Privacy Policy

1. General Provisions

ThisPrivacy Policy (hereinafter — the “Policy”) defines the procedure for processing and protecting the personal data of Users of theWTChat.travel service (hereinafter — the “Platform”).

The Policy has been developed in accordance withinternational data-protection standards, including those of theEuropean Union (GDPR), theUnited States of America, thePeople’s Republic of China, theRussian Federation, and theRepublic of Uzbekistan, as well as other applicable data-protection legislation relevant to the Administration’s activities.   
It reflects internationally recognized norms and requirements, together with the national legal provisions of the jurisdictions in whichWTChat.travel operates.

Thedata controller (also referred to as the “Operator”) is theAdministration of WTChat.travel, a legal entity (or authorized representatives thereof) that determines the purposes and means of processing Users’ personal data.   
The Administration acknowledges the importance of privacy and adheres to the principle ofrespect for human rights and freedoms in personal-data processing, including the protection of the right to private life.

This Policy applies to all information about Users that the Platform may obtain during the use of theWTChat.travel website, its mobile applications (where applicable), and in the course of any communication between Users and the Administration.   
The Policy appliesregardless of the User’s country of access — WTChat.travel strives to ensure a consistently high level of data protection for all Users worldwide.

Use of the Platform constitutes the User’sconsent to this Policy.   
If the User does not agree with its terms, they must refrain from using the service or contact the Administration directly to resolve the issue.

Note:   
This Policy covers only the processing of data collected within the operation of theWTChat.travel Platform.   
It doesnot govern the activities of third-party websites or services that the User may access via links from our Platform or that are integrated within its functionality.   
Such third-party resources are subject to theirown privacy policies.

2. Personal Data Collected and Processed on the Platform

WTChat.travel does not require Users to provide their full name, residential address, phone number, or any other sensitive personal data when registering an account or using the Platform’s functionality.

Mandatory information is limited to anemail address and apassword (or an external authorization token).   
This approach ensures a particularly high level of User privacy protection, in addition to the application of modern technologies and compliance with recognized international data-protection standards.

Alladditional details in a User’s profile, as well as any data provided when logging in via third-party accounts, are suppliedvoluntarily by the User.

Thus, the Platform collects personal data only to theminimum extent necessary for the technical operation of the service and fulfillment of its stated purposes.   
Depending on the circumstances, the following categories of personal data may be processed:

Data Provided by the User During Registration

When registering an account, the User provides anemail address and apassword (stored in encrypted form).   
If registration is completed via a third-party single-sign-on service, the Platform may automatically receive certain User data from that service — for example, the email address, display name, or avatar link (according to the User’s external profile settings).

Optional Profile Information

Users may choose to supplement their profile with additional details such as first and last name, company name, position, photo, contact phone number, or other data within their account.   
Such additional information is providedvoluntarily and is visible to other participants only to the extent enabled by the Platform’s functionality (for example, a name and photo may appear in a profile or chat messages).   
The Platformcannot prevent other Users from copying this publicly visible information.

Technical Data Automatically Collected

When visiting the website or using the Platform, certaintechnical information is collected automatically, including:

• IP address of the User’s device;   
  
   
• Browser type and version;   
  
   
• Interface language and operating system details;   
  
   
• Approximate geographic region (based on IP or device settings);   
  
   
• Date and time of access;   
  
   
• Usage logs such as visited pages and order of feature interaction.   
  
   

Some of this information is collected throughcookies and similar technologies (see Section 4 of this Policy for details).

Communication Data

When a User contactssupport or otherwise communicates with the Administration via email or other channels, the Platform may store the record of such correspondence — including the sender’s email address, the content of the inquiry, and any attached files.   
This information is retained solely to resolve issues, improve service quality, and analyze common user requests.

User-Generated Content

Any information voluntarily posted by the User on the Platform — such as chat messages, publications, comments, reviews, or uploaded images — may contain personal data about the User or third parties (for example, names, contact details, or identifiable photos).   
Such data are consideredvoluntarily provided for publication and are processed solely within the context of the Platform’s operation (e.g., displayed in relevant sections or transmitted to other chat participants).   
The Administration doesnot use this content outside the functional scope of the service.   
Users should understand that posting information about themselves or others in public areas is doneat their own risk: if you do not wish to disclose certain data, do not post them publicly.

