This notice is being reviewed before launch.
This notice explains what personal data DATAI Services LLC handles when you visit dais.uz, ask for a consultation, book a call or apply for a role, why we handle it, and what you can ask us to do with it.
Who we are
DATAI Services LLC (“DATAI”, “we”, “us”) is a data and AI engineering consultancy. Our engineering team works in Tashkent, Uzbekistan.
We decide why and how the personal data described here is used, so we are its controller. Where a service provider handles data for us, it acts on our instructions (see Who we share it with).
Laws that apply
We handle personal data in Uzbekistan, where the Law of the Republic of Uzbekistan “On Personal Data” (No. ZRU-547 of 2 July 2019) applies.
We also work with clients and candidates in the European Union, the United Kingdom, North America and the Gulf. When the EU General Data Protection Regulation (GDPR) or the UK GDPR applies to our use of your data, you have the rights those laws give you. Other laws may apply depending on where you live. This notice uses GDPR terms, such as “lawful basis”, because they describe our choices clearly.
What we collect
You don’t have to give us any personal data. We do need your name and email to answer a request, and a CV to review an application.
When you ask for a consultation
- Your name and business email.
- Anything else you choose to add: your company, the service you’re interested in, a project description and a preferred contact time.
- That you ticked the consent box, and when you sent the form.
- Technical details sent with the form, such as your IP address and browser type, which help us keep spam out.
When you book a call
Online booking opens soon. When it does, you’ll book through Calendly, a scheduling service. Calendly collects your name, email, the time you choose, your time zone and any notes you add, and passes them to us.
When you apply for a role or the internship
- Your full name and email, and the vacancy you’re applying for.
- Your CV, as a PDF or DOCX file of up to 10 MB, and whatever it contains, such as your work history and education.
- Any LinkedIn, GitHub or portfolio links and message you add.
- That you ticked the consent box, and when you applied.
Your CV doesn’t need sensitive details such as health information, religious beliefs or ID numbers, and we ask you to leave them out.
When we write to each other
If we exchange emails or messages after a request, booking or application, we keep them with it. If we hold a call, we keep our notes from it.
When you browse the site
- Our hosting provider records standard server logs: your IP address, the pages you request, your browser type, and the date and time.
- The site’s fonts come from Google Fonts. When a page loads, your browser requests them from Google’s servers, which gives Google your IP address and browser details. Google Fonts sets no cookies.
- Your browser stores your theme and motion choices, and the service you picked for the contact form, on your device. We don’t receive them. The Cookie Policy lists each item.
We don’t use analytics or advertising cookies today. When the site launches, we may add two services:
- Google Analytics 4, if enabled, to count visits and see which pages and forms people use. It would record the pages you view, your device and browser type, your approximate location based on your IP address, and how you reached the site. It would run only after you agree in a consent banner, where the law requires that.
- Cloudflare Turnstile, if enabled, to tell people from bots on our forms. It checks signals from your browser and device, such as your IP address and browser characteristics, and runs only on pages with a form.
We’ll update this notice and the Cookie Policy before either one goes live.
Why we use it
For each purpose, this is the lawful basis we rely on.
| Purpose | Lawful basis we rely on |
|---|---|
| Answer a request | Your consent, which you give by ticking the box on the form. We use the details to reply, arrange a call and discuss a possible project. |
| Run a booked call | Steps you ask us to take before a possible contract, and our legitimate interest in answering business enquiries. |
| Review an application | Your consent, which you give by ticking the box on the form, and steps you ask us to take before a possible employment or internship contract. |
| Work with your company | If your company becomes a client, our legitimate interest in managing that relationship, or the contract itself if you are a party to it. |
| Keep the site and forms secure | Our legitimate interest in running a working, secure website and keeping spam out. This covers server logs and, if enabled, Cloudflare Turnstile. |
| Measure site use | Your consent, given in the consent banner, if we enable Google Analytics 4. |
| Meet legal duties | Our legal obligations, for example to keep business records or answer a lawful request from an authority. |
Where we rely on consent, you can withdraw it at any time (see How to make a request). This doesn’t affect anything we did before you withdrew it. Where we rely on legitimate interests, we weigh them against your interests and rights, and you can object.
We don’t sell personal data or use it for advertising. We don’t make decisions about you, including hiring decisions, by automated means alone.
