Hormang Privacy Policy
1Who we are and what this policy covers
Hormang is an online marketplace at hormang.co.uz where people looking for a service ("customers") post requests and independent professionals ("providers") send offers. Hormang is operated by "UMR KO" MCHJ, registered in the Republic of Uzbekistan under taxpayer identification number (STIR) 313081122, with its address at Navoiy viloyati, Navoiy shahri, M.Tarobiy shoh ko'chasi, 42-uy, 117-xonadon ("Hormang", "we", "us").
We are the owner and operator of the personal data described in this policy. This policy explains what personal data we collect when you use the Hormang website and its Telegram bot, why we collect it, who can see it, and what choices you have. It follows the Law of the Republic of Uzbekistan No. ZRU-547 of 2 July 2019 "On Personal Data".
By creating an account you confirm that you have read this policy. We do not treat that single step as consent for everything: what we need to run Hormang for you rests on our agreement with you (the Terms of Use), and for other purposes we ask for your consent separately, in boxes that are never ticked for you (section 3). You can withdraw each consent at any time (section 9).
2Personal data we collect
You give us directly
| Category | What it includes | When |
|---|---|---|
| Account | First and last name, mobile phone number, role (customer, provider or both) | When you register |
| Email (optional) | Email address, after you confirm a code sent to it | When you add it in settings |
| Login PIN (optional) | A PIN you choose (stored only in scrambled, hashed form) and a hint you write | When you turn on the extra login check |
| Requests | Answers to the questionnaire, free-text descriptions, photos, region and district | When you post a request |
| Provider profile | Photo, bio, service categories, years of experience, working hours, service area, portfolio albums and captions | When you set up or edit a provider profile |
| Offers and completed work | Offered price and message, attached files, completion notes, duration, before and after photos, portfolio entries | When you send an offer or complete a job |
| Messages | Chat messages and attachments with the other party to a request | When you use chat |
| Reviews | Star ratings, written comments, photos, and optional feedback about Hormang | After a job is completed |
| Reports and feedback | The reason, description and attachments you send when reporting a user or contacting us | When you send them |
Do not put information in requests, photos or messages that you do not want the other party to see, such as your exact home address, ID documents, bank details, or sensitive details about health, religion, political views or criminal record, unless it is needed for the job.
Created when you use Hormang
- Account activity: when you registered and last logged in, your active role, and account status.
- Message status: when each message was delivered and read; your average time to reply (shown on your profile).
- Tanga records: your balance and every purchase, spend, bonus, referral and adjustment.
- Payment records: for each Tanga purchase, the package, amount, payment system (Payme or Click), its transaction ID, status and times. We never receive your card number.
- Badges and moderation records: badges you have earned, reports about you, and notes made by our staff.
- Telegram link (only if you use our bot): your Telegram chat ID and the phone number you shared with the bot.
- Consent records: each consent you gave or withdrew, the wording and version you saw, and the date and time.
- Technical data: IP address, browser and device type, and pages visited, collected through our hosting and, if you agree, our analytics (section 6).
3Why we use your data
We use personal data only for the purposes below, and only the data listed for each purpose. Each purpose has its own ground: what we need to provide Hormang to you under our agreement (the Terms of Use); a duty the law places on us; our legitimate interest in running a safe and trustworthy platform, where this does not override your rights; or your separate consent.
