Privacy Policy

GEARGO (“GEARGO”, “we”, “us”) operates the online marketplace at geargo.uz and its localised versions, the GEARGO mobile experience, the Master Service installation programme and related customer, seller and business services (together, the “Services”).

For the purposes of the Law of the Republic of Uzbekistan “On Personal Data” (No. ZRU-547 of 2 July 2019, as amended) and other applicable data-protection law, GEARGO is the operator (controller) of the personal data described in this Policy.

• Operator: EV INDUSTRIES LLC, taxpayer number (STIR) 312 786 487
• Legal address: 15 Bunyodkor 1st Lane, Tarnovboshi MFY, Yashnobod district, Tashkent, Republic of Uzbekistan
• Office, warehouse, pickup and Master Service: Qora Qamich 2/4, Tashkent, Republic of Uzbekistan
• content.privacyPolicy.sections.controller.body.2.3
• Phone: +998 90 927 0161

Where a seller on the marketplace processes your data for its own purposes — for example to issue an invoice or honour a manufacturer warranty — that seller is a separate operator of that data. Section 6 explains what we share with sellers and why.

This Policy applies to personal data we process about visitors, customers, account holders, newsletter subscribers, Master Service clients, and the individual representatives of sellers, suppliers, wholesale buyers and other business partners.

It does not cover websites or services operated by third parties that we link to, including payment providers, courier tracking pages and social networks. Their own privacy notices apply. It also does not cover the internal practices of our sellers beyond what Section 6 describes.

By using the Services you acknowledge that you have read this Policy. Where the law requires your consent for a specific use — such as marketing messages or non-essential cookies — we ask for it separately and you can withdraw it at any time.

What we collect depends on how you use GEARGO. Most of it comes directly from you when you order, register or contact us.

• Identity and contact data. Name, phone number, email address, preferred language and, where you tell us, your company and job title.
• Account data. Login credentials (stored as a salted hash, never as plain text), account settings, saved vehicles and saved addresses.
• Order and transaction data. Items ordered, prices, discounts, order status, order history, delivery instructions, invoices and receipts, and your communications about an order.
• Delivery data. Delivery address, recipient name and phone number, courier tracking events and proof of delivery.
• Payment data. Payment method, the last four digits of a card and the payment provider’s transaction reference. We never receive or store your full card number, expiry date or CVV — these are entered directly with the licensed payment provider.
• Vehicle data. The make, model, year and trim you select so we can show compatible parts. If you use Master Service we may also record the VIN or registration plate needed to book the installation.
• Support and service data. Messages, call notes, photos of a part or installation you send us, return requests, warranty claims and Master Service records such as technician notes and installation photos.
• Seller and business data. For sellers, suppliers and wholesale buyers: company registration details, tax identification number (INN/STIR), bank details for payouts, licences and certificates, and the contact details of authorised representatives.
• Device and usage data. IP address, browser and device type, operating system, language, referring page, the pages you visit and the actions you take on them, and approximate location derived from your IP address.
• Marketing preferences. Whether you have subscribed to the newsletter and which channels you have agreed to receive messages on.

We do not deliberately collect special categories of personal data (such as health, biometric, religious or political data) and ask you not to send them to us.

• You — when you create an account, place an order, select a vehicle, request Master Service, apply to sell, subscribe to the newsletter or contact support.
• Your device — automatically, through cookies, local storage and server logs, as described in Section 8.
• Sellers and couriers — order status updates, tracking events, proof of delivery and, for returns, inspection results.
• Payment providers — confirmation that a payment succeeded or failed, and the transaction reference.
• Public registers and verification services — for sellers and business partners, to confirm that a company exists and is authorised to trade.

We use personal data only for the purposes below. Under Uzbek law, each use rests on your consent, on the need to perform a contract with you, on a legal obligation, or on our legitimate interest in running a safe and reliable marketplace.

We do not sell personal data and we do not use it for automated decisions that would have legal or similarly significant effects on you.

GEARGO is a managed marketplace: independent sellers list products, and orders are fulfilled by the seller, by GEARGO or by a courier partner. To make that work we share a limited set of data.

• Sellers receive the order details they need to fulfil it — the items, your name, delivery address, phone number and any delivery notes. Sellers may use this data only to fulfil the order, handle a return or warranty claim, and meet their own legal obligations. They may not use it for marketing.
• Couriers and delivery partners receive your name, delivery address, phone number and the parcel details.
• Master Service technicians receive the vehicle, the parts to be installed, the booking time and the contact details needed to reach you.
• Other customers never see your personal data. If we introduce reviews, only the name or alias you choose will be shown.

Every seller and partner on GEARGO signs terms that require them to protect this data and to use it only for the purposes above.

We use carefully selected companies to run parts of the Services on our behalf. They act on our instructions, are bound by data-processing terms, and may not use your data for their own purposes.

We may also disclose personal data where the law requires it — for example to tax authorities, courts or law enforcement acting under a valid legal basis — or where it is necessary to establish, exercise or defend legal claims, or to protect the rights, property or safety of GEARGO, our customers or the public. If GEARGO is involved in a merger, acquisition or sale of assets, personal data may be transferred to the successor under the same protections.