Who we share it with
Inside DATAI, only the people who handle requests, bookings or hiring can see your details.
We use service providers to run the site and our work. They act on our instructions under contracts that limit what they can do with your data:
- our hosting provider, which runs the website and the service that receives our forms, and keeps the server logs;
- Telegram Messenger, which we use for internal notifications of form submissions: when you send a form, its contents, and any CV you attach, are delivered to a private DATAI chat;
- our email provider, which carries our correspondence;
- Calendly, once online booking opens, for scheduling calls;
- Cloudflare, if we enable Turnstile on our forms;
- Google, which serves the site’s fonts, and Google Analytics 4 if we enable it.
Calendly, Cloudflare, Google and Telegram also handle some data for their own purposes, such as their own security, under their own privacy notices.
We share your data with others only when we need to:
- with professional advisers, such as lawyers and accountants, who are bound by confidentiality;
- with authorities, courts or regulators, when the law requires it;
- with a buyer or successor, if DATAI is reorganised or sold, under the same protections.
We don’t send your CV to a client without asking you first.
International transfers
Our team works mainly from Uzbekistan, so we usually access your data from there, wherever it is stored. Our service providers may store or process it in other countries, including EU member states and the United States.
Uzbekistan is outside the EU and the UK. When we receive personal data from the EU, the UK or another place with rules on international transfers, we protect it with safeguards those rules recognise. These include [the European Commission’s standard contractual clauses and the UK International Data Transfer Addendum]. You can ask us for a copy of the safeguards that apply to your data.
How long we keep it
We keep personal data only as long as we need it for the purposes above. Then we delete it or make it anonymous.
| Data | How long we keep it |
|---|---|
| Consultation requests | [24 months] after our last contact with you, together with related emails, bookings and call notes. |
| Client records | For the length of the relationship, then as long as tax, accounting and contract law require. |
| Applications and CVs | [12 months] after we decide on the role you applied for. If you’d like us to keep your CV longer for future roles, we’ll ask you first. If you join us, your application becomes part of your staff file. |
| Server logs | [30 days], unless we need them longer to look into a security incident. |
| Analytics data | 14 months, if we enable Google Analytics 4. |
If you ask us to delete your data sooner, we will, unless the law requires us to keep it.
How we protect it
The site uses HTTPS, so data travels encrypted. Only authorised staff can see form submissions and applications. CVs are kept in restricted storage with no public links, and we check uploaded files before anyone opens them. No system is completely secure, so if a breach affects your data, we’ll tell you and the relevant authority when the law requires it.
Your rights
Depending on where you live and the law that applies, you can ask us to:
- tell you whether we hold data about you, and give you a copy;
- correct data that is wrong or incomplete;
- delete your data;
- limit how we use it, for example while we check a complaint;
- stop using it where we rely on legitimate interests;
- send the data you gave us to you or another organisation in a common format;
- stop using it where we rely on your consent, by withdrawing that consent.
The law sets some limits. For example, we may need to keep records for tax purposes. If we can’t do what you ask, we’ll explain why.
How to make a request
For now, send your request through the form on our contact page. Start the project description with “Privacy request”, say what you’d like us to do, and use the email address you gave us before, so we can find your data.
We may ask you to confirm your identity before we act. Requests are usually free. We reply within one month. If a request is complex, or you send several, we may need up to two more months, and we’ll tell you within the first month.
Complaints
If you’re unhappy with how we handle your data, tell us first and we’ll try to put it right.
You can also complain to a data protection authority, usually the one where you live or work, or where you think the problem happened:
- in the United Kingdom, the Information Commissioner’s Office (ico.org.uk);
- in the European Union, your country’s authority, listed by the European Data Protection Board (edpb.europa.eu);
- in Uzbekistan, the state body authorised to oversee personal data.
Cookies and browser storage
The site sets no cookies. It stores three small preference items in your browser: your theme, your motion choice, and the service you picked on the way to the contact form. The Cookie Policy explains each one and how to clear them.
Children
Our site is meant for adults contacting us for a business or applying for work. We don’t knowingly collect personal data from children under 16. If you think a child has sent us their details, tell us through the contact form and we’ll delete them.
Changes to this notice
When we change this notice, we update the date at the top. If a change affects how we use data you’ve already given us, we’ll tell you directly where we can.