This Privacy Policy sets out how personal data of users of the medilife-farma.com website is collected, processed, stored, and protected. The personal data operator is Medilife-Farma LLC (brand: Medilife Farma), a pharmaceutical distributor founded in 2004, located at: 22 Muqimi Street, Yakkasaray district, Tashkent, Republic of Uzbekistan (Diabet Center). Personal data is processed in accordance with the legislation of the Republic of Uzbekistan, in particular the Law «On Personal Data» dated 02.07.2019 No. ZRU-547.

1. 1. General provisions and operator identity

   This Policy explains what personal data Medilife-Farma LLC collects through the medilife-farma.com website, for what purpose and on what legal basis it is processed, and what rights the data subject has.

   Operator details:

   • Name: Medilife-Farma LLC (brand: Medilife Farma).
   • Field of activity: pharmaceutical distributor, on the market since 2004.
   • Address: 22 Muqimi Street, Yakkasaray district, Tashkent, Republic of Uzbekistan (Diabet Center).
   • Email: info@medilife-farma.com · Phone: +998 78 120 67 20 · Website: medilife-farma.com.
   • Registration and licensing details are provided upon request.

   By using the contact forms on the website, the user confirms that they have read this Policy and agree to the conditions of processing their personal data.

2. 2. What personal data is collected and how

   Personal data is collected directly from the subject when they voluntarily complete a lead or contact form on the website. The operator does not collect health-related data or other special categories of data through the website forms.

   The following data may be collected via the website forms:

   • name (as provided by the user);
   • phone number;
   • email address (provided optionally, non-mandatory field);
   • category of the enquirer (patient / doctor / clinic / distributor);
   • message text (free-text message completed by the user).

   The user is responsible for the accuracy of the data provided. Users should not include in the free-text message any information they do not wish to disclose.

3. 3. Purposes of processing

   Personal data is processed solely to the extent necessary to achieve the following purposes:

   • handling enquiries and requests received through the website;
   • providing consultations on the operator's products and lines of activity;
   • preparing and sending commercial offers (KP);
   • conducting B2B communication and interaction within tender procedures;
   • responding to the user via the channel they have chosen (phone, email, Telegram).

   The operator does not use personal data for purposes incompatible with those listed above and does not transfer it to third parties for marketing purposes.

4. 4. Legal basis and consent

   The legal basis for processing personal data is the consent of the data subject, expressed by voluntarily completing and submitting a form on the website, as well as the provisions of the Law of the Republic of Uzbekistan «On Personal Data» dated 02.07.2019 No. ZRU-547.

   Consent is given freely, specifically, and knowingly for the purposes set out in section 3 of this Policy.

   Personal data may also be processed to the extent necessary to fulfil obligations to the subject (for example, to respond to an enquiry) and to comply with the requirements of the legislation of the Republic of Uzbekistan.

   The subject may withdraw their consent at any time by sending a relevant request to info@medilife-farma.com.

5. 5. Storage, protection, and parties involved in processing

   The operator takes the necessary organizational and technical measures to protect personal data against unauthorized or accidental access, alteration, disclosure, or destruction. Access to data is granted only to authorized employees, to the extent necessary to perform their duties.

   To operate the website and process enquiries, the operator uses the following tools and services:

   • the operator's internal CRM system — to record and process enquiries;
   • website hosting — the Vercel service;
   • file storage — the Cloudflare R2 service;
   • aggregated website analytics that do not identify specific individuals;
   • communication channels — Telegram, phone, and email.

   Please note: when the above services (Vercel, Cloudflare R2, and related tools) are used, data may be processed and stored on infrastructure located outside the Republic of Uzbekistan. These providers apply their own security measures. By submitting data through the website, the user consents to such processing.

   The names of any other engaged processors and details of contractual terms are provided upon request.

6. 6. Cookies and analytics

   The website uses cookies and similar technologies to a limited extent:

   • strictly necessary (technical) cookies that ensure the correct operation of the website;
   • aggregated visit analytics, which collect generalized statistics and do not identify specific users.

   The operator does not use cookies for advertising targeting and does not build profiles of individuals based on them.

   The user can manage cookies through their browser settings, including disabling them. Disabling technical cookies may affect the correct operation of certain website functions.

7. 7. Data-subject rights and how to exercise them

   In accordance with the legislation of the Republic of Uzbekistan, the data subject has the right to:

   • access their personal data and obtain information about its processing;
   • rectify (correct) inaccurate or incomplete data;
   • have their personal data deleted;
   • withdraw previously given consent to processing.

   To exercise these rights, the subject sends a written request to the email address info@medilife-farma.com. The operator reviews the request and provides a response within the time limits established by the legislation of the Republic of Uzbekistan.

   The operator may request additional information to verify the identity of the applicant in order to prevent disclosure of data to an improper person.

8. 8. Retention periods

   Personal data is retained for the period necessary to achieve the processing purposes set out in section 3 of this Policy, or until the subject withdraws their consent.

   Once the processing purpose has been achieved or consent has been withdrawn, personal data is to be deleted or anonymized, except where the legislation of the Republic of Uzbekistan requires longer retention.

   Specific retention periods for individual categories of enquiries are provided upon request.

9. 9. Changes to the Policy

   The operator may amend this Policy in connection with changes in legislation, the technologies used, or data processing procedures.

   The current version of the Policy is always published on the medilife-farma.com website. Changes take effect from the moment the new version is published.

   We recommend periodically reviewing this Policy to stay informed of the current conditions for processing personal data.

10. 10. Operator contact details

    For all matters relating to the processing of personal data, as well as to exercise their rights, the subject may contact the operator:

    • Medilife-Farma LLC (Medilife Farma);
    • Address: 22 Muqimi Street, Yakkasaray district, Tashkent, Republic of Uzbekistan (Diabet Center);
    • Email: info@medilife-farma.com;
    • Phone: +998 78 120 67 20;
    • Website: medilife-farma.com.

    Other details and information are provided upon request.