Draft document. The text was prepared for the service launch and is subject to legal review before publication as a binding version.
Version 2026-09-01
What data Rulla collects, why it is needed, who it is shared with and how to delete it. Prepared with regard to the Law of the Republic of Uzbekistan "On Personal Data" (ZRU-1125).
1.1. The personal data operator is Rulla LLC (Tashkent). The policy covers the Rulla web app, mobile apps and partner portal.
1.2. By using the service you confirm you have read the policy. Consent to processing is recorded at the first booking together with the document version.
2.1. Account data: phone number, name, email, date of birth, interface language.
2.2. Rental documents: driving licence details (the number is stored encrypted and shown masked), images of the passport, licence and a selfie — only if you uploaded them.
2.3. Trip data: bookings, payments, handover acts with photos, claims, reviews, support correspondence.
2.4. Technical data: session identifier, IP address, device and browser type, push subscription, search log.
3.1. Concluding and performing the rental agreement: choosing a car, booking, payment, pick-up and return, handling claims.
3.2. Legal compliance: accounting, fraud prevention, responses to authorised bodies.
3.3. Service improvement and communication: booking notifications, reminders and, with separate consent, marketing messages.
4.1. The Partner receives the Renter's name, phone and driving licence details only for a confirmed booking and only to perform it.
4.2. Payment providers receive the data required to process a payment. The Platform does not store card data.
4.3. SMS and push providers receive the phone number or device token and the message text. Data is never sold or shared for purposes unrelated to the service.
5.1. Data is stored on servers located in the Republic of Uzbekistan in line with localisation requirements.
5.2. Document images are kept in private storage; every access is logged with the initiator and reason. Licence numbers are encrypted.
5.3. Data is kept for the lifetime of the account and thereafter for the periods required by law for accounting and contractual records.
6.1. At any time you can export all your data as a single file in Profile → Data and privacy, change contact details, delete uploaded documents and withdraw marketing consent.
6.2. Deleting the account anonymises personal data; records of completed rentals are kept in anonymised form in accounting as required by law.
6.3. Personal data requests are accepted at help@rulla.uz and handled within the statutory periods.
7.1. The service uses strictly necessary cookies: interface language, display currency, a session identifier for search-funnel analysis and the sign-in session. No advertising trackers are used.
7.2. Operator contacts: Rulla LLC, Tashkent, help@rulla.uz, +998 71 200-00-00.
Questions about the documents: help@rulla.uz. Platform operator — Rulla LLC, Tashkent.