Bronla Privacy Policy - Keeping Your Information Secure.

At Bronla we value our Users’ privacy and work to protect their personal data. This Privacy Policy (the “Policy”) explains how [full legal name of the company] (hereinafter — “Bronla”, “we”) collects, processes, stores, discloses and protects personal data when you use the Bronla website and mobile application (the “Platform”) in the Republic of Tajikistan.

This Policy has been prepared on the basis of the Law of the Republic of Tajikistan No. 1537 of 3 August 2018 “On the Protection of Personal Data” (the “Law”) and other applicable legislation of the Republic of Tajikistan. When processing personal data, Bronla acts as both owner and operator of personal data within the meaning of the Law.

1. Key definitions

• Personal data — any information relating directly or indirectly to an identified or identifiable natural person.
• Data subject (User) — the natural person to whom the personal data relates.
• Owner — a state body, natural person or legal entity that, under the legislation of the Republic of Tajikistan, holds the right to own, use and dispose of a database.
• Operator (Bronla) — the person who processes and protects personal data on the basis of legislation or an agreement with the owner.
• Processing — actions involving the recording, organisation, storage, modification, use, publication, dissemination and destruction of data.
• Host (property owner) — the person who lists their property on the Platform for rent and receives the User’s data when a booking is made.

2. Data we collect

2.1. Data provided by the User

• first and last name, phone number, email address;
• information required for a booking (dates, number of guests, etc.);
• payment-related information (subject to clause 2.3).

2.2. Data collected automatically

• IP address, browser and operating system type, device information;
• URLs, pages viewed, Platform usage statistics;
• information obtained through cookies (see section 6).

2.3. Payment data

Payments are processed through licensed payment systems (including “Korti Milli” and other recognised local payment systems). Full bank card details (card number, expiry date, CVV code) are not stored by Bronla and are processed directly by the relevant payment system.

3. Purposes and legal grounds for processing

• Making and confirming bookings and connecting the User with the host (performance of a contract).
• Providing user support and responding to requests and complaints.
• Improving the operation, security and service quality of the Platform.
• Sending marketing and informational messages based on the User’s consent (the User may unsubscribe at any time).
• Complying with legal obligations and responding to lawful requests from state authorities.

Legal grounds for processing: the User’s consent (Article 11 of the Law), the necessity of performing a contract, and applicable statutory requirements. By registering on the Platform and using the services, the User consents to the processing of their data for the purposes set out in this Policy.

4. Disclosure to third parties

4.1. To the host

When a booking is made, the data necessary to fulfil it (name, phone number, booking details) is passed to the relevant host. The host must use this data solely to fulfil that booking and bears independent responsibility for its use. Bronla is not responsible for any unlawful use of that data by the host or for use beyond Bronla’s control.

4.2. To payment operators and technical providers

Data may be shared with providers of payment systems, hosting, IT and analytics services solely within the scope of their functions and subject to confidentiality obligations.

4.3. On legal grounds

Data may be disclosed in accordance with applicable law, at the request of a court or an authorised state body, and to protect the rights and safety of Bronla or third parties.

4.4. Corporate transactions

In the event of a merger, acquisition or transfer of assets, data may be transferred as part of the transaction; in such a case the User will be notified in advance.

Apart from the cases listed above, Bronla does not sell or disseminate the User’s personal data to third parties without their consent (Article 13 of the Law — confidentiality of personal data).

5. Storage and cross-border transfer of data

• Personal data is stored for as long as is necessary to achieve the purposes set out in this Policy, unless a longer period is required by law (Article 14 of the Law — collection and storage of personal data).
• Transfers of personal data outside the Republic of Tajikistan (cross-border transfers) are carried out in accordance with Article 18 of the Law. Such transfers may be restricted or prohibited in order to protect the foundations of the constitutional order, morality, public health, the rights and lawful interests of citizens, and national defence and security.
• Once the purpose of processing has been achieved, consent has been withdrawn, or the storage period has expired, the data is destroyed in the manner prescribed by law.

6. Cookies and analytics

• The Platform uses cookies and similar technologies to improve the user experience, remember settings and collect statistics.
• The User may restrict or disable cookies through their browser settings; this may affect certain Platform features.

7. Data security

• We apply reasonable legal, organisational and technical measures to protect data against unauthorised access, disclosure, alteration or loss.
• As no method of transmission over the internet or by electronic means is 100% secure, we cannot guarantee absolute security, but we take all reasonable measures to protect data.
• The User must keep their account login credentials (password, etc.) confidential and must not disclose them to third parties. Bronla is not responsible for consequences arising from the User’s own disclosure of those credentials.

8. User rights and withdrawal of consent

Under the Law (Article 10 — access to personal data), the User has the right to:

• obtain information about the processing of their data;
• clarify and correct inaccurate or incomplete data;
• request the destruction of their data or the restriction of its processing;
• withdraw consent to processing at any time (Article 11 of the Law).

Withdrawing consent or having data destroyed may limit or prevent the use of certain Platform features, including booking. To exercise the rights listed above, please use the contact details in section 14.

9. Children’s privacy

The Platform’s services are not intended for persons under 18. We do not knowingly collect personal data from minors. If we become aware that a minor’s data has been collected inadvertently, we will take appropriate steps to delete it. We ask you to notify us of any such case.

10. Third-party links

The Platform may contain links to third-party websites or services that we do not control. We are not responsible for the privacy practices or content of such sites. We recommend reviewing their privacy policies before providing any personal data.

11. Limitation of liability

• As an operator, Bronla is responsible for protecting data under its control, but is not responsible for the subsequent misuse of data lawfully passed to a host or other third party. The host is regarded as an independent operator in respect of the data provided to them.
• Bronla is not responsible for data that the User has made public themselves or voluntarily provided to third parties.

12. Changes to this Policy

We may update this Policy at any time. Where material changes are made, the User will be notified by a prominent notice on the website or by email. The updated Policy takes effect from the date it is published on the website.

13. Competent state authority

The competent state authority for personal data protection in the Republic of Tajikistan is the Communications Service under the Government of the Republic of Tajikistan.

14. Contact us

For questions and requests regarding this Policy or the processing of personal data:

[Full legal name of the company]

Telegram: [@______] | Email: mail@bronla.uz | Tel: +992088996666

Address: [______]

By using the Platform and its services, the User confirms that they have read and understood this Privacy Policy and consent to the processing of their data in the manner described herein.

Last revised: 08.08.2026