CONSENT TO THE COLLECTION AND PROCESSING OF PERSONAL DATA

1. General Provisions

This consent to the collection and processing of personal data (hereinafter - the "Consent") is provided by the user of the website (hereinafter - the "User", the "Data Subject") to LLP "QARAT Service" (hereinafter - the "Operator") and is drawn up in accordance with the Law of the Republic of Kazakhstan "On Personal Data and Their Protection" in its current version.

This Consent is a specific, informed, and conscious expression of the User's will to allow the collection and processing of their personal data within the scope and for the purposes specified in this document.

2. Operator Details and Contacts

Operator:

• Name: LLP "QARAT Service"
• BIN: 210740014147
• Address: Republic of Kazakhstan, Astana, Turkestan St. 18/1, apt. 33
• E-mail for personal data requests: a_kassenov@mail.ru

The Operator's website (hereinafter - the "Website") is used, among other things, to receive inquiries via the feedback form.

3. List of Personal Data

The Operator processes the following User data:

• Name (as provided by the User in the form).
• Phone number.
• Message/comment text - only if such a field is provided and the User voluntarily fills it in.

When visiting the Website, technical data may be processed (for example, cookie identifiers, device and browser data, information about actions on pages) for the purposes of web analytics. The Operator does not intend to transmit the contents of the form fields (name, phone number, inquiry text) to the web analytics service and configures analytics so that these data are not recorded.

4. Purposes of Processing Personal Data

Personal data are processed exclusively for the following purposes:

• Processing the User's inquiry submitted via the feedback form.
• Calling back/communicating with the User using the provided phone number in order to respond to the request and clarify details.
• Keeping records of inquiries and their processing status (processed/not processed).
• Analyzing traffic and improving the Website using a web analytics service (Yandex.Metrika).

5. Method of Obtaining and Confirming Consent

Consent is provided by the User by checking the box "I agree to the processing of personal data" and submitting the feedback form. Submitting the form without checking the box is not allowed.

6. Storage Period and Termination of Processing

Personal data obtained via the feedback form are stored in the Operator's database until the processing purposes are achieved, but no longer than 3 (three) years from the date of the inquiry, unless longer storage is required by the legislation of the Republic of Kazakhstan.

Upon achievement of the processing purposes or upon withdrawal of the Consent (if legal restrictions do not apply), the Operator terminates processing and takes measures to delete/destroy personal data within a reasonable time.

7. Transfer of Personal Data to Third Parties

The Operator may entrust (assign) the processing of personal data to third parties to the extent necessary to achieve the processing purposes, provided that such parties comply with confidentiality and personal data protection requirements.

As part of the Website's operation, transfer/access to data may be provided to the following categories of third parties:

• Hosting and infrastructure (VPS) provider - ps.kz (regarding server hosting and technical maintenance).
• Yandex.Metrika web analytics service (Yandex LLC) - regarding technical web analytics data (cookies/identifiers/events).

The Operator does not transfer identifying data from the feedback form (name, phone number, inquiry text) to Yandex.Metrika and takes measures to ensure they are not recorded by session recording tools (for example, Webvisor).

8. Cross-Border Data Transfer

The User is informed that when using third-party services (including a web analytics service), cross-border transfer of technical data may occur. Such transfer is carried out in compliance with the conditions established by the legislation of the Republic of Kazakhstan. The User consents to such transfer within the purposes specified in this Consent.

9. Measures to Protect Personal Data

The Operator applies necessary measures to protect personal data, including (without limitation):

• access control for administrative panels and the database;
• use of a secure connection (HTTPS/TLS) when transmitting data;
• backups and access control to backups;
• software updates and basic information security measures.

10. User Rights and Procedure for Requests

The User has the rights provided by the legislation of the Republic of Kazakhstan, including the right to:

• receive information about the collection and processing of their personal data;
• request changes or additions to their personal data when supporting documents are available;
• request blocking of personal data if there is information about violations of the conditions of collection and processing;
• request deletion/destruction of personal data in cases provided by law;
• withdraw Consent in the manner specified in Section 11 of this document.

To exercise these rights and submit requests, the User may contact the Operator at a_kassenov@mail.ru with the email subject "Personal Data". The request should preferably include the phone number provided in the form and the essence of the request. To prevent abuse, the Operator may request confirmation that the request is submitted by the owner of the specified phone number.

11. Withdrawal of Consent

The User may withdraw this Consent by sending a request to the Operator's e-mail: a_kassenov@mail.ru. Withdrawal of consent is not permitted in cases established by the legislation of the Republic of Kazakhstan (for example, where processing is required by law or for the performance of obligations).

12. Changes to the Consent Text

The Operator may update the text of this Consent if data processing procedures or legal requirements change. The current version is published on the Website. Significant changes (changes in purposes, list of data, or categories of third parties) are recommended to be accompanied by obtaining consent again upon the next submission of the form.