Cookies and Local Storage

The Platform usescookies to automatically recognize returning Users, enhance usability, and collect statistical information.   
In particular:

• Session cookies — set after login to maintain authentication status;   
  
   
• Technical cookies — used by integrated services (e.g., video-conferencing tools) to ensure correct operation of specific features;   
  
   
• Local-storage variables — stored in the User’s browser to save interface preferences (such as selected city or search filters) for convenient reuse.   
  
   

Information stored inLocal Storage remainson the User’s device and isnot transmitted to the server.

Data Received from Third Parties

In certain cases, the Platform may receive information about the User from external sources — for instance:

• when the User logs in via an external platform, the Administration receives basic identification data (e.g., email and display name) throughOAuth authorization;   
  
   
• when cooperating partners (such as travel agencies or hotels) participate in the Platform’s ecosystem, limited information may be shared with them — always with theUser’s explicit knowledge, for example, when registering for an event or booking through an integrated widget.   
  
   

In such situations, the User will be clearly informed which data are being transferred and to whom.

Excluded Categories of Data

The Platform doesnot collect or process so-calledspecial categories of personal data (e.g., information about racial or ethnic origin, political opinions, religious beliefs, health status, or sexual life).   
It also doesnot processbiometric data.   
Users are strongly advisednot to submit such information about themselves or others on the Platform.   
If, for any reason, such data are received, the Administration willnot store them and will promptly delete them, except where retention is required by law.

3. Purposes of Personal Data Processing

The Administration processes Users’ personal datastrictly for the purposes for which they were collected and does not use them in any manner incompatible with those purposes.   
The main purposes of processing personal data onWTChat.travel include the following:

Provision of Platform Services

The primary purpose of processing is toidentify the User and provide access to the Platform’s functionality.   
For example:

• the User’semail address andpassword are used for registration and authentication;   
  
   
• name and other profile data are displayed to personalize the account;   
  
   
• language and preference settings are applied to display the interface appropriately for each User.   
  
   

User Communication and Interaction

WTChat.travel is designed to enable communication, knowledge exchange, and professional networking among travelers, companies, and industry experts.   
The processing of User messages, publication of their content, and display of profile information are all conducted to support the Platform’score communication features.

Our community chats and discussion spaces operate by transmitting, displaying, and storing messages and related metadata (such as timestamps and authorship) as part of the Platform’s intended function.

Service Improvement, Analytics, and Statistics

We useanonymized or depersonalized data about visits and User activity to understand how the Platform is used and to improve its performance.   
For instance, web-analytics data (page visits, navigation paths, session duration) help identify popular features and interface issues.

For this purpose, we may employanalytics tools that provide aggregated statistics and do not disclose personally identifiable information unless strictly necessary.   
Such data also help us optimize content and recommendrelevant materials to Users.

Support and Feedback

Information provided by Users when contacting support (such as email and inquiry text) is used to process requests, communicate with Users, and resolve issues.   
We may also analyze support inquiries to improve service documentation — for example, by adding clarifications to FAQs if a question is frequently asked.

User Notifications and Marketing

With the User’s consent, contact data (such as email or phone number) may be used to sendnotifications about important service updates,newsletters, ormarketing offers (e.g., new features, promotions, or partner programs).

Users mayopt out of marketing communications at any time using the unsubscribe link in the message or by notifying us directly.   
However,service notifications — such as security alerts or updates to terms — may be sent without opt-out capability, as they are essential for Platform operation.

Security and Prevention of Misuse

To ensure reliable operation, we may process personal data toprotect the Platform against unauthorized access, cyberattacks, and fraudulent activity.   
For example, IP addresses and activity logs may be analyzed to detect suspicious behavior (e.g., repeated failed login attempts, spam bots).   
This enables timely protective actions such as blocking certain requests or restricting access by IP.

In cases provided by law, such data may also be used toinvestigate incidents involving violations of legal requirements or this Agreement.

