This policy explains what personal data the elib.npuu.uz e-library website (the "Website") collects, what it is used for, who it is shared with, how long it is kept and how it is protected.
The data belongs to Nizami Uzbekistan National Pedagogical University (the "University"). It is processed by the University's Information Resource Centre (the "Library") in accordance with the Law of the Republic of Uzbekistan "On Personal Data".
You do not need an account to browse the catalogue, search for books or read the news, and no personal data is requested for that. By signing in, registering or using the Website's services, you agree to your data being processed as described in this policy.
What data we collect
When you sign in through the University LMS. The LMS passes the following data to the Website, where it is stored:
- surname, first name and patronymic;
- student or staff number (HEMIS);
- your role: student, teacher or staff member;
- faculty, specialty, group or department;
- region and district;
- email address and phone number;
- date of birth and gender;
- profile photo.
When you register on the Website:
- surname and first name;
- your email address or phone number, depending on the method you choose;
- your password. It is never stored in plain text; only an irreversible hash of it is kept.
When you link Telegram: your Telegram user ID (chat ID) and username. If you confirm your phone number through Telegram, the phone number is stored as well.
When you use Library services:
- books you have reserved, borrowed and returned;
- your favourite books;
- your reviews and ratings;
- requests you send to the Library and any images attached to them.
When you read online:
- which book you read, the page where you stopped and how long you read;
- your bookmarks;
- passages you highlight and your notes.
This lets you continue from the same place next time.
When you pay for a paid book or a subscription:
- the order and its amount;
- the payment system's name and the transaction number;
- the payment status and time.
Your bank card details never reach the Website and are not stored on it. You enter them on the payment system's own page.
Technical data: your IP address and your browser and device type. These are kept for the duration of your session and in server logs.
Visit statistics: the Website only counts the total number of visits and page views per day. These numbers are not linked to any individual.
How we use the data
Your data is used to:
- recognise you as a reader and run your personal account;
- give you access to online reading and other services according to your category;
- record book holds, loans and returns;
- remind you through Telegram when a loan is about to fall due, when it is overdue and when a book you reserved is ready (if you have linked Telegram);
- accept payment for paid books and subscriptions and give you access to them;
- answer your requests;
- protect books from unauthorised distribution. When you read online, every page shows your name, ID, the date and the time as a faint watermark;
- protect the Website from abuse and attacks;
- keep general statistics, not linked to individuals, to improve our services.
Your data is not sold and is not used for advertising.
Who we share data with
The University's library system (Koha). This is the Library's internal system for loans and holds. To open your library card, it receives:
- surname and first name;
- reader category;
- email address and phone number;
- date of birth and gender;
- card number (your HEMIS number or a number issued by the Website).
SMS service. If you register with a phone number, the number is passed to an SMS provider to send you a confirmation code.
Telegram. If you link Telegram, reminders and confirmation codes are sent through Telegram.
Payment systems (Payme, Click, Uzum Bank). The order number and amount are passed to them to process the payment.
Google reCAPTCHA. Used to protect the registration page from automated programs (bots). Your IP address and information about your browser are sent to Google and are covered by Google's privacy policy.
Other Website users. A review you leave on a book is shown to everyone on the book's page together with your name.
Public authorities. Data is disclosed only in the cases and in the manner set by law.
Cookies and browser storage
The Website uses only the cookies it needs to work:
laravel-session: remembers that you are signed in. The session ends after 2 hours of inactivity.XSRF-TOKEN: protects forms against forged requests.locale: remembers your chosen language for 1 year.
Your theme (light or dark), accessibility settings and reading settings are stored only in your browser and are not sent to the Website.
The Website does not use cookies for advertising or tracking.
Some pages load content from other services:
- the map on the "Contact" page is loaded from OpenStreetMap;
- videos in the media library are shown from YouTube in privacy-enhanced mode (youtube-nocookie.com);
- part of the online reader is loaded from cdnjs.cloudflare.com.
These services may see your IP address.
Where and how long data is kept
Data is stored on the University's servers located in the Republic of Uzbekistan.
| Data | Retention period |
|---|---|
| Account, reading history, bookmarks, notes, favourites, reviews and requests | While your account is active or until you ask for it to be deleted |
| Payment records | The period set by accounting and tax legislation |
| Session data | 2 hours |
| Application logs | 30 days |
| Web server logs | 14 days |
How data is protected
- All communication with the Website is encrypted over HTTPS.
- Passwords are never stored in plain text.
- Confidential settings are stored encrypted.
- Only authorised staff can enter the admin panel, within the limits of their roles.
- Book files are protected from downloading and open only on the reading page.
Your rights
You have the right to:
- know what data of yours is processed and why;
- get a copy of your data;
- have incorrect data corrected;
- withdraw your consent and ask for your data to be deleted.
Data that comes from the LMS (name, faculty, group and so on) is corrected in the LMS and updated on the Website the next time you sign in.
Once your data is deleted, you will not be able to reserve books, read online or use other personal services. Records of unreturned books and of payments are kept until the end of the period set by law.
Send your request through the "Questions and requests" section of the Website or use these contacts:
- Email: info@uznpu.uz
- Phone: +998 71 276-80-86
- Address: 27 Bunyodkor Avenue, Chilanzar District, Tashkent 100185, Uzbekistan
Changes to this policy
The Library may change this policy. A new version takes effect on the day it is published on this page.
Last updated: 28 October 2026.