Revision: 15 October 2026 · consent version 2026-10-15-v2.
1. Who is responsible
The owner and operator is IT Technology LLP, business identification number (BIN) 230140014298. Address: Republic of Kazakhstan, 050000, Almaty, Bostandyk district, 280 Baizakov Street, non-residential unit 3. Send personal data enquiries, including withdrawal of consent, to mail@it-tec.kz or write to this postal address. You do not need to submit a new sales enquiry to exercise your rights.
This policy covers it-tec.kz and its Kazakh, Russian and English forms. The legislation of the Republic of Kazakhstan applies, including Law No. 94-V of 21 May 2013 on Personal Data and their Protection, and the Rules for Personal Data Collection and Processing approved by Order No. 395/НҚ of 21 October 2020. Official texts are linked below.
2. Data we collect
Only information needed for your enquiry: surname, first name and patronymic if shown in your identity document; work telephone and email; organisation name and BIN where needed for a quote or invoice. An organisation’s BIN is not an individual identification number (IIN). Our forms do not request your IIN, identity document copies, biometric data or payment card details.
Depending on the request, you may provide the product, edition, licence quantity and term, licence number and renewal date, service, number of workstations, task description, procurement deadline, tender link and preferred reply channel. PDF, DOCX and XLSX attachments up to 10 MB are accepted. Remove unnecessary personal information, passwords and access keys. Only submit another person’s data where you have the required lawful basis.
Technical information includes time, language, page address, referral source and UTM tags, a protected session identifier and consent records. The application uses an IP-address hash to limit repeated submissions; hosting logs may contain IP addresses and browser information. Hashing does not make data fully anonymous.
3. Purposes
To respond, prepare a quote or invoice, arrange renewals and services, correspond with you and protect forms against abuse. Enquiry data is not used for advertising mailouts, selling databases, publication or training AI models. Documents arising from a signed contract are processed separately to the extent and for the periods required by law and that contract.
4. Who may access data
Authorised staff may access data only to handle the enquiry. Website hosting, storage and business email delivery contractors may receive limited access for these tasks under contractual confidentiality and protection obligations. Public authorities may receive data where a lawful basis requires it. Unauthorised forwarding of enquiries to messengers is excluded.
5. Storage and retention
Enquiries and attachments are hosted with Kazakhtelecom’s iD Host within the Republic of Kazakhstan. Email and backup copies containing personal data must also be stored in Kazakhstan. Contractor access is limited to the purposes in section 4.
For an outstanding enquiry, the maximum retention period is 365 days after submission, or 90 days for attachments. Earlier fulfilment of the purpose or a valid consent withdrawal requires earlier deletion unless the law requires retention. Automated database cleanup does not delete email copies or backups: the operator must arrange their deletion and prevent deleted data from returning to processing after a restore. Mandatory retention periods for contracts and accounting records are determined separately.
6. Transfers outside Kazakhstan
The form consent does not authorise cross-border transfers or disclosure in publicly accessible sources. If a particular service requires a transfer abroad, the recipient, country, data and purpose must be disclosed before the transfer; the lawful basis must be checked and separate consent obtained where required under Article 16 of the Law. No such transfer is permitted until these conditions are met.
7. What the form consent covers
By entering your full name, selecting a separate, initially unchecked checkbox and submitting the form, you consent to IT Technology LLP, BIN 230140014298, collecting and processing the information you provided under section 2 for the purposes in section 3. Limited third-party access is allowed on the terms in section 4. This consent does not allow publication or cross-border transfers.
Consent lasts until the enquiry’s purpose is fulfilled or consent is validly withdrawn, for no longer than 365 days after submission; the attachment limit is 90 days. Any further retention required by law relies on that legal basis rather than indefinite consent. The system records consent, its date and time, language, request number and the version of these terms. You may refuse by not submitting the form; this does not restrict browsing the site or contacting the operator.
8. Your rights
You may request information about collection and processing, the data held, its sources and retention; seek correction, blocking, anonymisation or deletion where legally applicable; withdraw consent; and complain to the competent authority or a court.
Contact us using section 1 with your full name, the contact you previously used, your request number if known and what you seek. A request number is not mandatory. We may request proportionate identity verification where needed; do not send an identity document copy without a separate lawful basis. Following consent withdrawal, processing must stop or a reasoned refusal be provided within 15 working days, subject to statutory exceptions and outstanding obligations. Other requests are handled within their applicable statutory periods.
9. Cookies and external services
Necessary technologies retain language and cookie preferences for up to one year; the protected form session lasts up to two hours. They support site operation and enquiry security. Advertising tracking is not required to send an enquiry.
External analytics and external CAPTCHA are not enabled under this revision. Before enabling them, providers, countries, data and legal grounds must be established, relevant terms published and any required separate choice provided. The enquiry checkbox does not give this permission. Cookie settings are available in every page footer. Map and vendor links open external resources only when you follow them; those resources have their own policies.
10. Protection and changes
The operating site is to use HTTPS, restricted staff access, separately protected administration, attachments outside the public directory, file checks and submission limits. The operator must verify these measures, deletion, email and backups before opening forms to visitors. This policy alone does not certify infrastructure security.
Material changes to purposes, recipients or processing conditions require a policy update and fresh consent where necessary. Earlier consent versions do not automatically cover new purposes. All three language versions must reflect the same terms.