Privacy Policy

1. General provisions

• —This Policy has been developed in accordance with the legislation of the Republic of Kazakhstan on the protection of personal data and their confidentiality.
• —This Policy applies to the https://mk-design-and-promotion.kz website, the Operator’s mobile applications and the resources to which links are placed from the said platforms.
• —The Operator does not process special categories of personal data (health status data, biometric data and other categories) through forms on the website.

2. What data we process

• —Data that you provide voluntarily: name, phone number, email address, text of the enquiry.
• —Technical data: IP address, device and browser type, operating system version, pages viewed, traffic source.
• —Data that you provide when booking an appointment: name, phone number, service of interest, selected time slot.
• —Account data in the personal cabinet and in the application.
• —No separate categories of data are used in the demo projects on the website: all data in the demo projects is fictitious.

3. Processing purposes

• —Processing enquiries and communicating with the user on the substance of the enquiry.
• —Conclusion and performance of an agreement for the provision of services.
• —Provision of services, booking an appointment, managing the personal cabinet.
• —Improving the quality of the service and ease of use.
• —Compliance with the statutory requirements applicable to the website and the application.
• —Where separate consent is given — sending informational and advertising messages.

4. Legal grounds for processing

• —Conclusion or performance of an agreement to which the data subject is a party.
• —Compliance with the requirements provided for by the legislation of the Republic of Kazakhstan.
• —Obtaining the prior consent of the data subject for processing not connected with the performance of an agreement.
• —Anonymisation and generalisation of data in anonymised statistics not linked back to a specific user.

5. Retention periods

• —Data connected with the performance of an agreement is retained for the period provided for by the legislation on accounting and tax records.
• —Data of enquiries for which no agreement was concluded is retained for no more than [TO BE FILLED IN] months from the date of the last enquiry.
• —Analytics data is retained for no more than [TO BE FILLED IN] months.
• —Upon expiry of the retention period, data is deleted or anonymised, except in cases where its retention is mandatory.

6. Your rights

• —Obtain information about the processing of your personal data.
• —Demand clarification, blocking or destruction of data if it is incomplete, outdated, inaccurate or has been obtained unlawfully.
• —Withdraw consent for processing not connected with the performance of an agreement at any time.
• —Appeal the actions of the Operator in the manner established by the legislation of the Republic of Kazakhstan.
• —Apply to the Operator with a written application at mk.design.and.promotion@gmail.com. The response period is no more than 30 (thirty) calendar days.

A request for destruction is not executed if the processing must continue by virtue of the law.

7. Transfer to third parties

The Operator does not sell or transfer personal data to third parties, except in cases expressly provided for by the legislation and in cases of processing through the services listed below.

• —The hosting provider and the domain registrar — for hosting the website and processing technical data.
• —The analytics system — only where the user has consented to analytics cookies.
• —The language model provider — when the user independently contacts the chat assistant on the website. In this case, the text of the user’s messages is transferred to the specified provider in order to generate a response. No processing takes place if the user does not start a dialogue with the chat assistant.
• —The messenger for receiving enquiries (Telegram) — when the feedback form is submitted.
• —The operator of payment services — upon actual payment.
• —Government authorities — in the cases and in the manner established by law.

The chat assistant replies automatically and is not an employee of the Operator. Its responses are not a public offer and do not replace a consultation with a manager. The correspondence is not stored on the website side.

8. Cross-border transfer

• —The Operator may use services located outside the Republic of Kazakhstan (analytics tools, messengers, application infrastructure, language model provider).
• —Such a transfer is carried out in compliance with the requirements of the legislation of the Republic of Kazakhstan on the protection of personal data.
• —List of countries and recipient organisations: [TO BE FILLED IN before publication — a specific list is mandatory].

9. Cookies and analytics

The website uses cookies. A detailed classification and the procedure for managing consent are described in the Cookie Policy: https://mk-design-and-promotion.kz/legal/cookies

Analytics and marketing scripts are not loaded until the user has given consent. The refusal is recorded and blocks repeated loading.

10. Data protection

• —The Operator takes organisational and technical measures to protect data from unauthorised access, destruction, alteration and dissemination.
• —Access to data is granted only to the employees and contractors of the Operator who need it to perform their duties.
• —Encryption of the transmission channel (HTTPS) is used.

11. Contact details

• —Responsible for the processing of personal data: [ЗАПОЛНИТЬ: ИП / ТОО] [ЗАПОЛНИТЬ: полное наименование]
• —Address: [ЗАПОЛНИТЬ: юридический адрес]
• —E-mail: mk.design.and.promotion@gmail.com
• —Policy version: 1.0, 10 октября 2026