Legal Compliance

In certain situations, we may process, store, or disclose Users’ personal data when required bylaw or official request — for instance, in response to a court order or a lawful request from authorities, and strictly in accordance with applicable legal procedures.

We donot use personal data for automated decision-making that significantly affects Users’ rights (for example, profiling that influences service provision without human involvement).   
If data processing for new purposes becomes necessary in the future, the Administration willobtain User consent or ensure another valid legal basis for such processing and will notify Users of the correspondingupdates to this Policy.

4. Use of Cookies and Similar Technologies

Cookies are small text files stored on a User’s device when visiting a website.   
We use cookies for several important purposes, which enhance both thesecurity andusability of the Platform.

Authentication and Session Management

As mentioned earlier, cookies allow the Platform to recognize a registered User and maintain their active session without requiring them to re-enter a password on every page.   
This improves convenience and ensures a seamless browsing experience.   
Such cookies contain aunique session identifier and donot store confidential information in plain text.

Preferences and Settings

Some cookies help remember the User’s preferences, such as thepreferred interface language.   
This allows the Platform to automatically display content in the correct language at each visit without requiring the User to make the same selection again.

Analytics

Analytics cookies are used to collectaggregated, depersonalized statistics about Platform usage.   
They may track which pages Users visit, how long they stay, and general browsing patterns.   
These data are processed inanonymized form — we do not have access to individualized browsing routes or personally identifiable analytics.

Integrated Third-Party Services

If the Platform includesthird-party widgets or integrations, such services may set their own cookies to function properly (for example, to remember your settings within their system).   
We make reasonable efforts to minimize such instances and to inform Users whenever possible.   
However, please note thatexternal content operates under the respective third-party providers’ policies.

User Control over Cookies

Users maymanage cookies through their browser settings.   
You can disable some or all cookies, or clear them after each session.   
However, disablingauthentication oressential settings cookies may result in an inability to sign in or in malfunctioning of certain Platform features.

To ensure full functionality and a smoother experience, it isrecommended to allow cookies for the WTChat.travel website.

By continuing to use our sitewithout changing your browser settings, you consent to the use of cookies and similar technologies as described in this Policy.   
If you do not agree with the use of cookies, you may disable them, but some parts of the service may not function properly.

5. Legal Basis for Data Processing

We process Users’ personal dataonly on lawful grounds established by applicable data-protection legislation.   
Depending on the specific context, one or more of the following legal bases may apply:

User Consent

When registering an account, the Userexplicitly agrees to the terms of this Privacy Policy and thereby gives consent to the processing of their personal data for the purposes described herein.

In certain cases, we may requestseparate, explicit consent — for example, to send marketing communications, share information with a partner as part of a joint promotion, or provide access to optional services.

Where processing is based on consent, the User has theright to withdraw consent at any time.   
However, withdrawal may result in the inability to continue providing certain services that rely on the data in question.

Performance of a Contract (User Agreement)

Processing of many data categories is necessary for theperformance of the User Agreement (Terms of Use) — that is, to deliver WTChat.travel services.   
For example, without processing contact details and passwords, it would be impossible to create an account or provide the User with access to community chats.

Accordingly, such processing is carried outunder the contractual relationship (public offer) between the User and the Administration.

Legitimate Interests of the Operator

We may process data based on ourlegitimate interests, such as ensuring the functionality and security of the Platform, improving service quality, and preventing abuse.   
In each case, we carefully assess whether such processing may infringe upon the User’s rights and freedoms.   
For example, analysis of activity logs to detect cyberattacks is justified by thelegitimate interest of maintaining system security.

Compliance with Legal Obligations

In cases expressly required by law, we process and, where necessary, disclose personal data to comply withstatutory obligations.   
This may include, for instance:

• retention of accounting records for paid transactions,   
  
   
• responses to lawful requests from authorities, or   
  
   
• compliance with regulatory requirements.   
  
   

Depending on the situation,multiple legal bases may apply simultaneously.   
We guarantee thatno personal data will be processed without alawful justification under applicable data-protection laws.