| Purpose | Data used | Ground |
|---|---|---|
| Create your account, confirm your phone or email, and log you in | Name, phone, email, login PIN, one-time codes | Agreement (Terms of Use) |
| Show your request to providers and their offers to you | Request details and photos; offers; provider profile | Agreement |
| Let customers and providers talk | Messages, attachments, delivery and read times | Agreement |
| Sell Tanga and keep an accurate balance | Payment records, Tanga records | Agreement; legal duty for accounting and tax records |
| Build trust: reviews, ratings, badges, reply time | Reviews, completed jobs, message times, profile completeness | Agreement; our legitimate interest in a trustworthy marketplace |
| Keep the platform safe: handle reports, stop fraud, spam and abuse, enforce the Terms | Reports, messages, account and activity data | Our legitimate interest in preventing abuse; legal duty where an authority requires it |
| Send service messages: login codes, balance reminders, notices about changes to Hormang | Phone, email, Telegram chat ID | Agreement |
| Send news and promotions about Hormang's own services | Phone, email, Telegram chat ID | Your separate consent (optional) |
| Understand how the site is used and improve it | Technical and analytics data (section 6) | Your consent in the cookie banner (optional) |
| Send data to the overseas companies in section 5 | The data listed in section 5 | Your separate consent (needed for the Telegram bot and email codes) |
| Meet legal duties, such as tax and accounting records or lawful requests from authorities | Payment records and any data the law requires | Legal duty |
| Show later what you agreed to, and handle legal claims | Consent records, reports, the messages concerned | Legal duty to prove consent; our legitimate interest in defending claims |
How we record your consent. For every consent we keep the exact wording and version you saw, your choice, and the date and time, so that we can show later what you agreed to. You can see and change your choices at any time in Settings → Privacy and security (section 9).
We do not sell your personal data or give it to other companies for their advertising. If you tick the separate promotions box when you register, or later in Settings → Privacy and security, we may send you news and promotions about Hormang's own services by SMS, email, Telegram or in the app. The box is never ticked for you, and not ticking it does not change what you can do on Hormang. You can withdraw it at any time in Settings → Notifications or by writing to support@hormang.co.uz; service messages such as login codes continue.
4Who can see your data
Your phone number and email are never shown to other users. Customers and providers communicate only through Hormang chat.
| Who | What they can see |
|---|---|
| Anyone visiting the site | A provider's public profile: name, photo, bio, categories, experience, service area, portfolio, badges, reviews, ratings and average reply time |
| Logged-in providers | Open requests: category, questionnaire answers, photos, region and district, and the customer's name |
| The customer who posted a request | Offers on that request and the profiles of the providers who sent them |
| The two parties to a chat | Their messages, attachments and read status |
| Users you have reviewed or who reviewed you | Reviews and ratings, which are also public |
| Hormang staff | Account, request, offer, chat, report, feedback and payment records, accessed only to handle a report, a support request or suspected abuse, or to meet a legal duty |
| Service providers (section 5) | Only what each needs to perform its service for us |
| Public authorities | Data we are legally required to disclose under the law of Uzbekistan, on a lawful request |
If Hormang is sold, merged or reorganised, your data may pass to the new operator, who must follow this policy.
5Service providers and transfers outside Uzbekistan
We use the following companies to run Hormang. Each receives only the data it needs and may use it only to provide its service to us.
| Company | What it does for us | Data it receives | Country |
|---|---|---|---|
| SUVAN NET LLC (aHOST) | Hosts the website and database | All data stored on Hormang | Uzbekistan |
| Eskiz | Sends SMS login codes | Phone number, code | Uzbekistan |
| Payme | Processes Tanga payments | Order number, amount (your card details go to Payme, not to us) | Uzbekistan |
| Click | Processes Tanga payments | Order number, amount (your card details go to Click, not to us) | Uzbekistan |
| Yandex (Metrica) | Website analytics and session recording, only if you agree (section 6) | IP address, device and browser data, pages visited, and recordings of how pages are used, with what you type and the content of chats hidden | Russia |
| Telegram | Runs our bot (only if you use it) | Telegram chat ID, the phone number you share, first name, Tanga balance | United Arab Emirates and British Virgin Islands (Telegram's group companies); servers in several countries |
| Resend | Sends email login codes (only if you add an email) | Email address, code | USA |
Yandex, Telegram and Resend are located outside Uzbekistan. We send them data only for the purposes shown in the table, and only with your separate consent, which we ask for when you create an account in a box that is never ticked for you. If you do not give it, you can still use Hormang, but you cannot add an email address or use the Telegram bot, and analytics will not run for you. You can withdraw this consent at any time in Settings → Privacy and security; we then stop sending your data to these companies, but they handle what they already hold under their own policies.
