PERSONAL DATA PROCESSING AND PROTECTION POLICY

Last updated: March 19, 2026

1. GENERAL PROVISIONS

2. PERSONAL DATA THAT ARE PROCESSED

The Operator may process the following categories of personal data:

• name (if specified);
• phone number;
• email address;
• contact in messengers (e.g., Telegram);
• other data provided by the User voluntarily;
• technical data (IP address, cookies, browser data, device information).

3. PURPOSES OF PERSONAL DATA PROCESSING

Personal data are processed for the following purposes:

• processing applications and feedback;
• provision of services and consultations;
• communication with the User;
• improving the quality of the Site;
• conducting analytics and statistics;
• compliance with the requirements of the legislation of the Republic of Kazakhstan.

4. LEGAL GROUNDS FOR PROCESSING

Processing of personal data is carried out on the basis of:

• User consent;
• necessity of fulfilling a contract or providing services;
• requirements of the legislation of the Republic of Kazakhstan.

5. TERMS OF DATA PROCESSING AND STORAGE

5.1. Processing of personal data is carried out using automated and non-automated means.

5.2. Personal data are stored no longer than is necessary for the purposes of processing, unless otherwise provided by law.

5.3. Data can be stored on servers located in the territory of the Republic of Kazakhstan and/or with trusted service providers.

6. DATA TRANSFER TO THIRD PARTIES

The Operator is entitled to transfer personal data to third parties in the following cases:

• with the consent of the User;
• to fulfill obligations to the User;
• at the request of state bodies within the framework of legislation.

Third parties can be analytics services, CRM systems, messengers and other contractors.

7. USE OF COOKIE FILES

7.1. The Site uses cookies for:

• correct operation of the site;
• analysis of user behavior;
• improving user experience.

7.2. The User can disable cookies in the browser settings.

8. USER RIGHTS

The User has the right to:

• receive information about their personal data;
• require clarification, blocking or deletion of data;
• withdraw consent to data processing;
• send a request to: info@legko.company.

9. PROTECTION OF PERSONAL DATA

The Operator takes the necessary organizational and technical measures to protect data, including:

• restriction of access to data;
• use of secure connections;
• regular updating of security systems.

10. DEADLINES FOR RESPONDING TO REQUESTS

The Operator considers User requests within 30 calendar days.

11. POLICY CHANGES

The Operator is entitled to make changes to the Policy. The current version is always posted on the Site.

12. CONTACTS

For questions regarding the processing of personal data: