Privacy policy

PRIVACY POLICY & PERSONAL DATA PROCESSING POLICY

Last Updated: August 21, 2026

This Privacy Policy and Personal Data Processing Policy (the “Policy”) describes how EximTorg LLC (“EximTorg”, the “Company”, “we”, “us”, or “our”) collects, uses, stores, transfers, and otherwise processes personal data when you use expo-import.com, submit an inquiry or contact form, request prices or commercial offers, subscribe to information, meet our representatives at exhibitions or business events, or communicate with us by email, telephone, SMS, WhatsApp, or other communication channels. By using our website or voluntarily providing your personal data, you acknowledge that you have read this Policy.

1. Company Information

The data controller responsible for processing personal data is:

EximTorg LLC

Kyrgyz Republic, Bishkek

Address: Kyrgyz Republic, Bishkek, 8 microdistrict – 47

Phone / WhatsApp: +996 777 908 777

Email: m.torobekov@gmail.com

Website: expo-import.com

For questions regarding personal data processing, correction or deletion of your data, withdrawal of consent, or opting out of marketing communications, you may contact us using the contact details above.

2. Personal Data We Collect

Depending on how you interact with EximTorg, we may collect and process the following information:

first name, last name, and other identification information voluntarily provided by you;
company name;
job title or position;
country and city;
telephone number;
WhatsApp number and other contact details;
email address;
company website;
information about products or services you are interested in;
expected or requested purchase volumes;
product specifications, quality requirements, packaging requirements, and delivery terms;
contents of inquiries, messages, and business correspondence;
information submitted through forms on our website;
information provided during exhibitions, business meetings, conferences, and other events;
information contained in business cards or other contact information voluntarily provided to us;
technical information necessary for website operation and analytics, including IP address, device type, browser information, website usage information, cookies, and similar technical identifiers where applicable.

We do not intentionally collect sensitive categories of personal data through our website, including health information, political opinions, religious beliefs, biometric data, or similar sensitive information unless such processing is specifically required by law or by the nature of a particular relationship.

3. How We Collect Personal Data

We may obtain personal data:

directly from you when you complete a form on our website;
when you request prices, quotations, product information, catalogs, or samples;
through email correspondence;
through WhatsApp;
through telephone calls or SMS;
through social networks and other messaging platforms;
during face-to-face meetings;
at exhibitions, conferences, trade fairs, and other business events;
from business cards and other contact information voluntarily provided to us;
in connection with existing or prospective business relationships.

4. Purposes of Personal Data Processing

We may process personal data for the following purposes:

receiving and processing inquiries;
identifying customers and prospective customers;
responding to requests;
providing information about EximTorg products and services;
preparing and sending quotations;
regularly updating previously provided prices and quotations;
preparing and sending commercial offers;
providing product specifications, certificates, photographs, videos, and other product information;
arranging product samples;
conducting business negotiations;
entering into and performing contracts;
arranging payments, logistics, customs procedures, and delivery of goods;
maintaining databases of customers and prospective customers;
maintaining records of communications and business relationships;
managing sales through CRM and other information systems;
following up after exhibitions, meetings, conferences, and business events;
analyzing sales and marketing effectiveness;
improving customer service and website functionality;
providing information about new products, new harvests, availability, prices, and delivery terms;
sending commercial and marketing communications;
preventing fraud, abuse, and unauthorized use of our systems;
complying with applicable legal and regulatory requirements.

We will not use personal data for purposes incompatible with those described in this Policy unless we have an appropriate legal basis or obtain additional consent where required.

5. Commercial and Marketing Communications

Where we have your consent or another applicable legal basis, EximTorg may use the contact information you provide to communicate with you regarding our products, services, prices, and business opportunities.

We may communicate with you through:

email;
telephone calls;
SMS;
WhatsApp;
other messaging applications;
social networks;
other communication channels that you have provided to us or used to communicate with us.

Such communications may include:

current prices;
price updates;
product availability;
new harvest information;
quotations and commercial offers;
special offers;
information about new products;
catalogs;
product specifications;
information about samples;
company news;
invitations to exhibitions, trade fairs, and business events;
cooperation opportunities;
other information relating to EximTorg products and services.

6. Opting Out of Marketing Communications

You may opt out of receiving marketing and promotional communications at any time.

You may do so by:

replying to a message and asking us to stop sending marketing communications;
sending “STOP”, “UNSUBSCRIBE”, or another clear request to unsubscribe;
contacting us through WhatsApp;
sending an email to m.torobekov@gmail.com.

Upon receiving your request, we will stop using the relevant communication channel for marketing purposes within a reasonable period.

Opting out of marketing communications does not prevent us from contacting you when communication is necessary to:

respond to your inquiry;
perform an existing contract;
process an order;
arrange payment or delivery;
provide requested information;
fulfill legal obligations;
manage another legitimate business matter relating to an existing relationship.

7. Legal Basis for Processing

Depending on the circumstances, we may process personal data based on one or more of the following legal grounds:

your consent;
taking steps at your request before entering into a contract;
entering into or performing a contract;
compliance with applicable legal obligations;
our legitimate business interests or those of a third party, provided such processing does not unlawfully override your rights and legitimate interests;
other grounds permitted under the applicable laws of the Kyrgyz Republic and other applicable jurisdictions.

