUR EAST LLC, 33/31 Mustakillik Street, Bukhara, Uzbekistan. Email: info@toureast.uz. Phone: +998 99 777 80 20.