The Personal Data Processing Policy (hereinafter referred to as the Policy) regulates the legal relations regarding the processing of personal data between Unicorn Soft LLC (TIN 01709202410127, address: Kyrgyz Republic, Bishkek, Igemberdiyeva St. 1a, 8th floor, office 803) and the User of the Unibook.ai/Uniwork website (application) (hereinafter referred to as the User).

The 'User' is considered a legally capable individual over the age of 18 who wishes to order the Company's services, leave a comment, register on the website, or perform other actions provided by the functionality of the Company's online resource.

The 'Site' or 'Company's Online Resource' refers to the Unibook.ai website and the Uniwork mobile application, including all associated domain levels, owned by the Company.

'Personal data' means any information relating to a directly or indirectly identified or identifiable individual.

'Processing of personal data' means any action (operation) or set of actions (operations) performed with personal data, whether automated or manual, including: collection, receipt, recording, systematization, accumulation, storage, updating (modification, change), retrieval, use, transfer (distribution, provision, access), anonymization, blocking, deletion, destruction of personal data.

This Policy defines the procedure for processing personal data of Users of the Unibook.ai website and Uniwork mobile application (hereinafter referred to as the Site), the conditions and principles of personal data processing, Users’ rights, Company’s obligations, and information on measures implemented to protect processed personal data.

This Policy applies to all personal data received by the Company from Users.

By entering their name, phone number, and, if necessary, email address in the designated field on the Site to request a consultation, make an order, or perform other actions provided by the Site’s functionality, and by clicking 'Send,' 'Request Consultation,' or other buttons, the User agrees to this Policy.

If the User does not agree with the terms of the Policy, they must immediately stop using the Site.

When using the Site's functionality, the User may provide the Company with the following personal data (the list and types depend on the specific functionality used): surname, first name, email address, contact phone number, user identification data (user ID).

By providing personal data, the User consents to its processing (up to revocation of consent), including collection, storage, anonymization, transfer to third parties in cases provided by the Policy, by the Company for providing advertising, informational services, Site functionality, and other purposes according to section 8 of this Policy. The Company processes personal data in accordance with the Law of the Kyrgyz Republic dated April 14, 2008, No. 58 'On Personal Information,' considering the EU General Data Protection Regulation (GDPR) of April 27, 2016, and other applicable legislation of the Kyrgyz Republic and internal regulatory acts.

The User’s consent to personal data processing is valid from the date of provision until the processing purposes are achieved or until the User withdraws consent, unless otherwise provided by law. The User may withdraw consent at any time in the manner established by this Policy.

If the User wishes to clarify personal data that is incomplete, inaccurate, or outdated, or wishes to withdraw consent, they must send an official request to the Company with the subject 'Clarify Personal Data' or 'Stop Personal Data Processing' to unicornsoftllc@gmail.com. The email must include the User’s email address and the corresponding request.

8. Purposes of personal data processing:

The Company uses the data provided by the User for the following purposes:

8.1. Registration and identification of the User on the Site, providing the User with full access to the Site’s functionality;

8.2. Further communication regarding the User’s request, including through third-party partners for fulfilling obligations under the User’s request, and consulting on the provision of services;

8.3. Creating an account and providing access to their account on partner sites;

8.4. Sending informational messages;

8.5. Advertising and promoting products/services, including based on personal preferences and settings;

8.6. Evaluating and analyzing the Site’s operation;

8.7. Advertising effectiveness analytics and statistical research based on anonymized User information;

8.8. Informing Users about promotions, discounts, and special offers via email or phone;

8.9. Conducting marketing research, including with third-party contractors (executors, consultants);

8.10. Communicating with partner banks regarding User loans or credit terms.

9. Accuracy of personal data

The Company does not verify User-provided data. Therefore, it assumes that the User:

9.1. Is legally capable. If the User is not legally capable, consent must be provided by a legal representative.

9.2. Provides accurate information about themselves (or the person represented). The User maintains personal data up to date.

9.3. Maintains provided personal data in an up-to-date manner.

9.4. Understands that information shared on the Site may become accessible to others and may be copied or distributed by other Users as provided by the Policy.

