Legal
Privacy policy
What data we collect, why we collect it, and what rights you have.
This Privacy Policy describes how PilavTour (“we,” “us,” “our”) collects, uses, and shares your personal information when you visit pilavtour.com, contact us, or make an inquiry or booking for one of our tours. We respect your privacy and aim to be clear about how your information is handled.
Who we are
PilavTour is the trading name of Pilav Destination Management MChJ, a tour operator registered in Samarkand, Uzbekistan. We are the principal provider of the tours we sell: we design each itinerary, we are the party you contract with when you book, we accept payment directly, and we are responsible for delivering the trip and for any refund under our cancellation policy. Where we rely on local suppliers for specific services (transport, accommodation, guiding), they act under our instructions as subcontractors, not as independent sellers you separately contract with. You can reach us at hello@pilavtour.com.
What information we collect
When you use our website or contact us, we may collect:
- Information you provide directly: Your name, email address, phone number, country of residence, travel dates, number of travelers, dietary or accessibility requirements, and any other details you share in your inquiry.
- Technical information: Your IP address, browser type, device type, and the pages you visit on our site. We use this to keep the site working and to detect abuse.
- Marketing source information: If you arrive via a marketing link, we may record which campaign brought you to us, so we know which content is useful.
How we use it
- To respond to your inquiry and prepare a tour proposal.
- To prepare your tour, issue invoices, and arrange the local suppliers (transport, accommodation, guiding) who deliver parts of it on our instructions.
- To send you trip-related communications (confirmations, pre-trip information, follow-ups).
- To improve our website and content — we look at aggregated statistics about which pages help travelers and which don't.
- To prevent fraud, spam, and abuse.
We do not sell your personal information to anyone. We do not use your information for unrelated marketing without your consent.
Who we share it with
- Local service suppliers — accommodation, transport, and guiding providers we work with to deliver your trip. They act under our instructions and receive only what they need for their part of the service, not for their own marketing.
- Service providers we depend on to run our business, including Supabase (data hosting, EU), Vercel (website hosting and cookieless visit counts), Cloudflare (Turnstile bot protection on our forms), Resend (transactional email), Google Workspace (business email), Telegram (internal notifications), and Google (Google Analytics 4 and Google Ads conversion measurement) — the last one only while the matching cookie category is on, which in some countries means only after you accept it; see Cookies below. Each handles data under their own published privacy practices.
- Authorities if legally required (court order, tax investigation, fraud prevention).
Your rights (GDPR & similar)
If you are located in the European Union, the United Kingdom, California, or another jurisdiction with strong data-protection laws, you have the right to:
- Access the personal data we hold about you
- Correct inaccurate or incomplete data
- Delete your data (when no legal obligation requires us to keep it)
- Receive a copy of your data in a portable format
- Object to certain processing
- Withdraw consent at any time
To exercise any of these rights, email hello@pilavtour.com. We'll respond within 30 days.
How long we keep your data
Inquiry data is kept for up to 24 months in case you re-engage. Booking and tour-related data is kept for 7 years to comply with Uzbekistan tax and accounting law, then deleted. Technical logs are kept for up to 90 days.
Cookies
We use Google Analytics 4 cookies (Analytics category) and Google Ads conversion cookies (Marketing category). Whether these need your permission before they run depends on where you are: in the EEA, the UK, Switzerland, Brazil, South Korea and Quebec we ask first and nothing loads until you accept, and declining is one click. In the United States and Canada they run from your first pageview, a brief notice tells you so, and the footer link turns them off — and a Global Privacy Control signal from your browser switches marketing off by itself. Elsewhere they run by default with the same footer control. Whenever a category is off, its script is not loaded at all rather than loaded and idle. Your choice (which categories, when, and against which version of this policy) is recorded in your browser’s local storage, not a cookie, and you can change it at any time from the footer of any page.
Full details — cookie names, who sets them, how long they last — are on our Cookie policy page.
Children
Our services are intended for adults. We don't knowingly collect personal information from anyone under 16. Travelers under 18 are welcome on tours, but inquiries and bookings must be made by an adult parent or guardian.
Changes to this policy
We may update this policy as our business or applicable laws change. Material changes will be highlighted at the top of this page, and we'll update the “Last updated” date below.
Contact
For any privacy-related question, email hello@pilavtour.com. We read every message.
Last updated: September 21, 2026. See also our Cancellation policy and FAQ.