Privacy Policy

Who processes the data

The data controller is MONNS (the “Company”, “we”) — an insurance broker operating in the Republic of Uzbekistan.

This policy explains what visitor data the monns.org website collects, why it is needed, how long it is kept and what rights a person who leaves their data has. Processing is carried out in accordance with the personal data legislation of the Republic of Uzbekistan.

The policy covers this website only. If a visitor follows a link to an external resource — a messenger, a social network, an insurer’s website — the rules of that resource’s owner apply there.

What data we collect

Through the enquiry form we receive the data a visitor enters themselves:

• name
• phone number
• email address, if the visitor provides one
• the text of the comment, if the visitor writes one

Along with the enquiry we store a service record of the page it was sent from, the type of request (consultation or call back) and the date of submission. The IP address is used only at the moment of submission, to protect the form from automated abuse, and is not stored with the enquiry.

We do not collect special categories of data — health, religious beliefs, political views. Please do not include them in the comment: they are not needed for a first conversation. In addition, the web server keeps a technical access log recording the IP address, date and time of the request, the page address and the browser type. The log is used for security and troubleshooting, is kept for a limited period (a few weeks) and is overwritten automatically; it is not used for marketing.

Why we process the data

• to accept the enquiry and prepare an answer
• to contact the visitor by phone, email or messenger and clarify the task
• to select insurance terms and accompany the request through to a result
• to keep an internal record of enquiries and not lose the history of correspondence

The data is not used for any other purpose. We do not send advertising to the contacts left with us and do not build advertising profiles from them.

On what legal basis

The basis for processing is the consent of the data subject. Consent is given by ticking the “I agree to the processing of personal data” box before the form is sent: without that tick the form is not submitted.

Providing the data is voluntary. A refusal only means that we will not be able to accept the enquiry and get in touch.

Who we share the data with

Personal data is never sold and is not passed to third parties for their own purposes. Access is possible in two cases:

• to the state authorities of the Republic of Uzbekistan, where a request is made in the manner established by law
• to contractors who keep the website running and the client contactable: the infrastructure provider hosting the site and the enquiry database, and the instant messaging service through which an employee receives notice of a new enquiry

These contractors act on our instructions, only to the extent needed to provide their service, and may not use the data for their own purposes.

If performing an insurance contract requires passing data to an insurer, we do so only after the client approaches us separately, and only to the extent needed to arrange the contract.

Where and how long the data is kept

Enquiries are stored in the website database. Only Company employees with a personal account for the closed administration area have access to it; permissions are separated by role and the connection to the site is encrypted.

The retention period lasts until the purpose of processing is achieved — that is, while work on the request continues — or until consent is withdrawn. After that the enquiry is deleted or anonymised. Data is kept longer only where accounting and reporting legislation requires it.

We take reasonable organisational and technical measures to protect the data from accidental or unauthorised access, alteration and loss.

Rights of the data subject

A person who has left their data has the right to:

• obtain information about what data of theirs we process and on what basis
• demand correction of inaccurate or incomplete data
• demand deletion of the data or that processing stop
• withdraw consent to processing at any time

To exercise any of these rights, write to hello@monns.org and describe the request. We reply within the period established by the legislation of the Republic of Uzbekistan and may ask for clarifying details, to make sure the request comes from the data subject themselves.

Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.

Cookies

The website uses only technical cookies — the ones without which it cannot work as intended:

• a language cookie: remembers which of the four languages the visitor is reading the site in
• an appearance cookie: remembers the selected display theme
• service cookies for signing in to the closed area and for preview mode: these are set for Company employees only and do not concern an ordinary visitor

There are no web analytics systems, advertising pixels or third-party trackers on the site: we do not collect information about visitor behaviour through cookies and do not pass it to advertising platforms.

Technical cookies can be deleted or blocked in the browser settings. The site will keep working, but will stop remembering the chosen language and theme.

Changes to this policy

We may update this policy — for example, when the set of collected data or the requirements of the law change. The current version is always published on this page, and the date of the last update is shown at the top.

Significant changes are not applied retroactively to enquiries already received: those are handled under the version that was in force when they were sent.

How to contact us

For any question about the processing of personal data — access, correction, deletion, withdrawal of consent — write to hello@monns.org. We accept requests in Russian, English and Uzbek.