TravelX Privacy Policy

Effective date: 15 July 2026

TravelX respects your privacy and is committed to protecting the personal information you provide when visiting our website, contacting us or booking travel services.

This Privacy Policy explains what information we collect, why we use it, who we may share it with and the choices available to you.

By using our website, submitting an enquiry or making a booking, you acknowledge the practices described in this Privacy Policy.

1. Who we are

TravelX is a tourism brand operated by:

Hilal Biz LLC (MCHJ)
34 Buyuk Ipak Yo‘li, Mirzo Ulugbek District
Tashkent, Uzbekistan

Email:
info@travelx.uz
Te
lephone and WhatsApp: +998 97 652 25 25

In this Privacy Policy, “TravelX”, “we”, “us” and “our” refer to Hilal Biz LLC.

For matters covered by this Privacy Policy, Hilal Biz LLC is responsible for determining how and why personal information is processed.

2. Scope of this Privacy Policy

This Privacy Policy applies when you:

  • visit the TravelX website;
  • complete a contact or booking form;
  • request an itinerary or quotation;
  • book a tour, transfer, accommodation, ticket or other travel service;
  • communicate with us by email, telephone, WhatsApp, Telegram or social media;
  • make a payment;
  • subscribe to promotional communications; or
  • otherwise provide personal information to TravelX.

Bookings made through third-party platforms may also be subject to the privacy policies of those platforms.

3. Personal information we collect

The information we collect depends on how you interact with us and which services you request.

3.1 Identification and contact information

We may collect:

  • full name;
  • email address;
  • telephone number;
  • residential country or nationality;
  • preferred language; and
  • emergency contact details.

3.2 Booking and travel information

When arranging a travel service, we may collect:

  • travel dates;
  • destination and itinerary preferences;
  • hotel and accommodation details;
  • arrival and departure information;
  • flight, train or transport details;
  • room and vehicle preferences;
  • luggage information;
  • dietary requirements;
  • accessibility or mobility requirements; and
  • other information necessary to organise the requested service.

3.3 Passport and travel-document information

Where required for tickets, accommodation registration, permits, border services or other travel arrangements, we may collect:

  • passport name;
  • passport number;
  • date of birth;
  • nationality;
  • passport issue and expiry dates;
  • issuing country; and
  • a copy or photograph of a passport or travel document.

Please do not send passport copies unless we have requested them for a specific booking purpose.

3.4 Health and accessibility information

You may voluntarily provide information about:

  • allergies;
  • dietary restrictions;
  • disabilities;
  • reduced mobility;
  • medical conditions relevant to participation; or
  • other health or safety requirements.

We collect this information only where it is reasonably necessary to provide a safe and suitable travel service. We will seek additional consent where required by law.

3.5 Payment and transaction information

We may collect:

  • billing name and address;
  • amount and currency paid;
  • transaction date;
  • payment status;
  • payment method;
  • bank transfer information; and
  • limited payment references provided by banks or payment processors.

Where payments are made through an online payment provider, card details are normally entered directly into the payment provider’s secure system. TravelX does not intend to store complete card numbers or card security codes.

3.6 Communications

We may keep records of communications sent through:

  • email;
  • website forms;
  • telephone;
  • WhatsApp;
  • Telegram;
  • social media;
  • booking platforms; and
  • customer-support channels.

These records may include enquiries, quotations, feedback, complaints and booking instructions.

3.7 Website and technical information

When you visit our website, certain information may be collected automatically, including:

  • Internet Protocol address;
  • browser and device type;
  • operating system;
  • pages visited;
  • date and time of access;
  • referring website;
  • approximate location derived from an IP address;
  • cookie identifiers; and
  • website interaction and error information.

We use this information to operate, secure and improve the website.

4. How we collect information

We collect personal information:

  • directly from you;
  • from another traveller or group organiser making a booking on your behalf;
  • through our website and Bókun booking forms;
  • through travel marketplaces and booking platforms;
  • through hotels, guides, drivers and other suppliers;
  • from payment processors and banks;
  • through messaging and social-media platforms; and
  • from publicly available sources where lawful and relevant.

When you provide information about another traveller, you confirm that you are authorised to provide it and that the traveller has been informed about this Privacy Policy.

