Privacy Policy

PERSONAL DATA PROCESSING POLICY OF WOK & STREET 77

Version dated 15 August 2026

This Privacy and Personal Data Processing Policy of WOK & STREET 77 (hereinafter — the Policy) defines the procedure for the collection, processing, use, storage, transfer and protection of personal data of individuals when using the official websites wok.uz, street77.uz, the WOK and STREET 77 mobile applications and the related electronic services.

The operator of personal data is:

SMART DORADO LLC
TIN: 303 450 997
Address: Republic of Uzbekistan, Tashkent, Mirzo-Ulugbek district, Uzbekiston Ovozi street, 21.

This Policy is an integral part of the rules for using the WOK & STREET 77 Services and applies together with the effective Public Offer.

1. GENERAL PROVISIONS

1.1. The Company processes personal data in accordance with the legislation of the Republic of Uzbekistan, including the Law of the Republic of Uzbekistan “On Personal Data”.

1.2. The purpose of this Policy is to inform the User of:

• what personal data may be collected;

• for what purpose it is processed;

• how it is used;

• to whom it may be transferred;

• for what period it may be stored;

• what rights the User has;

• how the Company ensures the protection of personal data.

1.3. This Policy applies to:

• the official website wok.uz;

• the official website street77.uz;

• the WOK mobile application;

• the STREET 77 mobile application;

• the User’s Personal Account;

• the Order placement and fulfilment systems;

• the related electronic services of the Company.

1.4. By using the Service and providing personal data, the User confirms that they have read this Policy.

1.5. In cases where the legislation requires separate consent of the User, the Company obtains such consent through the functionality of the Service, an electronic document, the relevant confirmation by the User, or by any other means permitted by law.

2. KEY TERMS

2.1. User — an individual using the websites, applications or other Services of WOK & STREET 77.

2.2. Personal data — information relating to a specific individual or allowing such individual to be identified.

2.3. Processing of personal data — performance of one or more actions with personal data, including collection, systematisation, storage, modification, supplementation, use, provision, transfer, depersonalisation, blocking and destruction.

2.4. Operator — SMART DORADO LLC, which processes personal data independently and/or with the involvement of third parties in the cases provided for by law.

2.5. Service — the websites wok.uz, street77.uz, the WOK and STREET 77 mobile applications and the related electronic systems.

2.6. Order — the User’s order for WOK and/or STREET 77 products placed through the Service.

3. WHAT DATA MAY BE PROCESSED

Depending on which functions of the Service the User uses, the Company may process the following categories of data.

3.1. Contact and registration data

• mobile phone number;

• email address;

• the User’s name, if requested by the functionality of the Service;

• Account identifier;

• information related to Authorisation in the Service.

3.2. Data required to fulfil an Order

• delivery address;

• the selected restaurant;

• information on the composition of the Order;

• the cost of the Order;

• payment method;

• method of receiving the Order;

• time of placing the Order;

• Order history;

• the User’s comments on the Order or delivery;

• the number or other identifier of the Order.

3.3. Location data

Where the User grants the relevant permission, the Service may receive data on the geographic location of the User’s device.

Such data may be used to:

• determine the User’s current location;

• select the delivery address;

• determine the delivery zone;

• determine the nearest restaurant;

• display available restaurants;

• calculate delivery feasibility.

Geolocation is processed only where the User has granted the relevant permission.

The User may at any time disable access to geolocation through the settings of their device.

3.4. Technical data

When using the Service, the following may be processed automatically:

• IP address;

• device type and model;

• operating system version;

• application version;

• browser type;

• date and time of access to the Service;

• technical identifiers of the device or application;

• information on application failures and errors;

• data on the User’s actions within the Service;

• cookies and similar technologies when using the websites;

• other technical information necessary to ensure the functioning and security of the Service.

