Privacy Policy

1.What this policy covers

The company responsible for processing your data is MK EXPRESS UNITED LLC (referred to here as "MK Express" or "we"). We have worked the China — Uzbekistan route since 2021, and our head office is in Tashkent.

This policy applies equally to three things: the website at https://mkexpress.uz; the mk_express mobile app on Google Play and the App Store; and the delivery service itself — receiving your parcel at our warehouse in China, transporting it, clearing customs and handing it over at a branch or through a courier.

As long as you use our services, this policy applies to you. Chinese marketplaces (Taobao, 1688, Pinduoduo, Poizon), payment systems, app stores and other third-party services have their own privacy policies — we are not responsible for how they handle data.

2.What we collect from website visitors

You do not need to register to use the website: there is no account to create, no document to upload and no card details to enter. Some information is still collected so the site can work.

• Tracking number — the number you type is sent to our system as a lookup so we can show the parcel status. No account is needed for this check, and we do not know who entered the number.
• Technical data — IP address, device and operating system type, browser, the pages you open, the date and time of your visit, and the time spent on those pages. This is collected automatically by the analytics services described below.
• Maps — the base layer of the branch map is loaded into your browser from CARTO (basemaps.cartocdn.com), which sees your IP address when it does. The map on the website does not ask for your location.
• Information you send us yourself — if you message us on Telegram or call us, that includes the text of your request and your contact details.
• The website does not accept online payments, so no card details are ever entered on it.

3.What we collect from app users and customers

The mobile app and the delivery service need more information: a parcel has to be linked to you personally and cleared through customs. Below we state plainly what each item is for.

• Phone number and name — registration works by phone number, confirmed with a one-time code sent by SMS. The number lets us identify you and send service messages.
• Passport or ID card: series, number and a photo of the document. This serves exactly two purposes — clearing your parcel with the customs authorities of Uzbekistan, and keeping track of the duty-free allowance for individuals of up to 200 US dollars per month. Without customs clearance a parcel cannot be released to you.
• Shipment data — tracking numbers, item name and weight, the route, current status and stage history, and payment status.
• Your chosen branch — so we know where you collect your parcel. If you choose courier delivery, we additionally take the delivery address and a contact number.
• A device token for push notifications (Firebase Cloud Messaging) is sent to our server. The token is used only to notify you about parcel status changes and other service messages.
• Location — we request it only once, during registration, and only when you tap the button yourself, so the app can suggest the nearest branch. We do not track your location in the background, do not use it for advertising, recommendations or personalised content, and do not pass it to third parties for those purposes. You can revoke the location permission at any time in your phone settings — after that no part of the app, including its analytics, can obtain your location.
• Camera and gallery access — to upload the photo of your passport and to send images in the support chat. You can revoke the permission at any time in your phone settings.
• Phone call permission — so a button in the app can dial your branch. We do not record calls and we do not read your call history.
• Support conversations — the text and images you send in chat are kept to resolve your request and to check service quality.
• Technical and diagnostic data — IP address, device type and operating system version, app version, the screens you open and error reports, so the app keeps working and we can find failures. These events are gathered by the analytics built into the app; see the section below.
• If you place an order at a branch or through our admin, the same passport, contact and shipment details are collected and entered into the same system, even when you do not use the app.
• Contact — we also use your phone number and push token for important service messages, required notices and, from time to time, news and promotions. You can switch notifications off with the toggle in the app's notification settings or in your phone settings; there is currently no separate switch for promotional messages only.

4.Analytics and cookies

Two analytics services run on the website. They show us how pages are opened, which section is awkward to use and where errors happen. Both store cookies in your browser.

Google Analytics 4 (measurement ID G-TEK1CCL2G7) — general statistics: which pages were opened, the date and time of the visit, approximate region, device and browser type, and how you arrived at the site.

Yandex Metrica (counter 111349489) — the same kind of statistics, plus extra features that are switched on. Session recording (Webvisor) records what you do on the page: clicks, scrolling and mouse movement are captured and the recording can be replayed later. Click mapping collects where on the page people click, and link tracking records which links you followed.

There is currently no separate switch on our website to turn analytics off. So here, openly, are the ways to limit this collection:

• Browser settings — block or clear cookies, turn on tracking protection, or refuse cookie permission for the site.
• Tracker and ad blocking extensions, as well as the protection built into your browser.
• The providers' own opt-out tools — Google Analytics offers an official browser add-on, and Yandex Metrica has an opt-out page on its own site.
• The mobile app is a separate case: the website counters do not run inside it, but the app itself has Yandex AppMetrica analytics enabled. It records sessions, the screens you open, device type and app version, and error reports, and links them to an internal identifier for your account. AppMetrica processes that data under Yandex's own rules. The only Google service used in the app is push notification delivery (Firebase Cloud Messaging). To limit analytics in the app, use your device settings and permissions, or uninstall the app.

