Privacy policy

This policy sets out how personal data is processed when you use the HEAD Academy site and learning platform.

Data is processed in accordance with the personal data legislation of the Republic of Uzbekistan. The requirement to store data on servers located in Uzbekistan needs separate legal review — this point must be settled before launch.

By using the site you confirm that you have read this policy.

Account data: name, phone number, email address, Telegram username, city and chosen interface language.

Learning data: which course you are enrolled on, which lessons you have completed, the projects you submit and the certificates issued to you.

Payment data: order amount, status, payment system and transaction identifier. We never see or store your bank card number — the card is handled only by the payment system.

Technical data: your IP address and browser information when a session is created, which is needed to keep your account secure.

Messages sent through the contact forms: name, contact detail and the message itself.

To create your account and let you sign in — your phone number doubles as a sign-in method.

To open course access, save your progress and issue certificates.

To process payments and keep accounting records.

To tell you about cohort start dates, schedules and technical changes.

To answer your questions and provide support.

We do not sell your data and do not pass it to advertising networks.

Payments: Payme and Click. They receive the order amount and identifier.

SMS: Eskiz.uz — your phone number is passed on so a confirmation code can be sent.

Telegram: used for internal notifications about new enquiries.

Hosting and database: the site and database run on cloud infrastructure.

Each service has its own privacy policy and receives only the data its task requires.

Account data is kept for as long as your account exists.

Payment and order records are kept for the period required by accounting legislation, even if the account is deleted.

Data is transmitted over an encrypted connection. Passwords are not stored in plain text. Access to the database is restricted.

No system is absolutely secure. If a security incident occurs, we will notify the users affected.

The right to request a copy of your data.

The right to correct inaccurate data — name, city and Telegram username you can edit yourself on the settings page in your dashboard.

The right to request deletion of your account and the data attached to it. Payment records required for accounting are retained until the statutory period expires.

The right to opt out of announcements. Messages required to deliver the service — a sign-in code, for example — are excepted.

Use the contact channels below to make a request. We reply within ten working days.

The site uses cookies to keep you signed in and to remember the language you chose. Without them the platform cannot be used.

You can disable cookies in your browser settings, but signing in will then not work.

This policy may be updated. A new version is published on this page and the date at the top is updated.

We will give separate notice of significant changes, using the contact details on your account.