Privacy and personal data processing policy

1. General provisions

1.1. This Policy has been prepared in accordance with Law of the Republic of Kazakhstan No. 94-V of May 21, 2013 “On Personal Data and Their Protection” and sets out how the personal data of visitors to vivavi.kz is processed.

1.2. The owner of the website and the personal data operator is Vivavi Consulting LLP, BIN 240140012345, registered address: Office 12, 1 Dostyk Street, Yesil District, Astana, Republic of Kazakhstan (the “Operator”).

1.3. By using the forms on the website and ticking the consent box, you confirm that you have read this Policy and consent to the collection and processing of your personal data on the terms set out below.

1.4. If you do not agree with this Policy, do not fill in the forms on the website and do not send us your data.

2. Terms

• Personal data: information relating to an identified or identifiable data subject, recorded on electronic, paper or other media.
• Data subject: the individual to whom the personal data relates, that is, a website visitor who has submitted a request.
• Processing: any action with personal data, including collection, recording, storage, modification, use, transfer, anonymization and destruction.

3. What data we collect

3.1. Data you provide voluntarily through the audit request forms:

• your name or how you would like to be addressed;
• your phone number, including your WhatsApp number;
• your company name and industry, if you included them in the request.

3.2. Data transmitted automatically when you visit the website: IP address, browser type and version, language, device type, pages viewed, date and time of the visit, and referral source. This information is processed in anonymized form.

3.3. The Operator does not collect special categories of personal data: information about health, ethnicity, religious beliefs or criminal records, or biometric data. Please do not enter such information in the forms.

3.4. The website is not intended for persons under 18. The Operator does not knowingly collect data from minors.

4. Purposes of processing

• to contact you about your request and schedule a free express audit;
• to prepare a commercial proposal, work plan and estimate for your needs;
• to conclude and perform a service agreement and handle the related correspondence and paperwork;
• to improve the website and our services based on anonymized visit statistics.

4.1. The Operator does not use your data for mailings, does not pass it to advertising networks and does not sell it to third parties.

5. Legal basis and how consent is obtained

5.1. Processing is based on the data subject’s consent obtained under Article 8 of Law No. 94-V, and to the extent necessary to conclude and perform an agreement.

5.2. Consent is given by ticking the box “I consent to the collection and processing of my personal data” when submitting the form. The form cannot be submitted without it.

5.3. The Operator records the fact of consent together with the content of the request and the date it was sent.

6. Transfer of data to third parties

6.1. Requests from the website are sent via WhatsApp, so the name, phone number and industry you provide are transferred to Meta Platforms Ireland Limited and are also processed under its privacy policy. This is a cross-border transfer within the meaning of Article 16 of Law No. 94-V, and by submitting a request you agree to it.

6.2. Third-party services run on the website pages and may receive technical data from your browser: Google Fonts and Tailwind CDN to display fonts and styles, YouTube in cookie-free mode for embedded videos, and Google Analytics and Meta Pixel (Facebook) for visit statistics and ad performance measurement.

6.3. The Operator may involve employees and contractors bound by confidentiality obligations in processing data, solely for the purposes listed in section 4.

6.4. Data may be provided to government authorities of the Republic of Kazakhstan upon a reasoned request, in the manner established by law.

7. Retention and destruction

7.1. Request data is kept no longer than needed for the purposes of processing: up to three years from your last contact, unless a different period is set by law or by agreement.

7.2. Once the purpose of processing is achieved, consent is withdrawn or the retention period expires, the data is destroyed within thirty calendar days.

8. Your rights

Under Articles 12, 15 and 24 of Law No. 94-V, you have the right to:

• know whether your data is processed, for what purposes and what data is involved;
• request that incomplete or inaccurate data be corrected or supplemented;
• request that your data be blocked or destroyed if it is processed in violation of the law;
• withdraw your consent to processing at any time;
• seek protection of your rights from the competent authority or in court.

9. How to withdraw consent

9.1. Send an email to hello@vivavi.kz with the subject “Withdrawal of consent” and include the name and phone number you gave in your request.

9.2. The Operator stops processing and destroys the data within thirty calendar days of receiving your request, unless the law requires it to be retained.

10. Cookies

10.1. The website uses technical cookies needed for the pages to work properly, as well as analytics and advertising cookies from the third-party services listed in clause 6.2.

10.2. You can disable or delete cookies in your browser settings. Some website features may not work properly afterwards.

11. Security measures

11.1. The Operator takes organizational and technical measures to protect data against unauthorized access, modification, copying and disclosure: it limits the number of employees with access, uses secure communication channels and requires contractors to keep data confidential.

11.2. Data transfer over the internet cannot be fully secured, so the Operator cannot guarantee the security of communication channels outside its control.

12. Changes to this Policy

12.1. The Operator may amend this Policy. A new version takes effect when it is published on this page, unless the text specifies otherwise.

12.2. The date of the current version is shown at the top of this document. Please check it before submitting a new request.