5.Payments

The website accepts no payments. There is no form on it that asks for card details.

In the mobile app, online payment goes through the Multicard payment system. When you start a payment, the app sends you to Multicard's own checkout page: the card number, expiry date and security code are entered there, on the payment provider's side.

Card details are not stored on MK Express servers and are not visible to our staff. We only see whether a payment succeeded or failed, its amount and its time. The payment provider processes that data under its own rules.

6.Who we share data with

We do not sell personal data and we do not hand it over for someone else's advertising. Data is shared only where it is necessary to run the service and where the law requires it.

In addition, information may be disclosed: as required by law, a court order or an official request from an authorised government body; when we believe in good faith that disclosure is necessary to protect our rights, your safety or the safety of others; and to investigate fraud.

• Customs authorities of Uzbekistan — passport and shipment details are provided to the extent the law requires, to clear the parcel and to monitor the duty-free allowance.
• Google — Analytics 4 statistics on the website, and push notification delivery in the app (Firebase Cloud Messaging).
• Yandex — Yandex Metrica statistics on the website, and in the mobile app the Yandex MapKit maps, Yandex AppMetrica analytics and error reports. These are separate products: Metrica runs on the website, AppMetrica and MapKit inside the app.
• CARTO (basemaps.cartocdn.com) — the base layer of the branch map on the website (built on OpenStreetMap data) is loaded from this service; when the map opens, the service sees your browser's IP address.
• Multicard — to process online payments made in the app.
• Telegram — if you contact us through @mk_express_admin or @mk_express_mini, the conversation passes through the Telegram service.
• Apple App Store and Google Play — to distribute, install and update the app.
• Trusted service providers — partners who work on our behalf, such as transport and IT infrastructure. They may not use the information we share with them for their own purposes and must follow the rules set out in this policy.

7.How long we keep data

Your data is kept for as long as our service relationship lasts. Shipment, accounting and customs records are kept for as long as the applicable rules require — that period is set by law rather than by us, which is why we do not quote a number of years here.

Data that is no longer needed is deleted or stripped of the details that identify you.

If you want your data deleted, contact us using the details below: we will review the request and delete whatever we are not legally required to keep. In some cases shipment history remains after an account is closed — clarify such situations individually through @mk_express_admin.

8.Your choices and rights

You stay in control of your data. These options are always open to you:

• Uninstalling the app — removing the app from your phone stops all collection through the app. Uninstalling does not by itself erase data already collected or records we are required to keep by law.
• Permissions — camera, gallery, location, notification and call permissions can be revoked at any time in your phone settings. Revoking the location permission also keeps location data out of the app's analytics. Revoking any permission disables the feature that depends on it — without camera access, for example, you cannot upload a passport photo.
• Push notifications — switch them off in the app or in your phone settings. You will still receive important service messages by SMS or phone call.
• Requesting a copy — you may ask what data we hold about you; we respond once your identity is confirmed.
• Correction — if your name, phone number or passport details are wrong, have them corrected at a branch or through our admin. Incorrect passport details stop customs clearance, so report any error immediately.
• Deletion — request it in the way described in the section "How long we keep data" above.
• Website analytics — limit it through browser settings, blocking extensions and the providers' own opt-out tools.

9.Children

Neither the website nor the app is aimed at children: the service is freight delivery arranged by adults.

We do not knowingly collect personal information from children under 13 and we do not market to them. If you have reason to believe that your child has given us their personal information, tell us using the contacts below — we will take the necessary steps and delete the data.

For a user under 16, consent to the processing of personal data is given by a parent or legal guardian.

We encourage parents and guardians to monitor their children's internet use and to tell them never to submit personal information without permission.

10.Security

We use organisational, technical and physical safeguards to protect your information: data travels over a secured connection and access to our systems is restricted.

Even so, no system can be guaranteed one hundred per cent secure. Please take care on your side too:

• Never share the one-time code sent to you by SMS. Our own staff will never ask you for it either.
• Our staff never ask for a card number, expiry date, CVV or card password. If someone asks, it is a scam.
• Our official channels are the website https://mkexpress.uz, the @mk_express_mini channel and the @mk_express_admin support account. Accounts under any other name are not ours.
• If you suspect that someone else has accessed your account, contact us immediately using the details below.

11.Changes to this policy

This policy may be updated from time to time — for example when a new service or feature appears, when the list of services we use changes, or when legal requirements change.

The new version is published on this page and the update date shown on the page changes with it. We may not notify you of every change separately, so please look here occasionally.

If you keep using the website or the app after an update, that means you accept the new version.

12.Your consent

By using our website, our mobile app or our delivery service, you consent to your personal information being collected and processed as described in this policy.

If you do not agree with these terms, please do not use the services. If you have a question or an objection, write to us using the contacts below and we will sort it out together.