Privacy Policy

Who we are

OrexCA.com is operated by Oriental Express CA LLC, 43 Mirobod-1 Street, Tashkent 100015, Uzbekistan.

We decide how and why your personal data is used on this website. For any question about this policy, or to exercise any right described below, write to info@orexca.com. We usually answer within three days, and in any case no later than 30.

What we collect

When you send us an enquiry, we store what you type: your name, email address, phone number, citizenship, travel date, number of travellers and your message, together with the tour or train service the enquiry is about.

Automatically, we store the address of the page you sent the enquiry from, your IP address and your browser identification. We keep these to tell genuine enquiries from automated ones.

When you leave a review, we publish the name you give us next to it. Please use only the name you are comfortable seeing in public.

When you pay, payment happens on a separate secure page provided by our bank. Your card number never reaches our website and we never store it. For refunds we keep the last four digits and the cardholder name only.

Why we use it, and on what basis

• To answer your enquiry and arrange your trip — necessary to act at your request and to perform our contract with you.
• To keep records of bookings and payments — required by tax and accounting law.
• To keep the site available and to block abuse — our legitimate interest in a working site.

We do not sell or rent your data, and we do not use it for anyone else’s marketing.

Who else sees your data

Our staff, limited to the people handling your enquiry.

Suppliers of your trip — hotels, railways, transport companies and guides — and only what they need to provide the service.

Cloudflare, which delivers this website and protects it from attacks. Cloudflare processes technical connection data on our behalf.

No advertising or analytics companies. This site does not use Google Analytics, advertising pixels or session recording, and — apart from strictly necessary technical cookies — it sets no cookies at all.

Authorities, where the law requires it.

Cookies

This site does not use advertising or analytics cookies. The only cookies we set are those needed for the site to work — for example to keep a form submission secure. Because we set nothing else, we do not ask you for cookie consent.

Where your data goes

We are based in Uzbekistan and your data is stored on servers we control. Cloudflare operates worldwide and may process technical data in other countries. If you are in the EEA or the UK, this means your data may be transferred outside it, to countries whose data protection laws differ.

How long we keep it

• Enquiries that do not lead to a booking — 24 months.
• Bookings, invoices and payment records — 5 years, because accounting and tax rules require it.
• Published reviews — until you ask us to remove them.

Your rights

You can ask us to show you your data, correct it, or delete it where we are not obliged to keep it. You can ask us to remove a review you left. Write to info@orexca.com; we answer within 30 days and do not charge for it.

If you are in the EU, the EEA or the UK, you also have the right to object to processing based on our legitimate interests, the right to data portability, and the right to complain to your national data protection authority.

Security, honestly stated

The site is served over an encrypted connection, access to enquiry records is limited to staff who need it, and payment card data never touches our systems. No system can be guaranteed completely secure, and email travels over networks we do not control. If a breach ever puts your data at real risk, we will tell you and the relevant authority without undue delay.

Changes

If we change this policy we will update the date at the top and, where the change matters, say so on the site.