5. Why we use personal information

We may process personal information to:

  • respond to enquiries;
  • prepare quotations and itineraries;
  • confirm and administer bookings;
  • arrange tours, transport, accommodation, tickets, guides and permits;
  • communicate booking changes and operational information;
  • verify the identity of travellers;
  • process and reconcile payments;
  • provide customer assistance;
  • manage cancellations, refunds and complaints;
  • meet accounting, taxation and legal requirements;
  • prevent fraud, misuse and security incidents;
  • protect the safety of travellers, employees and suppliers;
  • maintain and improve our website and services;
  • analyse general customer and website trends;
  • request feedback following a service; and
  • send marketing communications where you have consented or where otherwise permitted.

We process information where it is necessary to fulfil a booking or take steps requested before a booking, comply with legal obligations, protect legitimate rights and interests, or act with the traveller’s consent where consent is required.

The Uzbekistan Law on Personal Data requires personal information to be collected and used for stated purposes, in an amount appropriate to those purposes, and with appropriate confidentiality and security protections. (LEX.UZ)

6. Information required to provide services

Some information is optional, while other information is necessary to provide a requested service.

For example, we may require passport information to issue a train ticket, register accommodation or apply for a permit.

Where required information is not provided, we may be unable to confirm or deliver part or all of the requested service.

7. Information about children

Bookings must normally be made by an adult.

We may process information about children when it is provided by a parent, guardian or authorised group organiser and is necessary to arrange family travel services.

We do not knowingly request information directly from children for marketing purposes.

Parents and guardians may contact us regarding personal information provided about a child.

8. Sharing personal information

We share personal information only where reasonably necessary to organise services, process payments, meet legal obligations or protect legitimate interests.

Recipients may include:

  • hotels, guesthouses, yurt camps and other accommodation providers;
  • drivers and transport companies;
  • guides, instructors and tour partners;
  • railway companies, airlines and ticketing providers;
  • museums, attractions and event organisers;
  • restaurants and meal providers;
  • visa, permit and border-service partners;
  • insurance and emergency-assistance providers;
  • Bókun and other website or booking-technology providers;
  • Viator, Tripadvisor, GetYourGuide, Klook and other booking platforms where relevant;
  • payment processors, acquiring banks and providers such as Repayd where used;
  • accounting, legal, information-technology and professional advisers;
  • government bodies, law-enforcement authorities and courts where legally required; and
  • partners involved in arranging multi-country travel services.

We provide suppliers only with the information reasonably necessary for their part of the service.

Some suppliers act independently and process information according to their own legal obligations and privacy policies.

9. Sale of personal information

TravelX does not sell or rent personal information to advertisers or unrelated third parties.

We do not provide passport details, payment information or booking records to third parties for their independent marketing purposes.

10. International and cross-border processing

TravelX arranges services across Uzbekistan and other Central Asian countries. It may therefore be necessary to send traveller information to suppliers located outside Uzbekistan.

Our website, booking, communications and payment providers may also operate systems or infrastructure in other countries.

Where personal information is stored or processed outside Uzbekistan, we take reasonable steps to ensure that the transfer is:

  • necessary to fulfil the requested booking;
  • made with appropriate consent where required;
  • made to a country providing appropriate protection; or
  • protected by contractual, organisational or other legally recognised safeguards.

Uzbekistan’s March 2026 amendments clarified the conditions under which certain personal data may be stored or processed outside Uzbekistan, while requiring specified categories of information to remain stored within Uzbekistan. (LEX.UZ)

TravelX does not intentionally collect genetic data through its website or use biometric information for automated identification.

11. Retention of personal information

We retain personal information only for as long as reasonably necessary to:

  • administer the booking;
  • complete the travel service;
  • provide post-booking assistance;
  • manage refunds, claims or disputes;
  • maintain accounting and transaction records;
  • comply with statutory retention requirements;
  • prevent fraud; and
  • establish, exercise or defend legal rights.

Retention periods may differ according to the type of record.

Passport copies and sensitive travel information will be deleted, anonymised or access-restricted when they are no longer reasonably required, unless continued retention is required by law or for an unresolved claim.

Information processed only on the basis of marketing consent will be removed from the relevant marketing list after consent is withdrawn, subject to maintaining a limited suppression record so that the request is respected.

