This Privacy Policy (the “Policy”) has been developed by ONELAW Law Firm (the “Firm”) and applies to all personal data that the Firm may obtain concerning users, clients and visitors of www.onelaw.uz (the “Website”), as well as in connection with the provision of legal services, negotiations, the conclusion of agreements and interaction with other data subjects.

General Provisions

1.1. This Policy establishes the procedure for processing and protecting the personal data of individuals (the “Users”) provided to the Firm, including through the Website, electronic forms, correspondence and the conclusion of agreements, and in the course of advocacy, advisory and other professional activities.
1.2. The Firm protects the personal data it processes in accordance with the laws of the Republic of Uzbekistan, including the Law of the Republic of Uzbekistan “On Personal Data”, the Law of the Republic of Uzbekistan “On the Legal Profession”, international information-protection standards and the Firm’s internal procedures.
1.3. Personal data is processed in accordance with the principles of lawfulness, fairness, data minimisation, purpose limitation, accuracy, storage limitation and information security.
Purposes of Personal Data Processing
2.1. The Firm collects and processes personal data solely for the following purposes:
— entering into, performing and administering agreements for the provision of legal assistance;
— maintaining legal professional privilege and complying with other legal requirements;
— operating the Website, including registering user accounts, providing feedback and granting access to personalised materials;
— organising events, seminars, conferences and client meetings;
— maintaining statistics, analytics and feedback to improve the quality of legal services;
— performing obligations towards public authorities to the extent required by law;
— ensuring the information, legal and financial security of the Firm’s operations.

 

Categories of Personal Data

3.1. The Firm processes personal data provided:
— when contact forms on the Website are completed;
— through in-person, telephone, postal or electronic communications;
— when agreements for legal assistance or other contracts are concluded.
3.2. The personal data processed may include, without limitation:
— surname, first name and patronymic;
— date and place of birth;
— passport details and other identity information;
— identification numbers (PINFL, TIN, registration number of an advocate or representative);
— residential and registered addresses, telephone numbers and email address;
— information concerning the employer, profession and position;
— information concerning the interests represented, including in legal disputes;
— IP addresses, cookies, log files, browser and device information, login time and geolocation, provided that such data does not directly identify the User without additional information;
— any other information voluntarily provided or required within the relevant legal relationship.
3.3. The Firm may also process anonymised data collected through automated analytics and security services, cookies and similar technologies.

 

Legal Grounds for Processing

4.1. Personal data is processed where one or more of the following legal grounds applies:
— the written consent of the data subject;
— the conclusion and performance of a contract to which the data subject is a party;
— the need to comply with legal requirements;
— the pursuit of the Firm’s legitimate interests, including the protection of rights and freedoms before courts;
— processing required for the performance of professional duties in the course of legal practice.

 

Storage and Protection of Personal Data

5.1. Personal data is stored on servers located in the Republic of Uzbekistan and is processed using secure information-transmission channels.
5.2. The Firm applies a combination of technical, organisational and legal safeguards, including access restrictions, encryption, backup and multi-factor authentication.
5.3. Access to personal data is granted exclusively to employees and advocates who have received internal instructions, signed confidentiality undertakings and act in accordance with the rules of legal professional privilege.

 

Disclosure of Personal Data to Third Parties

6.1. The Firm does not disclose personal data to third parties except in the following cases:
— the data subject has given consent;
— disclosure is required by law, including in response to requests from public authorities;
— data is transferred to IT service providers and contractors subject to confidentiality and data-processing arrangements, provided that such contractors do not obtain access to information protected by legal professional privilege unless such access has been expressly authorised by the client;
— cross-border transfer is required under an agreement or at the client’s request.

 

Rights of Data Subjects

7.1. Data subjects have the right to:
— obtain information about the processing of their data, including its scope, — purposes, legal grounds and retention periods;
— request the amendment, correction or deletion of their data;
— withdraw previously given consent where consent is the legal basis for processing;
— challenge the Firm’s actions that violate applicable law in accordance with the established procedure.

7.2. All requests concerning personal data are considered within the periods prescribed by law and in accordance with the principles of business ethics and professional responsibility.

 

Legal Professional Privilege and Additional Safeguards

8.1. Personal and other information received by the Firm from clients in the course of performing instructions is protected in accordance with the legislation governing legal professional privilege.
8.2. A breach of legal professional privilege entails liability prescribed by law, including disciplinary, civil and criminal liability.
8.3. Information protected by legal professional privilege may not be disclosed without the client’s written consent, except where expressly provided by law.

 

Retention and Deletion of Data

9.1. Personal data is retained until the purposes of processing have been achieved or until the expiry of periods established by legislation, agreements with the client or other legal grounds.
9.2. Data may be deleted at the request of the data subject, upon withdrawal of consent or when the legal grounds for processing cease to exist, provided that deletion does not conflict with applicable law or the interests of justice.

 

Updates to this Policy

10.1. The Firm reserves the right to amend this Policy by publishing an updated version on the Website and thereby notifying Users.
10.2. All material amendments will be accompanied by an explanation and will take effect upon publication unless otherwise stated.

 

Contact Information

11.1. For matters relating to this Policy, you may contact the Firm using the following details: Address: 10/5 Yakub Kolas Street, Mirabad District, Tashkent, Republic of Uzbekistan. Email: info@onelaw.uz. Telephone: +998 93 550 39 93.
This Policy is published for transparency and information purposes, forms an integral part of the Terms of Use and enters into force upon publication.