3.5. Enquiry data

When the User contacts the Support Service, the Company may process:

• phone number;

• email address;

• Order number;

• the text of the enquiry;

• photographs voluntarily provided by the User in connection with a claim;

• the history of interaction with the Support Service;

• other data voluntarily provided by the User for consideration of the enquiry.

3.6. Payment data

When an Order is paid for, the Company may receive information confirming the payment, including:

• the payment amount;

• the date and time;

• the transaction identifier;

• the payment status;

• the payment method.

If bank details are entered directly in the interface of a bank or payment organisation, the Company does not receive or store the full bank card number, the CVV/CVC code or other secret payment details, unless otherwise provided by the technical architecture of the specific payment service.

4. PURPOSES OF PERSONAL DATA PROCESSING

The Company processes personal data solely for specified and lawful purposes.

4.1. Registration and Authorisation

The data is used to:

• create an Account;

• identify the User;

• confirm the mobile phone number;

• provide access to the Personal Account;

• ensure the security of the Account.

4.2. Placement and fulfilment of Orders

The data is used to:

• place an Order;

• transfer the Order to the relevant restaurant;

• prepare the Products;

• arrange delivery or Self-pickup;

• contact the User regarding the Order;

• confirm payment;

• process refunds;

• provide electronic or fiscal documents.

4.3. Arrangement of delivery

The data may be used to:

• determine the delivery address;

• transfer the order to a partner delivery service;

• enable the courier to contact the User;

• track the delivery status;

• resolve disputes related to delivery.

4.4. Operation of the Support Service

The data is used to:

• consider enquiries;

• consider claims;

• verify the quality of Orders;

• refund funds;

• resolve disputes;

• improve the quality of service.

4.5. Ensuring security

The data may be used to:

• prevent fraud;

• detect abuse;

• prevent unauthorised access;

• protect information systems;

• investigate technical incidents;

• prevent improper use of promo codes and promotions.

4.6. Improvement of the Service

Technical and statistical data may be used to:

• analyse the performance of the websites and applications;

• identify technical errors;

• improve the interface;

• analyse the load on the Service;

• improve Order placement processes;

• develop new features.

For statistical and analytical purposes, the Company uses depersonalised or aggregated data where possible.

4.7. Compliance with legal requirements

Personal data may be processed where this is necessary for:

• compliance with the legislation of the Republic of Uzbekistan;

• accounting and tax records;

• compliance with lawful requests of state authorities;

• protection of the rights and legitimate interests of the Company, the Seller or the User.

5. ADVERTISING AND MARKETING MESSAGES

5.1. The Company may send Users information about promotions, special offers, new dishes, restaurants and other marketing activities only in the manner permitted by the legislation of the Republic of Uzbekistan.

5.2. If separate consent of the User is required for sending advertising messages, such consent is requested separately.

5.3. The User may opt out of advertising messages:

• through the functionality of the Service;

• through the link or other opt-out function, if contained in the message;

• by changing the application settings;

• by contacting the Support Service;

• by email to the Company.

5.4. Opting out of advertising messages does not prevent the sending of service messages necessary for the fulfilment of an Order, Authorisation, payment, delivery, refund or ensuring the security of the Account.

6. COOKIES AND SIMILAR TECHNOLOGIES

6.1. The WOK & STREET 77 websites may use cookies and similar technologies.

6.2. Cookies may be used to:

• ensure the operability of the website;

• save user settings;

• carry out Authorisation;

• ensure security;

• analyse use of the Service;

• improve the user experience.

6.3. The User may restrict or delete cookies through the settings of the browser used.

Disabling certain cookies may result in limitation of some website functions.

7. TRANSFER OF PERSONAL DATA TO THIRD PARTIES

7.1. The Company does not sell Users’ personal data to third parties.

7.2. Personal data may be transferred to third parties only in cases necessary to achieve the purposes of processing, fulfil an Order or comply with legal requirements.

