Privacy Policy

Last updated: July 30, 2026

1. Who processes the data

Data submitted on this site is received by Dr. Oybek Usmanov Clinic (Tashkent, Uzbekistan) — referred to below as "the clinic," "we." For any question about personal data, contact us at info@oybekusmanov.uz or by phone at +998 97 421 11 12.

2. What data we collect

Through the request form on the site — only what you enter yourself:

• your name or preferred form of address;
• phone number;
• the procedure you're interested in (chosen from a list);
• a comment, if you write one — for example, your city or a good time to call.

The date and time of submission are saved along with the request — this is so we don't lose track of who we haven't replied to yet.

If you message us on WhatsApp, we see your number, your profile name, and the text of the conversation. That conversation happens on WhatsApp and is governed by that service's own rules.

We don't ask for medical information on the site. Diagnoses, the stage of hair loss, photos, and medical history are discussed at the consultation, not through the form. If you do include such details in a comment or on WhatsApp, we treat it as confidential medical information and use it for nothing beyond your own consultation.

3. Why we need this data

• to call or message you back and answer your question;
• to schedule a consultation date and send a reminder;
• to prepare a cost estimate for your specific case;
• if you're coming from another country — to help organize the trip.

We don't send unsolicited marketing, sell our database, or share contacts with other clinics, intermediaries, or ad platforms.

4. Legal basis

Based on your consent: you enter the data yourself and click submit. The notice under the form says this explicitly. Consent can be withdrawn at any time — see section 7. We follow the Law of the Republic of Uzbekistan "On Personal Data" (ZRU-547, dated July 2, 2019).

5. Who can see the data

Within the clinic — the doctor and the staff member who contacts you. Beyond that, the request passes through the technical services it needs to actually reach us:

• the clinic's request-processing server — receives the form and routes it onward;
• Telegram — notifies staff of a new request;
• Google Sheets — a log of requests, so none get lost;
• Netlify — the site's hosting; its servers see the request's technical data (IP address, browser type) at the level normal for any web server.

Google's, Telegram's, and Netlify's servers are located outside Uzbekistan, so request data is transmitted to and stored partly abroad. Submitting the form means you agree to this. If this matters to you, simply call or message us directly — a phone call or WhatsApp conversation doesn't involve these services.

Separately: we're required to disclose data if officially compelled by law — at the request of a court or an authorized government body.

6. How long we keep it

Requests — up to three years from the last contact: people return to the question of a transplant a year or more later, and it matters to us to remember what was already discussed. If you become a patient, medical records are kept for the periods required for medical documentation. We delete earlier on request.

7. Your rights

At any time, you can:

• find out what data we have about you and get a copy;
• correct an inaccuracy — for example, a mistyped number;
• withdraw consent and request deletion;
• opt out of calls and messages from us.

It's enough to write to info@oybekusmanov.uz or tell us on WhatsApp. We reply within a working week, usually the same day. No formal request or explanation is required.

If you're in the European Union, you have additional rights under the GDPR, including the right to data portability and the right to complain to your country's supervisory authority. We handle such requests the same way, through the same contacts.

8. Cookies and analytics

The site uses Google Analytics, Meta Pixel, and Yandex Metrica to understand how many people visit and which ads bring in requests. Tracking doesn't turn on by itself: on your first visit you see a banner with "Accept" or "Decline," and the scripts only load after your explicit consent. If you decline or close the banner, nothing loads and your visit isn't recorded in the statistics.

Google Analytics, Meta Pixel, and Yandex Metrica receive anonymized technical data about the visit (which pages you viewed, where you came from, device type) without a name, phone number, or other personal information from the request form — that data follows a separate path, described in section 5. We've enabled IP-anonymization in Google Analytics.

9. Children

This site is addressed to adults. We don't intentionally collect data from anyone under 18; a request on behalf of a minor is submitted by a parent or legal guardian, and treatment is discussed with them.

10. How we protect data

The site runs on HTTPS, access to the request list is limited to the doctor and staff, and sign-in to our working services is protected by a password and two-factor authentication. Absolute security doesn't exist on the internet and we won't claim otherwise — but the amount of data we collect is deliberately kept to a minimum: less data means less risk.

11. Changes to this policy

If this policy changes, we'll update the date at the top. Material changes — such as new analytics or a new data recipient — are made before they take effect, not after.