Privacy policy
Revised September 15, 2026 · Version 2
Draft. This document is under legal review and has not been published.
This is an informational English translation. The Kazakh version (/kk/legal) prevails in case of discrepancies.
1. General provisions
1.1. This Privacy policy (hereinafter — the Policy) defines the procedure for collecting, processing and protecting personal data of users of the website aiqazaqstan.com (hereinafter — the Site) and is prepared in accordance with the Law of the Republic of Kazakhstan of 21 May 2013 No. 94-V On Personal Data and Their Protection.
1.2. The owner and operator of the database containing personal data is the individual who owns the Site (hereinafter — the Operator). Contact for personal data enquiries: .
1.3. Registration and provision of personal data are not required to read materials on the Site.
2. What data we process and why
| Category | Data | Purpose | Legal basis | Retention period |
|---|---|---|---|---|
| Requests | name or organization name, email address, request text, hashed IP address | reviewing requests, abuse prevention | consent when submitting a request by email | |
| Visit statistics | identifiers in cookie files, IP address, browser and device information, actions on the Site | traffic analysis and Site improvement | consent to analytics cookies | in accordance with analytics service rules |
2.1. At the current stage of development of the Site, account registration and newsletter subscription are not available; personal data in connection with such services is not collected. If an account was created earlier, data associated with it is stored until deletion upon request.
2.2. The Operator does not process special categories of personal data and does not make decisions that produce legal consequences for the user solely on the basis of automated processing.
3. Consent
3.1. Consent to the processing of personal data is given by the user when submitting a request, and for visit statistics — through the cookie settings banner. Consent is given in electronic form by performing the specified actions.
3.2. The user may withdraw consent by changing their choice in cookie settings, or sending a request to . Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.
4. Storage and transfer of data
4.1. Personal data received in requests is stored: .
4.2. Third-party services used to operate the Site may receive user data, including outside the Republic of Kazakhstan (cross-border transfer):
4.3. Cross-border transfer is carried out on the basis of user consent given in accordance with Section 3 of the Policy.
4.4. The Operator does not sell personal data and does not transfer it to third parties, except for the services specified in clause 4.2 and cases provided for by the legislation of the Republic of Kazakhstan.
5. User rights
The user has the right to:
- know whether the Operator holds their personal data and receive information about its processing;
- request amendment and supplementation of their personal data;
- request blocking and destruction of their personal data if it is processed in violation of the law;
- withdraw consent to the processing of personal data;
- appeal the Operator's actions to the authorized body in the field of personal data protection or to a court.
To exercise these rights, send a request to . The Operator reviews the request within the time limits established by the legislation of the Republic of Kazakhstan.
6. Protection of personal data
6.1. The Operator takes legal, organizational and technical measures to protect personal data, including: transmission of data over the secure HTTPS protocol, storage of passwords only in hashed form, access control to the database, and logging of administrator access.
6.2. In case of a personal data security breach, the Operator notifies the authorized body and, where necessary, users in the procedure and within the time limits established by the legislation of the Republic of Kazakhstan.
7. Information about individuals in the registry
7.1. The Site's registry section contains information about persons publicly known for their activities in technology and artificial intelligence. Information is collected from publicly available sources: media publications, official organization websites, and open profiles.
7.2. A person whose information is published in the registry may request its correction or removal in the procedure described on the Content removal upon request page.
8. Children
Site services that require provision of personal data are not intended for persons under years of age. If you become aware that such a person has provided us with their data, please notify .
9. Changes to the Policy
The Operator may amend the Policy. A new edition takes effect from the moment it is posted on this page. The date of the current edition is indicated at the beginning of the document.
10. Contacts
Questions about personal data processing: .