10. Principles of personal data processing

The Company processes personal data based on the following principles:

10.1. Legality;

10.2. Purpose limitation to achieve specific, predetermined legal goals;

10.3. No processing incompatible with the purposes of data collection or storage;

10.4. Compliance of content and volume of personal data with processing purposes;

10.5. Avoid processing data exceeding the necessary amount for the purposes;

10.6. Ensuring accuracy, sufficiency, and relevance of personal data in relation to processing purposes;

10.7. Deletion or anonymization of personal data to prevent disclosure upon achieving processing purposes, loss of necessity, or upon User’s request.

11. Personal data protection

The Company implements necessary and sufficient organizational and technical measures to prevent unauthorized access and other illegal actions with personal data.

12. Features of processing and transferring personal data to third parties

The Company considers the following when processing Users’ personal data:

12.1. Personal data processing is carried out using databases located in the Kyrgyz Republic.

12.2. Personal data processing can be automated or manual.

12.3. Except as explicitly stated in this Policy, the Company does not transfer Users’ personal data to third parties.

12.4. When necessary to fulfill obligations to Users, personal data may be transferred to third-party partners with User consent.

12.5. The Company and, if necessary, its partners are obliged to keep personal data confidential and not disclose or distribute it without User consent, unless otherwise provided by law or this Policy.

13. Personal data storage

13.1. Personal data is stored electronically, and if necessary, on physical carriers after collection to fulfill obligations to Users.

13.2. Personal data is stored for the time objectively necessary to fulfill obligations, determined by the following events (whichever occurs first):

• Until the User deletes their personal data via the personal account;
• Until the Company destroys personal data following a User’s request to delete data or withdraw consent;
• Until the User’s consent expires.

13.3. The Company may store personal data in anonymized form after fulfilling obligations to Users, except in cases of data deletion requests or consent withdrawal.

14. Transfer of personal data to third parties

14.1. When transferring personal data to third-party partners, the following conditions apply:

• Third-party partners must ensure confidentiality and not disclose or distribute Users’ personal data without consent;
• Third-party partners guarantee security measures: data protection, detection of unauthorized access, restricted access, control, and other legally required measures;
• Third-party partners are prohibited from transferring or distributing Users’ personal data.

14.2. Transfers required by law or to fulfill contractual obligations, or anonymized data transfers for analytics, marketing, or statistics, are not considered violations.

15. Use of cookies and other technologies

15.1. Cookies are data automatically sent to the Company during Site usage, including IP address, geolocation, browser, OS type, technical device characteristics, and access timestamps.

15.2. Cookies are used to remember User preferences and collect analytics. Site usage implies consent to cookies and analytics, and transfer to third parties.

15.3. IP address information and referrer site info are collected but not used to identify Users.

16. User rights regarding personal data

16.1. Users have the right to access information about their personal data processing. The Company provides this free of charge.

16.2. If data is incomplete, inaccurate, or outdated, the Company makes corrections within 7 business days and notifies the User.

16.3. If illegal processing or inconsistencies are confirmed, the Company deletes personal data within 7 business days and notifies the User.

17. Termination of personal data processing

17.1. The Company must stop processing personal data or ensure third-party partners do so in cases of:

• Unlawful processing detected;
• User withdraws consent;
• User requests deletion;
• Processing purposes are achieved.

17.2. The Company terminates processing and ensures deletion within 30 days, unless law provides otherwise.

17.3. If deletion is impossible within the specified time, data is blocked and deleted within 6 months or as required by law.

18. Company partners

The Company determines the list of third-party partners and informs Users by any available means, including publication on the Site.

19. Changes to the Privacy Policy

19.1. The Company may change the Policy at any time. The current version is posted on the Site.

19.2. Continued use of the Site after posting a new Policy version constitutes acceptance by the User.

19.3. If the User disagrees, they must immediately stop using the Site.

20. Final provisions

All questions regarding this Policy or personal data processing should be sent to the Company’s email: unicornsoftllc@gmail.com