Cookies are small files placed on your device by a website. Local storage is a similar mechanism your browser provides. We use both sparingly, and only for the purposes below.

Microsoft Clarity. We use Clarity to understand how the storefront is used — where people click, how far they scroll, and where they get stuck. Clarity masks sensitive content such as form fields before it leaves your browser, and we use the data only to improve the storefront, never to identify an individual customer. Microsoft’s handling of this data is described in the Microsoft Privacy Statement.

You can control cookies through your browser settings, including deleting existing cookies and blocking new ones. Blocking essential cookies will stop parts of the Services — such as signing in or checking out — from working. Where we show a cookie banner, you can change your analytics choice there at any time.

We send marketing messages — new arrivals, deals, compatibility updates and wholesale news — only if you have subscribed or otherwise agreed to receive them. Transactional messages about your order, delivery, return or Master Service booking are not marketing and are sent regardless.

content.privacyPolicy.sections.marketing.body.1

We do not share your contact details with other companies for their own marketing.

In line with the Law “On Personal Data”, personal data of citizens of the Republic of Uzbekistan that we collect through the Services is stored and processed in databases physically located in Uzbekistan, and those databases are registered with the authorised state body as the law requires.

Some of the service providers listed in Section 7 — in particular our content-delivery network, analytics and messaging providers — operate infrastructure outside Uzbekistan. Where this results in a transfer of personal data abroad, we do it only where the law permits: with your consent, where it is necessary to perform a contract with you, or where the recipient country ensures adequate protection, and always under contractual safeguards that require the recipient to protect the data to the standard described in this Policy.

As GEARGO opens in other countries, this section will be updated to describe the local storage arrangements for each market.

We keep personal data only as long as it is needed for the purpose it was collected for, and afterwards only as long as the law requires. The main periods are:

When a period ends we delete the data or anonymise it so it can no longer be linked to you. Backups are overwritten on a rolling schedule and are not used to restore deleted personal data except where required to recover from a system failure.

We apply technical and organisational measures appropriate to the risk, including:

• Encryption of data in transit (TLS) on every page of the Services and encryption of backups at rest.
• Passwords stored only as salted hashes; card details never touching our systems.
• Role-based access so staff, sellers and technicians see only the data their task requires, with access logged.
• Network protection, monitoring and regular software updates on our infrastructure.
• Data-protection terms with every provider and partner that handles personal data.
• Staff training and internal procedures for handling personal data and responding to incidents.

No system is completely secure. If a breach affecting your personal data occurs, we will notify you and the authorised state body where the law requires, and tell you what happened and what we are doing about it. Please help by using a strong, unique password and telling us at once if you suspect your account has been misused.

Under the Law “On Personal Data” and other applicable law you have the right to:

• Know whether we process your personal data, and receive a copy of it and information about how it is used.
• Correct data that is inaccurate or incomplete.
• Delete your data, or have it blocked, where it is no longer needed, was processed unlawfully or where you withdraw your consent — subject to records we must keep by law.
• Withdraw consent at any time for uses that rely on it, such as marketing and analytics cookies, without affecting processing that took place before.
• Object to processing based on our legitimate interests, and to direct marketing at any time.
• Receive the data you gave us in a structured, commonly used format, where technically feasible.
• Complain to the authorised state body for personal data protection in the Republic of Uzbekistan, or to the competent authority in your country of residence.

content.privacyPolicy.sections.rights.body.2

You can also ask us at any time to update your details or remove a saved vehicle or address.

The Services are intended for adults. You must be at least 18 years old, or the age of legal capacity in your country, to create an account or place an order. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

If you represent a seller, supplier, wholesale buyer or other business partner, we process your name, role and contact details, together with your company’s registration, tax and banking details, to verify the company, sign and perform our agreement, pay out sales, handle disputes and meet legal obligations such as tax reporting and anti-fraud checks.

We may share verification data with identity-verification and payment providers, and disclose seller identity and contact details to a customer where the law on consumer protection or distance selling requires it — for example on an invoice or in a dispute.

Sellers who receive customer data from GEARGO must handle it in line with the seller agreement and applicable law, and must tell us immediately of any incident involving that data.

The Services may link to manufacturer websites, courier tracking pages, payment providers, social networks and messaging apps such as Telegram. When you follow a link or use one of those services, their privacy notice applies. We are not responsible for how they handle your data and encourage you to read their notices.

We may update this Policy as the Services, the law or our providers change. The date and version at the top of the page show the current revision. For material changes — for example a new purpose for using your data — we will give notice on the Services, by email or both before the change takes effect, and where the law requires it we will ask for your consent again.

Earlier versions are available on request.

Questions, requests and complaints about personal data can be sent to:

• content.privacyPolicy.sections.contact.body.1.0
• Phone: +998 90 927 0161
• Post: EV INDUSTRIES LLC, 15 Bunyodkor 1st Lane, Tarnovboshi MFY, Yashnobod district, Tashkent, Republic of Uzbekistan

For questions about an order, delivery or a return, the fastest route is the support form. For the rules of using the marketplace see the Terms and Conditions; for returns see the Refunds and Returns Policy.