PERSONAL DATA PROCESSING POLICY

1. OPERATOR AND CONTACT DETAILS

Owner and operator of the personal data base: PERCEPTION VALUE Limited Liability Company.
TIN: 304391492.
Address: Kokand, 98-V Farogat street.
Additional office: Tashkent, 1B Beruniy street, Olmazor district.
Phone: +998 91 699 09 07, +998 90 565 31 80.
Email: perceptionvalue@gmail.com.
Responsible for privacy matters: the company director. Requests are accepted on the phone numbers and email address above.

2. WHAT DATA IS COLLECTED AND WHERE IT COMES FROM

Directly from you:

• full name, phone number, email address, organisation name;
• the type, address and description of the property to be valued, the purpose of the valuation, the deadline;
• the text of your enquiry and any subsequent correspondence.

From the documents you upload or provide:

• the details of the title document and the cadastral document;
• information from the technical passport and other technical documents;
• photographs of the property;
• information about other people appearing in those documents (owner, representative, owner of adjoining property).

If the enquiry is made through a representative: the representative's full name, contact details and the details of the document confirming their authority.

Technical data: the website server records requests (IP address, time of the request, browser type). This data is used for website security and for identifying faults.

Please do not send us data we do not need. Passport copies and biometric, medical, genetic or other special category data are neither requested nor required through the website. If an identity document is necessary for a particular engagement, it is requested at the contract stage, separately and only to the extent necessary.

3. FOR WHAT PURPOSE AND ON WHAT BASIS IT IS PROCESSED

Purpose: to respond to your enquiry and agree the price and the deadline.
Basis: the enquiry you sent and steps preceding the conclusion of a contract.

Purpose: to prepare and perform the contract.
Basis: the contract concluded with you.

Purpose: to prepare and sign the valuation report and to keep the documents supporting it.
Basis: the requirements of the legislation on valuation activity, and the contract.

Purpose: to process the data sent by uploading documents.
Basis: the consent you give in the form.

Purpose: to respond to a lawful request from an authorised state body.
Basis: a requirement of law.

Consent is not used as the sole basis for providing the service: processing under the contract and processing required by law do not depend on consent.

4. WHAT OPERATIONS ARE CARRIED OUT

Data is collected, recorded, organised, stored, kept accurate, used within the scope of the service, disclosed within permitted limits where necessary, blocked, and destroyed once its retention period ends.

No automated decision-making or profiling is used. The valuation conclusion is reached and signed by the appraiser personally.

5. WHO USES THE DATA AND TO WHOM IT IS DISCLOSED

Company employees: only within the scope of their duties and to the extent necessary. Each employee is granted access according to their role.

Service providers under contract: server hosting and technical support, and the electronic signature infrastructure. They process the data only on our instructions, under a contract and a confidentiality clause, and do not use it for their own purposes.

Communication services you choose yourself: email (Gmail) and Telegram. These services operate not on our instructions but under their own terms of use, and we do not control their processing. When you contact us through these services yourself, your correspondence passes through their systems; see section 9 for details.

Professional partners: where the work requires it and with your knowledge, for example another valuation organisation carrying out an expert review of a report.

State bodies: in the cases provided for by law, upon an official written request.

Apart from this, your data is not disclosed to anyone else and is not sold.

6. HOW LONG IT IS KEPT AND WHEN IT IS DESTROYED

An enquiry that did not become a contract, that is, a rejected enquiry, and the files attached to it: 1 year from the day the enquiry was rejected. After that period the files are deleted and only the date and the general subject of the enquiry remain.

The contract, the valuation report and the documents supporting it: for the period set by the legislation on valuation activity. The exact period is stated in the contract.

Evidence that consent was given, and service correspondence: 3 years.

Server technical records and backup copies: 6 months.

Data whose period has expired is deleted from the live system; from backup copies it drops out as the backup cycle rotates, that is, within the 6 months stated above. In addition, so that the system can still be restored if needed, the most recent 3 restore copies are kept even if they are older than 6 months.

Withdrawing your consent stops the processing that was carried out on the basis of consent, but is not a ground for deleting documents that must be kept by law. In such cases the data is retained but is not used for any other purpose.

7. YOUR RIGHTS

You have the right to request:

• confirmation that your data is being processed, and its basis, purposes and methods;
• what data is held and where it was obtained from;
• to whom it has been or may be disclosed;
• the retention period;
• information about any transfer of your data abroad, if one has taken place.

You also have the right:

• to have incorrect or incomplete data corrected and completed;
• where there is no lawful basis, to have the processing blocked or the data destroyed;
• to withdraw your consent at any time, in the form in which it was given or in written or electronic form;
• to complain to the authorised state body or to a court.

How to apply: contact us on the phone number or email address above. So that data is not disclosed to anyone else, we verify your identity: the contact details you write from are compared with the data we hold and, if necessary, additional confirmation is requested. We confirm that your request has been received and communicate the outcome in written or electronic form.

Correction of incorrect data is carried out no later than 3 days after your request. Other requests are considered within the period set by law.

8. HOW CONSENT IS OBTAINED

In the enquiry form the consent box is not ticked in advance; you tick it yourself. Next to the box are a link to this policy, its version and its date. Consent is given only for the processing of the documents being sent and of personal data for valuation purposes.

If consent is not ticked, document uploads are not accepted.

The system records the version of the consent text, the time consent was given and the number of the relevant enquiry. This record is kept to confirm that consent was given.

To withdraw consent it is enough to contact us on the phone number or email address above.

9. WHERE THE DATA IS STORED

The website and the internal system are hosted on a server located in the territory of the Republic of Uzbekistan. Data and files sent through the enquiry form are stored on that server and are not transferred to third countries.

The enquiry form does not send data by email: the form writes it directly to the company's server.

If you write to us yourself at perceptionvalue@gmail.com, that correspondence passes through Google's service and may be stored on its servers, including outside Uzbekistan. In that case the content of the correspondence is processed under Google's terms of service. Likewise, the website provides links to a Telegram bot and channel. If you write through Telegram, your correspondence passes through Telegram's service and may be stored on its servers, including outside Uzbekistan. Data reaches both Telegram and email only when you make contact yourself: the website sends nothing to these services.

If you do not want your data transferred abroad, contact us by phone or through the enquiry form on the website.

Operations involving electronic signatures are carried out within Uzbekistan's national electronic signature infrastructure.

10. STATE REGISTER

Under Article 20 of the Law "On Personal Data" (as amended by Law No. ZRU-1125 of 26 March 2026), the state register of personal data bases registers those data bases which, in accordance with Article 27¹, part two, are subject to mandatory storage in the territory of the Republic of Uzbekistan: biometric and genetic data, and the data of users of telecommunications operators' services. The company neither collects nor processes such data, and therefore registration of the company's data base in the state register is not required. Should the legislation change, this section will be updated.

11. SECURITY, CHANGES AND DATE

The automatic deletion cycles in section 6 above and the consent record under section 8 apply from the day this policy takes effect.

Protective measures: access to data is granted only to the employees who need it for their duties, through a personal login and password; passwords are not stored in the clear; the website works over an encrypted connection; documents are kept only in the internal system; employees undertake confidentiality obligations; significant actions in the system are logged.

This policy is approved by the head of the company. When it is updated, the version number and the date change and the text on the website is updated. Where a change is significant in substance, a separate notice is given on the website page.

Current version: 4.4, effective date: 19.10.2026 (the day the new website is launched).