Privacy policy

This Privacy Policy describes how PilavTour (“we,” “us,” “our”) collects, uses, and shares your personal information when you visit pilavtour.com, contact us, or make an inquiry or booking for one of our tours. We respect your privacy and aim to be clear about how your information is handled.

Who we are

PilavTour is the trading name of Pilav Destination Management MChJ, a tour operator registered in Samarkand, Uzbekistan. We are the principal provider of the tours we sell: we design each itinerary, we are the party you contract with when you book, we accept payment directly, and we are responsible for delivering the trip and for any refund under our cancellation policy. Where we rely on local suppliers for specific services (transport, accommodation, guiding), they act under our instructions as subcontractors, not as independent sellers you separately contract with. Applicable law and jurisdiction: [TODO: confirm governing law and jurisdiction before this page is treated as final] . You can reach us at hello@pilavtour.com.

What information we collect

When you use our website or contact us, we may collect:

• Information you provide directly: Your name, email address, phone number, country of residence, travel dates, number of travelers, dietary or accessibility requirements, and any other details you share in your inquiry.
• Technical information: Your IP address, browser type, device type, and the pages you visit on our site. We use this to keep the site working and to detect abuse.
• Marketing source information: If you arrive via a marketing link, we may record which campaign brought you to us, so we know which content is useful.

How we use it

• To respond to your inquiry and prepare a tour proposal.
• To prepare your tour, issue invoices, and arrange the local suppliers (transport, accommodation, guiding) who deliver parts of it on our instructions.
• To send you trip-related communications (confirmations, pre-trip information, follow-ups).
• To improve our website and content — we look at aggregated statistics about which pages help travelers and which don't.
• To prevent fraud, spam, and abuse.

We do not sell your personal information to anyone. We do not use your information for unrelated marketing without your consent.

Who we share it with

• Local service suppliers — accommodation, transport, and guiding providers we work with to deliver your trip. They act under our instructions and receive only what they need for their part of the service, not for their own marketing.
• Service providers we depend on to run our business, including Supabase (data hosting, EU), Vercel (website hosting and cookieless visit counts), Cloudflare (Turnstile bot protection on our forms), Resend (transactional email), Google Workspace (business email), Telegram (internal notifications), Google (Google Analytics 4 and Google Ads conversion measurement), and Plerdy (heatmaps and session replay) — the last three only if you accept the matching cookie category, see Cookies below. Each handles data under their own published privacy practices.
• Authorities if legally required (court order, tax investigation, fraud prevention).

Your rights (GDPR & similar)

If you are located in the European Union, the United Kingdom, California, or another jurisdiction with strong data-protection laws, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Delete your data (when no legal obligation requires us to keep it)
• Receive a copy of your data in a portable format
• Object to certain processing
• Withdraw consent at any time

To exercise any of these rights, email hello@pilavtour.com. We'll respond within 30 days.

How long we keep your data

Inquiry data is kept for up to 24 months in case you re-engage. Booking and tour-related data is kept for 7 years to comply with Uzbekistan tax and accounting law, then deleted. Technical logs are kept for up to 90 days.

Cookies

We use Google Analytics 4 cookies (Analytics category) and Google Ads conversion cookies (Marketing category), each only if you accept it — the scripts themselves aren't loaded until you choose “Accept All” or turn the category on. The Analytics category also covers Plerdy, which sets no cookies but records heatmaps and session replays of your visit, and likewise only loads once you accept it. Rejecting or ignoring the banner means none of it runs. Your cookie choice (which categories, when, and against which version of this policy) is recorded in your browser’s local storage, not a cookie, and you can change it at any time via “Cookie settings” in the footer.

Full details — cookie names, who sets them, how long they last — are on our Cookie policy page.

Children

Our services are intended for adults. We don't knowingly collect personal information from anyone under 16. Travelers under 18 are welcome on tours, but inquiries and bookings must be made by an adult parent or guardian.

Changes to this policy

We may update this policy as our business or applicable laws change. Material changes will be highlighted at the top of this page, and we'll update the “Last updated” date below.

Contact

For any privacy-related question, email hello@pilavtour.com. We read every message.

Last updated: September 12, 2026. See also our Cancellation policy and FAQ.