Privacy Policy

Governing Body

Our data protection practices are overseen by the Ministry of Digital Development, Innovations and Aerospace Industry of the Republic of Kazakhstan (“the Ministry”), the authorised supervisory authority for personal data.

Appointment of a Data Protection Officer (DPO)

We have appointed a DPO responsible for ensuring compliance, liaising with regulators, and handling any privacy concerns or requests from data subjects or authorities.

Collection and Consent

We collect personal data only with your informed consent—or where necessary to fulfil contractual or legal obligations. Your consent covers:

• Full names and identifying numbers (operator and subject)
• The terms and duration of consent
• Whether data may be shared with third parties or transferred abroad
• Whether data may be published publicly
• The categories of personal data collected
• Any additional details either required by law or defined by us

Purpose and Scope of Processing

Your data is processed solely for defined and lawful purposes, such as:

• Providing correspondence, support, or services
• Operating and maintaining our website and systems
• Ensuring regulatory compliance
• Administering analytics and system monitoring
• Managing marketing communications (when authorised)

We do not collect or process data that is excessive or unrelated to the stated purpose.

Confidentiality Obligations

All personal data is treated with strict confidentiality. Only authorised personnel or approved third-party processors may access it, and only if necessary.

Security Safeguards

We protect your data through robust organisational and technical measures, including:

• Role-based access restrictions
• Password and encryption protocols
• Staff training on data security
• Regular system audits and vulnerability assessments
• Timely detection and response to breaches
• Notification to users and the Ministry within one business day if a data breach occurs

These measures comply with the requirements set forth in Kazakh law.

Data Retention

Data is retained only while necessary to meet its intended use or required by law; after which, it is securely deleted or anonymised. Consistent with Kazakhstan’s retention principles

Cross-Border Transfers

We only transfer personal data outside Kazakhstan to countries that provide adequate protection or where appropriate legal safeguards have been implemented.

Processing by Third Parties

Where we engage third-party providers (e.g., hosting, analytics), they are bound by contractual obligations to meet the same data protection standards we enforce.

Profiling and Automated Processing

We do not profile users for targeted advertising based on sensitive data (race, religion, health, etc.). No decisions affecting you are made in a fully automated fashion.

Rights of Data Subjects

You have the right to:

• Access your personal data
• Request correction of inaccuracies
• Withdraw consent at any time
• Request deletion where applicable
• Restrict or object to processing
• Be informed about any data transfers or disclosures
• Lodge complaints with the Ministry if unresolved by us

All requests can be addressed to the DPO or contact details below.

Policy Updates

We may update this policy to reflect legal or technical changes. The current version will always appear on our site. Continued use indicates acceptance of any amendments.

Governing Law and Dispute Resolution

This policy is governed by the laws of Kazakhstan. Any disputes will be resolved under the jurisdiction of Kazakh courts.

Contact Information

Contact Email: contact@accorditservices.com
Contact Address: 280 Bayzakova Street Bostandyk District, Almaty City
Business Number: 220940005246