When your data is passed to someone else. If your personal data is passed to a third party, such as a company in this section or, when you post a request or send an offer, another user (section 4), we tell you in writing within 3 days. In practice: (1) this policy and the consent screens at signup list every company that receives data, what it receives, why and in which country; (2) when you post a request or send an offer, the screen shows what the other user will see before you confirm, and the notice is saved in your account history; (3) if we add a new company or start sending a new kind of data, we notify you in the app or the Telegram bot within 3 days of the first transfer and, where the law requires it, ask for your consent again. We do not send a notice where the law does not require one, for example when a public authority receives data in the exercise of its powers.
6Cookies, device storage and analytics
Needed for the site to work. We set one secure cookie that keeps you logged in for up to 30 days. Your browser's local storage also keeps your session, active role, language, display settings and a copy of some profile data, so pages load quickly. You can clear these at any time in your browser settings; you will then be logged out. Apart from the companies in section 5, loading the site does not send your IP address to anyone else: fonts, scripts and images come from Hormang's own servers.
Analytics (only with your consent). If you agree in the cookie banner, we use Yandex Metrica to count visits, see which pages and buttons are used, and record how pages are used (scrolling, clicks and page changes), with the text you type in forms and the content of chats and requests hidden. Yandex then receives your IP address and information about your device and browser. If you do not agree, Yandex Metrica is not loaded.
The cookie banner appears on your first visit. Nothing from Yandex loads until you accept. You can change or withdraw your choice at any time from the link at the bottom of any page, as easily as you gave it. The site works the same either way.
7Where data is stored and how long we keep it
Our website and main database run on servers physically located in the Republic of Uzbekistan, provided by SUVAN NET LLC (aHOST), Tashkent. We do not collect biometric or genetic data. The only data that leaves Uzbekistan is what the companies in section 5 receive, as described there.
We keep data only as long as needed for the purposes in section 3 or as the law requires. When a purpose ends or you withdraw a consent, we delete the data unless the last column gives a reason to keep it longer:
| Data | How long | Why |
|---|---|---|
| Account and profile | While your account is open | To provide Hormang to you |
| Requests, offers and chats | 1 year after the request closes; after you delete your account, your name is replaced with "Deleted user" for the same period | So both sides keep a record of what was agreed, and so we can handle reports and disputes about the job |
| Reviews | While the reviewed user's account is open. If the author deletes their account, the review stays under "Deleted user" for up to 1 year, then we permanently remove the link to the author | So that a provider's ratings stay reliable |
| Payment and Tanga records | At least 5 years, as the law requires for accounting and tax records | Legal duty |
| Consent records | While the consent is in use and for 3 years after it ends or is withdrawn | So that we can show what you agreed to if it is questioned |
| Reports and moderation records | 1 year after the report is closed, or longer while needed to establish, exercise or defend a legal claim | To stop repeat abuse, and to protect Hormang and users in a claim |
| Server logs (IP address and technical data) | 90 days | Security and fixing faults |
| Analytics data (Yandex Metrica) | 12 months | Improving the site; only with your consent |
| One-time login codes | 5 minutes | To log you in |
| Backups | Deleted data is removed from backups within 30 days; backups are never used to restore a deleted account | Recovery after a failure |
When you delete your account, this happens:
- Before deleting, the app shows your Tanga balance and tells you that the Tanga left in your account will be cancelled and is not refunded (Terms of Use, section 10.6).
- We immediately remove your phone number, email, login PIN and hint, unlink your Telegram, log you out of all devices, and remove your provider profile and portfolio from public view.
- On requests, offers, chats and reviews you exchanged with other users, your name is replaced with "Deleted user". They stay visible to the other user only for the periods in the table above; after that, chats, requests and offers are deleted and reviews are permanently unlinked from you.