6. Disclosure and Transfer of Personal Data to Third Parties

The Administration doesnot sell, rent, or disclose Users’ personal data to third parties without the User’sexplicit consent orclear voluntary action.   
Personal data may only be shared with third parties in limited cases where such transfer is necessary for the provision of services or required by law.

Service Providers and Contractors

We engage trusted third-party companies to support and maintain the operation of the Platform.   
These may include:

• hosting providers anddata centers where the website and databases are physically hosted;   
  
   
• email delivery services for sending system notifications;   
  
   
• analytics providers for collecting statistical data;   
  
   
• integrated communication platforms and other service tools.   
  
   

In such cases, these companies may access personal dataonly to the extent necessary to perform their functions (for example, hosting stores data on its servers; email services access recipient addresses; analytics providers process cookie identifiers and IPs).

All such contractors are bound byconfidentiality and data-protection agreements and are prohibited from using the provided data for any purpose other than supporting the Platform’s operation.

Partners and Other Users (at the User’s Initiative)

If the Uservoluntarily chooses to interact with a partner through the Platform, certain personal data may be made available to that partner.   
For example, ifWTChat.travel runs a joint promotion with a tour operator and the User submits an application, the data in that application will be transferred to the partner for follow-up communication.

In such cases, the data transfer istransparent and initiated by the User (who enters the information into the respective form).   
We recommend reviewing the partner’s privacy policy before submitting any personal data.   
However, such transfers are madeonly through the User’s explicit and informed action.

Successors

In the event ofreorganization, merger, or sale of the business associated withWTChat.travel, Users’ personal data may be transferred to alegal successor under an agreement ensuring the protection of data subjects’ rights.   
In such a case, Users will benotified in advance and given the opportunity to discontinue use of the service and request deletion of their data if they do not agree with the new terms.

Legal Requirements

The Administration may disclose personal datawithout prior consent if it believes, in good faith, that it islegally required to do so — for instance, pursuant to acourt order or alawful request from competent authorities.

For example, if an official inquiry is made in connection with a criminal investigation, we may provide available information about a specific User, but only as required by law.   
In all cases, the Administration strives to ensure that such requests are properly documented and specify alegitimate legal purpose for the data disclosure.

Access within the Platform

Information published by the User and stored on the Platform may be visibleonly to other registered Users andonly within the limits of the Platform’s functionality (for example, in chats or within User profiles).   
The Platform isnot intended for open public disclosure and does not make User data available to an unlimited audience.

Cross-Border Data Transfers

To provide Platform services, the Administration may carry outcross-border transfers of personal data, including storage and processing on servers locatedoutside the User’s country of residence.   
Such transfers are madeonly on lawful grounds, including:

• where the destination country ensures anadequate level of data protection;   
  
   
• on the basis ofStandard Contractual Clauses (SCCs) or other mechanisms recognized by applicable law; or   
  
   
• with theexplicit consent of the User to such transfer.   
  
   

In all cases, the Administration guarantees that thelevel of protection remains equivalent to that required by applicable legislation (e.g., GDPR for EU-based Users).   
Users have the right to request clarification regardingthe countries and legal bases under which their data are transferred.

7. Data Retention and Data Protection Measures

We retain Users’ personal dataonly for as long as necessary to fulfill the purposes described in this Policy, unless a longer retention period is required or permitted by law.   
For example:

• Profile and account data are stored for the active lifetime of the User’s account and are deleted (or anonymized) upon the User’s request or when the account is deleted by the Administration.   
  
   
• Support correspondence may be retained for the time necessary to process the request and analyze recurring issues, but not beyond the period established by internal regulations.   
  
   
• System logs and technical records (including IP data and login events) are retained for a limited period — typically up toone year or less, unless longer retention is required for security or legal compliance.   
  
   
• Transaction-related data (in the case of paid services) are stored for the period required byaccounting and tax laws.   
  
   

After the retention period expires, personal data are eithersecurely deleted orirreversibly anonymized so that identification of the data subject becomes impossible.