Uzbekistan’s Personal Data Law provides that storage should not continue beyond the purposes for which the information was collected and that information should be destroyed when the processing purpose has been achieved, subject to lawful grounds for continued retention. (LEX.UZ)

12. Security

We use reasonable legal, organisational and technical safeguards designed to protect personal information against:

  • unauthorised access;
  • accidental loss;
  • misuse;
  • alteration;
  • unlawful disclosure; and
  • destruction.

Measures may include:

  • access controls;
  • password-protected systems;
  • secure payment-provider technology;
  • limited employee and supplier access;
  • confidentiality obligations;
  • backups and system monitoring; and
  • secure deletion or anonymisation procedures.

No website, email system or internet transmission can be guaranteed to be completely secure. Customers should avoid sending sensitive information through unsecured or public communication channels.

The law requires owners and operators of personal-data systems to adopt legal, organisational and technical measures protecting confidentiality, integrity and security. (LEX.UZ)

13. Cookies and similar technologies

Our website may use cookies and similar technologies.

A cookie is a small data file stored on your device when you visit a website.

13.1 Essential cookies

Essential cookies support functions such as:

  • page navigation;
  • website security;
  • booking forms;
  • language preferences;
  • session management; and
  • checkout operation.

Disabling essential cookies may prevent parts of the website from working correctly.

13.2 Analytics cookies

Where enabled, analytics cookies help us understand:

  • which pages are visited;
  • how visitors reach the website;
  • how long visitors use particular pages;
  • general device and browser information; and
  • whether website errors occur.

Analytics information should be aggregated or limited where reasonably possible.

13.3 Marketing and third-party cookies

Where enabled, marketing or social-media tools may use cookies to measure advertising, display relevant content or support embedded social-media features.

Non-essential cookies will be used with consent where consent is legally required.

You may manage cookies through the website cookie banner, where available, or through your browser settings. Blocking cookies may affect some website features.

14. Marketing communications

We may send news, travel offers or promotional communications where:

  • you have subscribed;
  • you have provided consent;
  • you are an existing customer and the communication is permitted by law; or
  • another lawful basis applies.

You can stop promotional communications at any time by:

  • clicking an unsubscribe link;
  • replying with an unsubscribe request; or
  • contacting info@travelx.uz.

Opting out of marketing will not stop essential communications concerning an active enquiry or confirmed booking.

15. Reviews, photographs and social media

We will not intentionally publish a customer’s passport information, private booking information or payment details.

Customer photographs, videos, names, reviews or testimonials may be used for promotional purposes only with appropriate permission or another lawful basis.

When you communicate with TravelX through WhatsApp, Telegram, Instagram, Facebook or another external platform, that platform may process information under its own privacy policy.

16. Your rights

Subject to applicable law, you may have the right to:

  • know whether TravelX holds your personal information;
  • receive information about how it is processed;
  • request access to relevant personal information;
  • request correction of inaccurate or incomplete information;
  • withdraw consent where processing is based on consent;
  • request temporary suspension of processing where information is inaccurate, outdated, unlawfully obtained or unnecessary;
  • object to certain marketing communications;
  • request deletion where no lawful reason for retention remains; and
  • submit a complaint to the authorised state body or a competent court.

Uzbekistan’s Personal Data Law expressly provides rights to obtain processing information, withdraw consent, seek suspension of certain processing and apply to the authorised authority or court. (LEX.UZ)

To make a request, contact:

Email: info@travelx.uz

We may request reasonable proof of identity before acting on a request. This is intended to prevent unauthorised access to another person’s information.

Certain information may need to be retained where required for legal, contractual, accounting, security or dispute-resolution purposes.

17. Third-party websites

Our website may contain links to hotels, attractions, government websites, payment providers, social-media services or other external websites.

TravelX does not control the privacy or security practices of independent websites. You should review their privacy policies before providing personal information.

18. Changes to this Privacy Policy

We may update this Privacy Policy when:

  • our services change;
  • new technology or payment providers are introduced;
  • legal requirements change; or
  • our privacy and security practices are updated.

The revised effective date will be shown at the top of the page.

Material changes may also be communicated through the website or directly to affected customers where appropriate.

19. Contact us

Questions, concerns and privacy requests may be sent to:

TravelX – Hilal Biz LLC
34 Buyuk Ipak Yo‘li, Mirzo Ulugbek District
Tashkent, Uzbekistan

Email: info@travelx.uz
Telephone and WhatsApp:
+998 97 652 25 25