- We keep records that identify you only where the law requires it (payment and Tanga records, consent records) or where we need them to establish or defend a legal claim (reports and moderation records), for the periods in the table above, and for no other purpose.
- We send you a written confirmation (by SMS or Telegram message) before your phone number is removed.
- Anything left in backups is removed within 30 days.
8Security
We protect your data with encrypted connections (HTTPS), one-time login codes instead of passwords, an optional login PIN stored only in hashed form, and access to staff tools limited to authorised staff with individual accounts. Card payments are handled entirely by Payme and Click.
No system is completely secure. Keep your phone and email secure, never share login codes, and tell us at tech@hormang.co.uz if you think someone has accessed your account. If a leak of personal data happens, we notify the authorised state body within 24 hours of discovering it and send details of the cause and of what we have done within the next 72 hours, as the law requires for leaks linked to transfers abroad (we apply the same deadlines to every leak). We tell affected users without delay and, where possible, within 72 hours of confirming that their data is at risk, and explain what happened and what they can do.
9Your rights and how to use them
Under the law of Uzbekistan you have the right to know whether we process your data and what we hold; to receive information about how it is used (why, how, by whom, for how long, and whether it is sent abroad) and a copy; to have inaccurate or incomplete data corrected; to withdraw consent; to ask us to suspend processing of data that is incomplete, outdated, inaccurate, unlawfully obtained or not needed for its purpose; and to have data deleted, subject to records we must keep by law.
| You want to | How | How quickly |
|---|---|---|
| Correct your name or profile | Edit it in Settings, or write to support@hormang.co.uz | At once if you edit it; within 3 days if you ask us |
| Change your phone number or email | Settings → Privacy and security; we confirm with codes sent to you | At once after confirmation |
| Remove a message you sent | Delete it for everyone in chat | At once |
| See or withdraw a consent (transfers abroad, promotions) | Settings → Privacy and security → Consents | At once |
| Withdraw your analytics consent | The cookie settings link at the bottom of any page | At once |
| Stop promotional messages | Settings → Notifications, or write to support@hormang.co.uz | At once |
| Delete your account and withdraw all consents | Settings → Privacy and security → Delete account; we confirm with an SMS code | As described in section 7 |
| Get a copy of your data, ask how it is used, or ask us to suspend processing or delete specific data | Email support@hormang.co.uz from the address or phone linked to your account, or message @hormang_support on Telegram | Within 7 working days |
Our answers. We answer requests for information and copies within 7 working days, and we correct or complete your data within 3 days of your request (we may ask for proof of the new details). If we refuse a request, we tell you in writing, with the reason, within 10 days.
If you disagree. You can reply to our answer at support@hormang.co.uz and we will review it within 7 working days. You can also complain to the authorised state body for personal data — currently the Personalization Agency (Tashkent, Yunusabad district, Bogishamol street 160A; tel. +998 71 207-70-94; info@dpm.uz; dpm.uz) — or go to the competent court.
10Age limit
Hormang is for people aged 18 and over. We do not knowingly collect data from younger users; if we learn that we have, we delete the account.
Some services, such as childcare and tutoring, involve children. Do not post a child's name, photo or other identifying details in a request or chat unless the provider needs it to do the job.
11Changes and contact
We may update this policy when the platform or the law changes. We will post the new version here with a new effective date and tell you in the app at least 14 days before a significant change takes effect. If a change needs your new consent, we will ask for it.
This policy is published in Uzbek, Russian and English. If the versions differ, the Uzbek version prevails.
Contact for privacy questions: "UMR KO" MCHJ, Navoiy viloyati, Navoiy shahri, M.Tarobiy shoh ko'chasi, 42-uy, 117-xonadon · Privacy and support: support@hormang.co.uz · Security: tech@hormang.co.uz · General: info@hormang.co.uz · +998 70 183 01 45
Person responsible for personal data: Akhmadjon Murodullaev, CEO of "Hormang"