Consent to the Collection and Processing of Personal Data

This is a translation. If the English and Russian versions differ, the Russian version prevails. Russian original: Согласие на сбор и обработку персональных данных.

By submitting a form on expertica.kz, I voluntarily give Expertica LLP consent to the collection and processing of my personal data on the terms below. The consent is given electronically in a way that allows its receipt to be confirmed (paragraph 1 of Article 8 of Law of the Republic of Kazakhstan No. 94-V of 21 May 2013 “On Personal Data and Their Protection”, the “Law”): the date and time of the request, the page address and the data entered in the form are stored together with the request. Terms have the meanings given in Article 1 of the Law.

1. Who receives my consent

The owner and operator: Expertica LLP (ТОО «Экспертика»), BIN 221140015128, 46/1 Turan Ave., office 613, Astana, Republic of Kazakhstan, email expert.ciic@gmail.com (the “Operator”).

2. Who gives the consent

The consent is given by the person who filled in and sent the form, identified by the name and contact details in the request. If I am under 18, my legal representative gives the consent on my behalf (paragraph 1 of Article 7 of the Law).

3. Data covered

• my name or how I would like to be addressed;
• my chosen channel and contact: phone number, messenger username or email address;
• the services I selected, my message and the details in it;
• the address of the page the request was sent from, the service it relates to, UTM tags and the source of the visit;
• the date and time of sending, IP address, browser and device details;
• cookie data and information on my use of the site to the extent described in the Cookie Policy.

If I provide details of other people, such as a company director or founder, I confirm that I am entitled to pass them to the Operator.

4. Purposes

• to reply to my request in the chosen channel, advise me and quote for services;
• to prepare and conclude a services contract;
• to keep a record of requests and related correspondence;
• to analyse which pages and sources bring requests, and to improve the site;
• to comply with the laws of the Republic of Kazakhstan.

5. Permitted operations

I allow the Operator to carry out the following operations with my data, as defined in Article 1 of the Law:

• collection: obtaining data from the form, correspondence and cookies;
• accumulation: organising data by entering it into a digital object, such as Tilda CRM;
• storage: keeping data intact, confidential and available;
• modification and supplementation: updating data, including at my request;
• use: actions to achieve the purposes in section 4;
• dissemination: only transfer of data and access to it for the persons listed in section 6, never in publicly accessible sources;
• depersonalisation and anonymisation, for example for aggregate statistics;
• blocking, destruction and deletion;
• cross-border transfer on the terms of section 7.

No decisions that create, change or end my rights are taken based solely on automated processing (Article 19-1 of the Law).

6. Transfer to third parties

The Operator may transfer my data to third parties that process it on the Operator’s behalf and only for the purposes in section 4:

• Tilda: the site platform, receiving requests and storing them in Tilda CRM;
• Telegram: forwarding requests to the Operator’s staff through a bot;
• Google: Google Analytics web analytics and Google Fonts font delivery;
• other web analytics services listed in the Cookie Policy at the time of processing, for example Yandex Metrica if the Operator adds it;
• WhatsApp, Telegram, WeChat, Gmail: correspondence in the channel I chose.

My data may also be disclosed to state authorities and other persons in the cases provided for by the laws of the Republic of Kazakhstan.

7. Cross-border transfer

The servers of these services may be located outside the Republic of Kazakhstan. I consent to the cross-border transfer of my data to foreign countries, including countries that do not ensure the protection of personal data (subparagraph 1) of paragraph 3 of Article 16 of the Law).

8. Publicly accessible sources

This consent does not allow the Operator or third parties to make my data available in publicly accessible sources.

9. Period of validity

The consent is valid from the day the form is sent until the purposes in section 4 are achieved or until I withdraw it (paragraphs 5 and 6 of Article 8 of the Law). If I sign a contract with the Operator, the data needed to perform and account for it is kept for the term of the contract and the record retention periods set by the laws of the Republic of Kazakhstan.

10. How to withdraw consent

I may withdraw consent by notifying the Operator (paragraph 7 of Article 8 of the Law): by email to expert.ciic@gmail.com with the subject “Withdrawal of consent”, by letter to the office address or through the form on this page. The notice should include the contact from my request.

Within fifteen working days the Operator stops processing the data and instructs third parties to stop it, unless storage or processing is required by the laws of the Republic of Kazakhstan, or sends a reasoned refusal. Consent cannot be withdrawn where this would contradict the laws of the Republic of Kazakhstan or where an obligation is still outstanding (paragraph 2 of Article 8 of the Law).

Withdrawal does not affect processing carried out before the notice is received.

11. Rights and related documents

My rights as a data subject and how to contact the Operator are set out in the Privacy Policy; the use of cookies is described in the Cookie Policy.

Version of 15 October 2026. The consent applies in the version published on this page at the moment the form is sent.