1. General Provisions

This Privacy Policy (hereinafter — the Policy) defines the procedure for processing and protecting personal data of users of the NeuroLife rehabilitation center website (hereinafter — the Operator), located at 81/7 Babur Street, Yakkasaray District, Tashkent, Republic of Uzbekistan.

The Policy is developed in accordance with the Law of the Republic of Uzbekistan 'On Personal Data' (2019), Federal Law of the Russian Federation No. 152-FZ 'On Personal Data', and Regulation (EU) 2016/679 (General Data Protection Regulation, GDPR).

The Policy applies to all personal data that the Operator may receive from website users. Using the website signifies the user's agreement with this Policy.

2. Data We Collect

The Operator collects the following categories of personal data:

Data provided by the user:

Full name
Contact phone number
Email address
Selected child's diagnosis (when submitting a request)

Medical data (special category):

Information about the child's diagnosis provided during consultation registration

Technical data:

IP address, browser type and version, referral source
Cookies and similar technologies

Analytics data:

Data collected by Google Analytics (GA4) and Yandex.Metrica services

3. Processing Purposes

Collected personal data is processed for the following purposes:

Scheduling consultations and appointments with clinic specialists
Contacting the user to provide information about services
Providing medical rehabilitation services
Analytics and website improvement
Fulfilling the Operator's legal obligations

4. Legal Basis for Processing

Personal data processing is carried out on the following grounds: consent of the data subject, performance of a service agreement, legitimate interests of the Operator (analytics, security).

Republic of Uzbekistan: processing is carried out in accordance with Article 11 of the Law 'On Personal Data' — based on the consent of the data subject.

Russian Federation: processing is carried out in accordance with Articles 6 and 10 of Federal Law No. 152-FZ — consent of the data subject, including for processing special categories of data.

European Union (GDPR): processing is based on Art. 6(1)(a) — consent, Art. 6(1)(b) — contract performance, Art. 9(2)(a) — explicit consent for health data processing.

5. Data Storage and Protection

The Operator takes necessary organizational and technical measures to protect personal data from unauthorized access, destruction, modification, blocking, copying, and distribution.

Personal data is stored on secure servers and processed only by authorized employees who have confidentiality obligations.

The retention period for personal data is 3 years from the last interaction with the user or until consent is withdrawn.

6. Data Subject Rights

The user has the right to:

Obtain information about their personal data processed by the Operator
Request clarification, blocking, or destruction of personal data
Withdraw consent to the processing of personal data
Appeal the Operator's actions to the authorized supervisory body

Republic of Uzbekistan: data subject rights are exercised in accordance with Articles 20–25 of the Law 'On Personal Data'.

Russian Federation: data subject rights are regulated by Chapter 3 of Federal Law No. 152-FZ.

European Union (GDPR): additionally — right to data portability (Art. 20), restriction of processing (Art. 18), right to object (Art. 21), right to lodge a complaint with a supervisory authority.

To exercise their rights, the user may send a request via email or in writing to the clinic's address.

7. Cookies and Analytics

The website uses the following types of cookies:

Essential — ensure website functionality (session, language preferences)
Analytical — Google Analytics (GA4) and Yandex.Metrica for traffic analysis
Functional — saving language and settings preferences

Users can disable cookies in browser settings; however, this may affect website functionality.

8. Data Sharing with Third Parties

The Operator does not sell or share personal data for third-party marketing. Data may be shared with:

Request processing services (n8n, Telegram bot) — for prompt communication with the user
Analytics services (Google Analytics, Yandex.Metrica) — for traffic analysis
Partners providing technical support — subject to their compliance with confidentiality requirements

9. Cross-Border Data Transfer

Personal data may be processed outside the Republic of Uzbekistan in connection with the use of cloud services and analytical tools.

The Operator ensures an adequate level of data protection for cross-border transfers in accordance with standard contractual clauses.

10. Medical Data and Medical Confidentiality

Information about the child's diagnosis constitutes a special category of personal data (health data).

Medical data processing is carried out only with the explicit consent of the data subject and exclusively for the purpose of providing medical rehabilitation services.

The Operator ensures compliance with medical confidentiality and the privacy of medical information in accordance with the legislation of the Republic of Uzbekistan.

11. Policy Changes

The Operator reserves the right to make changes to this Policy. The current version is always available on this page. The date of the last update is indicated at the beginning of the document.

12. Contact Information

For all questions related to the processing of personal data, you may contact:

Email: neurolife.uzbekistan@gmail.com
+998 91 132 51 05
81/7 Babur Street, Yakkasaray District, Tashkent, Uzbekistan