Such parties may include:

7.2.1. WOK & STREET 77 sellers and restaurants

If a particular Order is fulfilled by a legal entity other than the Operator of the Service, information necessary for the following may be transferred to it:

• preparation of the Order;

• its handover;

• delivery;

• issuance of a fiscal receipt;

• consideration of claims.

7.2.2. Partner delivery services

The following may be transferred to a delivery partner:

• the name or designation of the recipient;

• phone number;

• delivery address;

• geolocation or coordinates of the delivery point, where necessary;

• Order number;

• comment on the address;

• other information necessary for delivery.

7.2.3. Banks and payment organisations

Information is transferred to them to the extent necessary for:

• accepting payment;

• confirming payment;

• refunding funds;

• preventing fraud.

7.2.4. IT contractors and technical service providers

The Company may engage third parties for:

• hosting;

• data storage;

• support of the application;

• sending SMS;

• push notifications;

• email;

• technical analytics;

• error diagnostics;

• information security.

Transfer of data to such parties is permitted only to the extent necessary to provide the relevant services and subject to compliance with applicable legal requirements.

7.2.5. State authorities

Personal data may be provided to state authorities in the cases and in the manner expressly provided for by the legislation of the Republic of Uzbekistan.

8. TRANSFER OF DATA TO DELIVERY PARTNERS

8.1. To fulfil Orders, the Company uses a mixed partner delivery model.

8.2. The specific delivery service may be determined automatically based on courier availability, the delivery district, service workload and other operational factors.

8.3. The User understands that without transferring the address and contact details to the partner service, fulfilment of an Order with Delivery may be impossible.

8.4. The delivery partner is obliged to use the data received solely for carrying out delivery and related operations in accordance with the legislation and the terms of interaction with the Company.

9. CROSS-BORDER TRANSFER AND STORAGE OF DATA

9.1. The Company arranges the storage and processing of personal data in accordance with the requirements of the legislation of the Republic of Uzbekistan.

9.2. Personal data subject to mandatory storage in the territory of the Republic of Uzbekistan is stored in the territory of the Republic of Uzbekistan in the cases and to the extent established by law.

9.3. Other personal data may be stored or processed using information systems and technical services located outside the Republic of Uzbekistan only subject to compliance with the requirements of the legislation of the Republic of Uzbekistan.

9.4. Cross-border transfer is carried out where the conditions provided for by law and the necessary protection measures are in place.

9.5. When selecting foreign IT service providers, the Company takes reasonable measures to ensure proper protection of personal data and compliance with applicable legal requirements.

10. PERSONAL DATA RETENTION PERIODS

10.1. Personal data is stored no longer than is necessary to achieve the purposes of its processing, except where longer storage is required by law.

10.2. The retention period may depend on the category of data and the purpose of its processing.

10.3. Data related to Orders, payments and accounting may be stored for the periods established by tax, accounting and other applicable legislation.

10.4. Account data may be stored for the period of the User’s use of the Service and, after use ceases, for the period necessary to fulfil the remaining obligations and legal requirements.

10.5. Once the purposes of processing have been achieved, personal data is subject to destruction or depersonalisation, unless there are lawful grounds for its further storage.

11. PROTECTION OF PERSONAL DATA

11.1. The Company takes the necessary legal, organisational and technical measures to protect personal data.

11.2. Such measures are aimed at protecting data from:

• unlawful access;

• accidental access;

• loss;

• alteration;

• destruction;

• copying;

• disclosure;

• dissemination;

• other unlawful actions.

11.3. Access to personal data is granted only to those employees and contractors who require it to perform their respective duties.

11.4. Persons who have access to personal data are obliged to comply with confidentiality requirements.

11.5. The Company may improve the organisational and technical measures used, taking into account the development of technology and the nature of existing risks.