Data Protection

We implement appropriateorganizational and technical measures to protect Users’ personal data and other information from unauthorized access, alteration, disclosure, or destruction.   
Such measures include, in particular:

• use ofmodern encryption methods (e.g., password hashing, data transmission over HTTPS/SSL protocols);   
  
   
• restricted access to personal-data databases (access is granted only to authorized personnel who require it for their professional duties);   
  
   
• regular updates of server and software components to address known vulnerabilities;   
  
   
• data backups to prevent loss in case of system failure;   
  
   
• deployment ofintrusion detection and prevention systems (IDS/IPS).   
  
   

Personnel authorized to process personal data receivesecurity training and are bound by strictconfidentiality obligations.

User Responsibilities

Users must also take reasonable steps to protect their own information.   
We strongly recommend:

• keeping account passwordsconfidential and usingunique, strong combinations;   
  
   
• refraining from sharing personal information with third parties unnecessarily;   
  
   
• periodicallyupdating passwords for improved security.   
  
   

The Administration willnever request passwords or other sensitive information in an unsecured form (e.g., via email).

In the event of avulnerability discovery or data incident, we will notify affected Users and the competent authorities (if required by law)within the prescribed timeframe.

8. Users’ Rights Regarding Their Personal Data

EachWTChat.travel User has the following rights concerning their personal data, in accordance with applicable data-protection laws:

• Right of Access – to obtain confirmation as to whether their personal data are being processed and to receive a copy of such data;   
  
   
• Right to Rectification – to request correction or completion of data that are inaccurate or outdated;   
  
   
• Right to Erasure (“Right to Be Forgotten”) – to request deletion of their personal data or withdrawal of consent, except where retention is required by law;   
  
   
• Right to Restriction or Data Portability – in cases provided by law, to temporarily suspend processing or to receive a copy of their personal data in amachine-readable format;   
  
   
• Right to Object to Processing for Marketing Purposes – upon objection, personal data will no longer be used for promotional or newsletter communications;   
  
   
• Right to Lodge a Complaint with Supervisory Authorities – if a User believes that their rights have been violated, they may contact the competent data-protection authority, as well as theWTChat.travel Support Service for preliminary resolution.   
  
   

To exercise any of these rights, the User may submit a request via email to:   
📩support@wtchat.travel

Responses will be providedwithin the timeframe established by applicable law (typically within30 days from receipt of the request).

9. Policy Updates and Language Versions

This Privacy Policy may beupdated periodically by the Administration, particularly in the event of changes in legislation or the introduction of new types of data processing.

If we makematerial changes, Users will be notified by means of aprominent notice on the website or byemail (sent to the address associated with their account).   
Thedate of the latest update will always be displayed at the top of the Policy.

By continuing to use the Platform after the updated Policy takes effect, the User confirms theiracceptance of the revised version.   
If the changes require renewed consent under applicable law, we willrequest such consent separately.

We recommend that Usersreview this page periodically to stay informed about the current version of our data-processing rules.

Language Versions

This document may be published in thesix official UN languages —Arabic, Chinese, English, Spanish, Russian, and French — for the convenience of Users.   
All translations are prepared in good faith to ensure accuracy.

In the event of any discrepancies between language versions, the version explicitly designated on the publication page as the“Controlling Version” shall prevail.   
The identification of the controlling version will be clearly stated on the WTChat.travel website where this document is published.

10. Contact Information

For any questions related to this Privacy Policy, the processing of your personal data, withdrawal of consent, data deletion, or to submit inquiries and complaints, you may contact theAdministration of WTChat.travel using the following details:

Email: support@wtchat.travel   
Postal address: Republic of Uzbekistan, Samarkand, Oydin Yul Street, 5, Office 126   
Contact person: Executive Director,LLC “SILK ROAD OPERATIONS CENTER”

When submitting an inquiry, please include youridentifying information (for example, the email address used for registration on the Platform) and thenature of your request.   
We will review your message and provide a response or the requested informationwithin the timeframes established by applicable law.

Thank you for usingWTChat.travel and for trusting us with your personal data.   
We are committed to maintaining that trust by ensuring thesecurity and confidentiality of every User’s information.   
If you have additional questions or suggestions for improving our privacy practices, we are always open to feedback.