Maxfiylik siyosati

In short. This Site collects very little about you. It sets no tracking cookies. We use a visitor counter that does not identify you. When you write to us through a form, we keep your message for one year so that we can answer and follow up. People shown on the Site have agreed to be shown. You can ask us at any time what we hold about you, to correct it or to delete it.

1. Who is responsible

The operator of the data (the "operator" in the meaning of the Law of the Republic of Uzbekistan "On Personal Data") is NGO "Teach For Uzbekistan", 34 Taras Shevchenko Street, Mirabad district, Tashkent, e-mail info@teachforuzbekistan.org, telephone +998 91 017-90-09.

Questions about personal data: info@teachforuzbekistan.org (subject line "Personal data").

2. What this policy covers

This policy covers the website teachforuzbekistan.org and its sub-pages in Uzbek, Karakalpak, Russian and English. The Fellowship Admissions Portal (apply.teachforuzbekistan.org) is a separate system that collects application data (identity, education, work history, essays); it shows its own privacy notice, which applies to applications. Social-media pages of TFU are governed by the respective platforms' rules.

3. What we collect, why, and for how long

• Contact form: name, e-mail address, message; optionally organisation and telephone · When: when you send the form · Why: to answer you · Kept for: 12 months from receipt, then reviewed and deleted unless a follow-up is still open (decision D15)
• Partnership enquiry: organisation, contact person, e-mail, telephone, kind of partnership, message · When: when you send the form · Why: to answer and to prepare a partnership · Kept for: 12 months, then reviewed; if a partnership starts, the details move to the partnership file
• Consent tick on the forms · When: when you send a form · Why: to record that you agreed to this policy · Kept for: with the message
• Bot check: the Cloudflare Turnstile token and your IP address · When: when a form is sent · Why: to tell people from spam robots (Cloudflare verifies the token) · Kept for: the IP address is used for a per-address limit of five messages per hour and is held in the server's memory only; not stored with your message
• Visitor statistics: page address, referring site, browser and device type, screen size, country and region derived from the IP address, language of the page, and two events (a click on "Apply", an FAQ item opened) · When: every visit · Why: to see which pages and languages are used and whether the application button is found (decision D7: five agreed metrics) · Kept for: Umami stores these statistics without the IP address and without cookies; the statistics are aggregated and kept indefinitely; they do not identify you
• Server logs: IP address, time, page requested, browser type · When: every visit · Why: security and fault-finding · Kept for: kept by the hosting provider for a short period (days), then deleted
• Display preference (light/dark theme) · When: if you use the theme switch · Why: to remember your choice · Kept for: stored in your own browser only (local storage), never sent to us
• Profiles of people: name, photo, role, cohort, region, school, subject, short biography, quotation · When: Team, Board, Fellows and Alumni sections · Why: to present the people behind TFU · Kept for: while the person is part of the community and has not withdrawn consent (see 6)

We do not collect data from visitors who only read the Site. We do not yet run a newsletter; when one starts (planned for a later phase), subscribing will be voluntary, the e-mail address and language you give will be used only to send it, every issue will carry an unsubscribe link, and this policy will be updated before the first issue. There is no user registration on the Site. We do not sell data and do not use it for advertising.

Children. The Site is for adults (candidates, partners, donors, parents, teachers). We do not knowingly collect personal data from children through the Site. Photographs and stories about pupils follow the Child Safeguarding Policy: no identifiable image of a child without the written consent of a parent or guardian.

4. Legal basis

Under the Law of the Republic of Uzbekistan "On Personal Data" No. ZRU-547 of 2 July 2019, we process personal data:

• with your consent — you tick the consent box before sending a form, and people shown on the Site have given written consent (media consent form, Safeguarding Policy Appendix A);
• to perform an agreement or take steps at your request — answering an enquiry, preparing a partnership;
• for our legitimate activity as a registered non-profit organisation — keeping records of correspondence and donations as required by the legislation on non-governmental non-profit organisations, accounting and charity;
• to comply with law — for example when a state body is entitled to request information.

You may withdraw consent at any time (see 7); this does not affect what was lawfully done before.

5. Who receives the data

Personal data is processed by TFU staff who need it for their work (communications, partnerships, fundraising, administration), each bound by confidentiality. Technical processing is done by service providers on our behalf, under their published terms:

• Vercel · Role: hosting of the Site; server functions
• Supabase · Role: database and file storage (form messages, published content)
• Cloudflare · Role: domain, traffic protection, invisible bot check on forms
• Resend · Role: sends the e-mail copy of form messages to TFU
• Umami (Umami Cloud) · Role: cookieless visitor statistics
• Google (YouTube) · Role: video embeds, loaded in privacy-enhanced mode ("youtube-nocookie") only when you press play
• Payment providers (Payme, Click, Uzum), bank · Role: donations; these providers are independent operators of the data you enter with them

Processing by providers. Personal data you send through the forms is stored and transmitted by the providers listed above, some of which operate outside the Republic of Uzbekistan. We work only with providers that apply recognised data-protection safeguards (published data-processing terms, security certifications) and, for the form data, on the basis of the consent you give when you send a form. If you prefer not to use the forms, write or call us instead.

We disclose personal data to state bodies only where the law obliges us to.

6. People shown on the Site

Team members, board members, Fellows and Alumni appear with their name, role, photo and a short text only after they have signed a media consent form (Safeguarding Policy, Appendix A) or, for staff and board, as part of their public role. Every person may ask for changes or for removal at any time at info@teachforuzbekistan.org; profiles are taken down within 10 working days. Testimonials are published with the author's agreement.

7. Your rights

Under the Law "On Personal Data" you may:

• ask whether we process your personal data and receive a copy of it;
• have inaccurate data corrected or completed;
• have data deleted or blocked when it is no longer needed, was processed unlawfully, or when you withdraw consent;
• withdraw consent at any time;
• object to processing for a specific purpose;
• complain to the authorised state body for personal data protection of the Republic of Uzbekistan.

Write to info@teachforuzbekistan.org or to the postal address in section 1. We answer within 10 working days; to protect your data we may ask you to confirm your identity.

8. Security

The Site uses encrypted connections (HTTPS) throughout, strict browser security headers, a content-management system behind two-factor-protected staff accounts, a login lock after repeated wrong passwords, upload filtering, limits against automated abuse, nightly encrypted backups that are test-restored every night, and an independent security scan before launch and after significant changes. Staff access to form messages is limited to the roles that answer them. Details: the "Security" section of our project documentation is available to partners on request.

9. Cookies and similar technologies

The Site sets no cookies for visitors. The visitor counter (Umami) works without cookies and without storing IP addresses. Your theme choice is kept in your browser's local storage and never sent to us. When you press play on an embedded video, YouTube may set its own cookies according to Google's policy; we embed videos in privacy-enhanced mode to minimise this. Staff who log in to the content-management system receive a session cookie needed for the login. Because the Site sets no tracking cookies, no cookie banner is shown.

10. Changes

We may update this policy when the Site or the law changes. The version number and effective date are shown at the top; substantial changes are announced on the Site. This policy is published in Uzbek, Karakalpak, Russian and English; in case of divergence, the Uzbek text prevails.