12. USER RIGHTS

The User has the rights provided for by the legislation of the Republic of Uzbekistan, including the right to:

12.1. receive information on the processing of their personal data;

12.2. find out the composition of the personal data being processed and the purposes of its processing;

12.3. request correction or supplementation of incomplete, inaccurate or outdated data;

12.4. request temporary suspension of data processing in the cases provided for by law;

12.5. request destruction of personal data in the cases provided for by law;

12.6. withdraw previously given consent to the processing of personal data, if the processing is carried out on the basis of such consent;

12.7. opt out of advertising and marketing messages;

12.8. receive information on the terms of transfer of and provision of access to personal data;

12.9. apply to the authorised state body or a court on matters of protection of their rights.

13. WITHDRAWAL OF CONSENT AND DELETION OF DATA

13.1. The User may withdraw consent to the processing of personal data in cases where the processing is based on such consent.

13.2. A request may be sent to:

Email: street77wokuzb@gmail.com

or through the available functionality of the relevant application or website.

13.3. To prevent unauthorised deletion or modification of data, the Company may take reasonable measures to verify the identity of the applicant.

13.4. Withdrawal of consent does not affect the lawfulness of processing carried out before the Company received the relevant withdrawal.

13.5. Upon receipt of a lawful request, the Company ceases processing and/or destroys the relevant data, unless there is another lawful ground for its further processing or storage.

13.6. Certain data may be retained after deletion of the Account if its storage is necessary for:

• compliance with legal requirements;

• accounting or tax records;

• consideration of previously raised claims;

• protection of the rights and legitimate interests of the parties;

• compliance with other mandatory requirements.

14. DELETION OF THE ACCOUNT

14.1. The User may initiate deletion of their Account through the functionality of the application, if such a function is provided, or by contacting:

street77wokuzb@gmail.com

14.2. Deletion of the Account may result in the loss of further access to:

• Order history;

• saved addresses;

• personal settings;

• other functions related to the Account.

14.3. Deletion of the Account does not mean automatic destruction of information which the Company is obliged to store in accordance with the legislation.

15. DATA OF MINORS

15.1. The Service is intended primarily for persons capable of independently entering into transactions in accordance with the legislation of the Republic of Uzbekistan.

15.2. The Company does not intentionally collect personal data of minors beyond the extent necessary for the functioning of the Service.

15.3. If the legislation requires the consent of a legal representative for the processing of a minor’s data, processing is carried out where such consent is available.

16. THIRD-PARTY WEBSITES AND SERVICES

16.1. The Service may contain links to third-party websites, applications and services.

16.2. This Policy does not govern the processing of data by such independent third parties.

16.3. When following a link to a third-party resource, the User is advised to read the privacy policy of the relevant service.

17. AMENDMENTS TO THE POLICY

17.1. The Company may amend this Policy taking into account changes in legislation, the functionality of the Service, the technologies used and business processes.

17.2. The current version of the Policy is posted:

• on the wok.uz website;

• on the street77.uz website;

• in the WOK and STREET 77 mobile applications or via a link therein.

17.3. A new version enters into force on the date of its publication or on another date expressly specified in the new version.

17.4. If the changes materially affect the rights of Users or the ways in which their data is processed, the Company may additionally notify Users through the Service, a push notification, email or any other available means.

18. ENQUIRIES ON PERSONAL DATA MATTERS

To obtain information on the processing of personal data, or to send requests for modification, suspension of processing, deletion of data or withdrawal of consent, the User may contact:

Email:
street77wokuzb@gmail.com

Support Service phone numbers:

WOK: +998 71 200 73 73

STREET 77: +998 71 200 86 86

19. OPERATOR DETAILS

SMART DORADO LLC

TIN: 303 450 997

Address: Republic of Uzbekistan, Tashkent, Mirzo-Ulugbek district, Uzbekiston Ovozi street, 21

Official websites:

wok.uz

street77.uz

Email:

street77wokuzb@gmail.com

Phone numbers:

WOK: +998 71 200 73 73

STREET 77: +998 71 200 86 86