Where consent is legally required, we will seek consent in a manner that allows us to demonstrate that consent was provided.

8. Consent to Marketing Communications

Where you separately consent to receiving marketing communications, you authorize EximTorg to use the contact information you have provided for sending information relating to our products, prices, commercial offers, and business opportunities through the communication channels covered by your consent.

Providing marketing consent is voluntary.

Refusing marketing consent does not prevent you from submitting a general business inquiry or receiving a response to your inquiry.

You may withdraw your marketing consent at any time.

9. Sharing Personal Data with Third Parties

To operate our website, process inquiries, manage sales, communicate with customers, perform analytics, conduct advertising, and fulfill our contractual obligations, we may use third-party service providers.

Depending on the services we use, such third parties may include:

website and hosting providers;
CRM and customer-management platforms;
email service providers;
SMS service providers;
WhatsApp and WhatsApp Business solution providers;
Meta and related business services;
Google and related services;
advertising and web analytics providers;
cloud service providers;
automation platforms;
logistics and transportation companies;
customs representatives;
banks and payment service providers;
IT and security providers;
professional advisers, contractors, and other parties necessary for conducting our business.

These parties may receive only the information reasonably necessary to perform the relevant services, unless otherwise required by law.

EximTorg does not sell personal data to third parties.

Where third parties process personal data on our behalf, we take reasonable steps to use service providers that provide appropriate safeguards for personal data.

10. Google, Meta, WhatsApp and Advertising Technologies

EximTorg may use Google, Meta, WhatsApp, and other technology providers for purposes including:

website analytics;
measuring advertising effectiveness;
conversion measurement;
audience creation;
remarketing;
advertising personalization where permitted;
customer communications;
WhatsApp Business communications;
improving our marketing and sales activities.

Where applicable law or the rules of a particular platform require separate user consent for advertising, analytics, personalization, cookies, or transfer of information, we will seek such consent before carrying out the relevant processing.

The use of third-party platforms may also be subject to the privacy policies and terms of those platforms.

11. Cookies and Similar Technologies

Our website may use cookies and similar technologies for:

essential website functionality;
security;
remembering preferences;
website analytics;
measuring advertising performance;
marketing and remarketing.

Where applicable law requires prior consent for non-essential analytics or advertising cookies, such technologies will be activated only after the appropriate consent has been obtained.

You may also control or disable certain cookies through your browser settings. Disabling cookies may affect the functionality of certain parts of the website.

12. International and Cross-Border Data Transfers

EximTorg conducts international business and may use international technology, cloud, CRM, advertising, analytics, and communication service providers.

As a result, personal data may be transferred to, stored in, or processed in countries outside the Kyrgyz Republic.

Where required by applicable law, EximTorg will take appropriate measures to ensure that cross-border transfers of personal data are carried out lawfully and with an appropriate level of protection.

13. Data Retention

We retain personal data only for as long as reasonably necessary to:

fulfill the purposes described in this Policy;
maintain legitimate business relationships;
perform contractual obligations;
comply with legal, tax, accounting, or regulatory requirements;
resolve disputes;
establish, exercise, or defend legal claims;
protect our legitimate business interests.

Retention periods may vary depending on the nature of the information and our relationship with you.

When personal data is no longer required and there is no other lawful basis for retaining it, we will delete, anonymize, or otherwise securely dispose of the data in accordance with applicable requirements.

14. Data Security

EximTorg takes reasonable technical and organizational measures to protect personal data against:

unauthorized access;
unauthorized alteration;
disclosure;
copying;
loss;
destruction;
unauthorized distribution;
other unlawful processing.

Access to personal data by employees, contractors, and service providers should be limited to the information reasonably necessary for the performance of their duties.

However, no electronic transmission or storage system can be guaranteed to be completely secure.

15. Your Rights

Subject to applicable law, you may have the right to:

obtain information about how your personal data is processed;
request access to your personal data;
request correction of inaccurate or outdated information;
request deletion of personal data where legally applicable;
object to certain types of processing;
request restriction of processing where applicable;
withdraw previously provided consent;
opt out of marketing communications;
exercise other rights provided by applicable data protection laws;
lodge a complaint with the competent data protection authority where applicable.

To exercise your rights, please contact:

Email: m.torobekov@gmail.com

WhatsApp / Phone: +996 777 908 777

We may request reasonable information to verify your identity before processing certain requests.

16. Withdrawal of Consent

Where processing is based on your consent, you may withdraw that consent at any time.

Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

After receiving a valid withdrawal request, we will stop processing personal data on the basis of that consent unless another lawful basis permits or requires us to continue processing the information.

Withdrawing consent should be as easy as providing it.

17. Children's Privacy

Our website and EximTorg's commercial activities are primarily intended for businesses and adult users.

We do not knowingly collect personal data from children for marketing purposes.

If we become aware that personal data relating to a minor has been collected without an appropriate legal basis or legally required parental or guardian consent, we will take reasonable steps in accordance with applicable law.

18. Changes to This Policy

We may update this Policy from time to time, including where there are changes to:

applicable laws and regulations;
our business activities;
our website;
the technologies and service providers we use;
our personal data processing practices.

The current version of this Policy will be published on expo-import.com.

The “Last Updated” date at the beginning of this Policy indicates when the Policy was most recently revised.