Privacy Policy

This Privacy Policy (hereinafter referred to as the “Policy”) describes the procedure for processing personal data on the KAZTRADEHOLDING website (hereinafter referred to as the “Company”, “we”) and applies to all visitors and users of the website/contact forms.

We process personal data in accordance with the Law of the Republic of Kazakhstan “On Personal Data and Their Protection”, other applicable legal norms, and the Company’s internal regulations.

1. Definitions and Legal Basis

Personal Data — any information relating to an identified or identifiable website user.

Processing — any action performed with personal data (collection, recording, systematization, storage, clarification, use, transfer, anonymization, blocking, deletion).

The legal basis for processing includes: (i) user consent, (ii) execution of a contract/application initiated by the user, (iii) compliance with legal requirements, and (iv) the Company’s legitimate interests (improving the website and services while maintaining a balance of interests).

2. Personal Data We Collect

• Form Data: name, phone number, e-mail, company/position, message content, attached files.
• Communications: e-mail/messenger correspondence, call recordings (with explicit notice).
• Technical Data: IP address, date/time, device and browser identifiers, referrer, cookies, details of interaction with pages.
• Marketing and Analytics: UTM tags, traffic source, aggregated statistical data.

3. Purposes and Legal Basis of Processing

• Processing applications and requests, preparing commercial offers, concluding and executing contracts.
• Communication: calls, emails, newsletters (with consent); service notifications.
• Marketing (with consent): personalized offers, remarketing.
• Analytics and website development: measuring traffic, identifying errors, improving UX.
• Compliance with the law and protection of the Company’s and users’ rights/interests.

4. Transfer to Third Parties and Cross-Border Transfer

We do not sell personal data and transfer it to third parties only to the extent necessary for processing purposes and with a legal basis. Categories of recipients:

• Hosting, communication, mail, and cloud service providers.
• Analytics and marketing service providers (e.g., Yandex.Metrica, Google Analytics, advertising platforms) — if scripts are enabled.
• Logistics/delivery partners and consultants (as necessary).
• Government authorities — in cases provided by law.

Cross-border transfer is possible when using foreign cloud/analytics services. We ensure the required level of protection and use contractual mechanisms.

5. Retention Periods and Security

• Data is stored until the purposes of processing are achieved, the expiration of the limitation period in relations with the user, or until consent is withdrawn (if applicable), and no longer than required by law.
• Security is ensured by technical and organizational measures: encryption (SSL), access control, password policies, backups, logging, antivirus protection, and incident monitoring.

6. Data Subject Rights

The user has the right to:

• Receive information about the processing of their data and a copy of the data;
• Request correction, blocking, or deletion of inaccurate/excessive data;
• Withdraw consent to processing (if the basis is consent);
• Object to processing based on the Company’s legitimate interest, unless otherwise provided by law;
• Lodge a complaint with the authorized personal data protection authority of the Republic of Kazakhstan.

To exercise these rights, please send a request to the addresses specified in the “Contacts” section. We will respond within the time limits established by law.

7. Cookies, Pixels, and Analytics

The website uses cookies and pixel tags to enable functionality, save preferences, and perform analytics. You can restrict or disable cookies in your browser settings, but some website functions may not work properly.

If analytics/advertising scripts are enabled on the website (e.g., Yandex.Metrica, Google Analytics), data processing by these providers is governed by their own policies. Links to them should be provided here when scripts are activated.

8. Minors’ Data

We do not target an audience under 18 years of age and do not knowingly collect data from minors. If you become aware that a child has provided us with data without the consent of a legal representative, please contact us — we will delete such information.

9. Changes to the Policy

We may update the Policy periodically. The new version becomes effective upon publication on the website. The date of the current version is indicated at the top of the page.

10. Operator’s Contact Information

Personal Data Operator: LLP “KAZTRADEHOLDING”

Address: Republic of Kazakhstan, Almaty, Shumny Lane, 2

Phone: +7 (778) 266-03-65

E-mail for data requests: info@kaztradeholding.kz