Privacy Policy

The data operator is Ozodjon Erkinovich Yuldashev, individual entrepreneur, registered address: Sat-Tepo street, Samarkand, Samarkand region, Republic of Uzbekistan (the “Centre”).

Website: thecooperate.uz. Data protection enquiries: thecooperate.uz@gmail.com, phone +998 95 044 95 10, Telegram @the_cooperate.

The Centre does not process biometric or genetic data, nor data of subscribers of telecom operators — the categories Article 27¹ of the Law on Personal Data requires to be stored inside Uzbekistan. The database is nevertheless hosted in Uzbekistan.

We ask only for what we need in order to reach you and teach you. The site collects nothing beyond this.

• Enrolment request: name, phone number, age (if you provide it), the direction you are interested in, your level, preferred time, a free-text comment, and the site language.
• Student record: full name, phone, email, direction, start and end dates, status, and the teacher's internal notes.
• Certificate: full name, course title, issue date and completion date, certificate number.
• Verification log: the number that was looked up, the outcome, the timestamp, and a salted hash of the IP address. The IP address itself is not stored.
• Technical cookies: your chosen language and, for staff, the admin login session.

We do not collect passport data, national ID numbers, health information or biometrics, and we never ask for payment details through the website.

• Handling your request and contacting you — based on the consent you give by ticking the box on the form.
• Running the course and keeping a student record — to perform the tutoring services agreement.
• Issuing a certificate and making it verifiable — to perform the contract, and on the separate consent described in section 4.
• Verification logging and rate limiting — to protect the site from abuse and from brute-forcing certificate numbers.

We do not use your data for marketing mailshots and we do not pass it to third parties for their marketing.

The whole point of our certificate is that anyone can check it: an employer, a university, anyone at all. So the verification page, when given a certificate number, publicly displays the graduate's full name, the course title, the issue and completion dates, the certificate status, and the name of the centre.

That information is available to everyone who holds the certificate number or the QR code printed on it. You receive the number together with the document and decide who to show it to.

A certificate is only issued after you consent to this publication. If you would rather your name and course were not publicly verifiable, tell us — the certificate will not be issued, or will be revoked. Once revoked, the verification page no longer confirms the document.

None of your other data — phone, email, age, notes — ever appears on the verification page.

We do not sell personal data and do not hand it to third parties for their own purposes. It is handled by our staff and by the following service providers acting on our instructions:

• The hosting provider running the site and the database (Узбекистан, г. Ташкент (Eskiz IT Company)).
• The domain registrar and DNS provider — they see only technical request metadata, never form contents.
• If the AI assistant is enabled on the site: the text you type into the assistant window is sent to Anthropic (USA) to generate a reply. Do not type personal data into that window — it is meant for questions about courses. Enrolment forms are never sent to that service.

Data may be disclosed to state authorities where the law requires it and a properly issued request has been received.

The technical facilities holding the personal data are physically located in the Republic of Uzbekistan.

Traffic between your device and the site is encrypted (HTTPS).

• Enrolment requests that did not lead to study — no more than 12 months from submission, then deleted automatically.
• Student records — for the duration of the course and 3 years afterwards.
• Issued certificate records — indefinitely. Otherwise the verification that the certificate exists for would stop working. Revoked certificates are kept too, so that verification can honestly report their status.
• Verification log — 12 months.

Under the Law on Personal Data you have the right to:

• find out what data of yours we process;
• have inaccurate or incomplete data corrected;
• withdraw your consent;
• have your data deleted where there is no longer a lawful basis to keep it;
• complain to the competent state authority or to a court.

To exercise any of these, write to thecooperate.uz@gmail.com or call +998 95 044 95 10. We will respond within the period set by law. To make sure nobody obtains someone else's data, we may ask you to confirm your identity.

A note on certificates: withdrawing consent means revoking the certificate — the record of issuance is retained, but verification will no longer confirm the document as valid.

We teach school-age students as well. If the student is under 18, the enrolment request and the consent to data processing are given by a parent or other legal guardian, and the contract is concluded with them.

The site uses only technical cookies it cannot work without: remembering your chosen language, and the login session for staff. We run no advertising or analytics trackers and send no behavioural data to ad networks.

You can delete these cookies in your browser — the site will keep working, you will just have to pick a language again.

• The connection is encrypted (HTTPS) and a strict Content Security Policy is enforced.
• Staff passwords are stored only as irreversible hashes.
• Only authorised staff can reach the admin panel; sign-in is protected and attempts are limited.
• Actions on student records and certificates are written to an audit log.
• The verification log stores a salted hash of the IP address, not the address itself.
• The database is backed up daily.

If this document changes, the new edition is published on this page with its date. We will point out material changes the next time we are in touch.