Privacy Policy for kzmemorental.live

Last Updated: [Insert Date]

This Privacy Policy describes how kzmemorental.live (the "Site", "we", "us", or "our") collects, uses, and discloses your personal information when you visit, use our services, or make a purchase from kzmemorental.live (the "Service"). By using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Service.

We operate in compliance with the laws of the Republic of Kazakhstan, including the Law "On Personal Data and Their Protection" (No. 94-V, dated May 21, 2013) and other applicable regulations. We are committed to protecting your privacy and ensuring the security of your personal data.

1. Information We Collect

We collect several types of information to provide and improve our Service to you. This includes:

Personal Identification Information: When you create an account, place an order, or contact us, we may collect your full name, email address, phone number, billing and shipping address, and payment details (such as credit card information, though processed through secure third-party gateways).
Account Credentials: Username, password, and any other login details you provide.
Device and Usage Information: We automatically collect data about your device, including IP address, browser type and version, operating system, referring URLs, pages viewed, time spent on pages, and clickstream data. This helps us analyze trends and administer the Site.
Cookies and Tracking Technologies: We use cookies, web beacons, and similar technologies to enhance your experience, remember preferences, and for analytics. You can control cookies through your browser settings.
Communications: Records of any correspondence you send us, including customer support inquiries.
Transaction Data: Details of purchases you make, rental terms, and payment history.

2. How We Use Your Information

We use the collected information for the following purposes:

To provide, operate, and maintain our Service, including processing rentals and transactions.
To communicate with you regarding your account, orders, customer service issues, and policy updates.
To personalize your experience on our Site, such as showing relevant products or rental options.
To process payments and prevent fraud. We use secure third-party payment processors, and we do not store full credit card numbers on our servers.
To send marketing communications (with your consent) about new products, promotions, or services. You may opt out at any time.
To comply with legal obligations under Kazakh law, including data retention and disclosure requirements.
To improve our website and services through analysis and research.
To enforce our Terms of Service and other agreements.

3. Legal Basis for Processing (For Kazakh and International Users)

We process your personal data based on the following legal grounds:

Consent: When you voluntarily provide information and agree to this policy.
Contractual Necessity: Processing required to fulfill rental agreements, purchases, or other contractual obligations.
Legal Obligation: Compliance with laws of Kazakhstan, such as data retention or disclosure to authorities.
Legitimate Interests: To operate and improve our business, provided your rights do not override these interests.

If you are from the European Economic Area (EEA) or other jurisdictions with similar laws, we rely on these bases as applicable. You have the right to withdraw consent at any time where processing is based on consent.

4. Sharing and Disclosure of Information

We do not sell your personal information to third parties. We may share your data in the following circumstances:

Service Providers: We engage trusted third parties to perform functions such as payment processing, hosting, email delivery, analytics, and customer support. These providers are contractually bound to protect your data and use it only for specified purposes.
Legal Compliance: We may disclose information if required by law, court order, or governmental request, including to comply with Kazakh data protection regulations.
Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction. You will be notified of any change in ownership.
Protection of Rights: To protect our rights, property, or safety, or that of our users or the public, as permitted by law.
Aggregated Data: We may share non-personal, aggregated data for analytics or marketing purposes.

5. Data Retention

We retain your personal information only as long as necessary for the purposes outlined in this policy, or as required by Kazakh law. Specifically:

Account data is retained until you request deletion or closure of your account, subject to legal retention periods (e.g., financial records for 5 years as per tax laws).
Transaction data is kept for the duration of the rental or purchase agreement and for a reasonable period thereafter to handle disputes or comply with laws.
Communications records may be kept for up to 3 years.
Analytics and usage data may be retained in aggregated form indefinitely.

When data is no longer needed, we securely delete or anonymize it.

6. Security of Your Information

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These include:

Encryption of data in transit using SSL/TLS protocols.
Secure storage on servers with restricted access.
Regular security audits and vulnerability assessments.
Employee training on data protection practices.

However, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security, but we strive to protect your data.

7. Your Rights Under Kazakh Law and GDPR

Depending on your location, you may have the following rights regarding your personal data. We comply with the Law of Kazakhstan "On Personal Data and Their Protection" and, where applicable, the General Data Protection Regulation (GDPR):

Right to Access: You can request a copy of the personal data we hold about you.
Right to Rectification: You can request correction of inaccurate or incomplete data.
Right to Erasure (Right to be Forgotten): You can request deletion of your data, subject to legal exceptions (e.g., ongoing transactions or legal obligations).
Right to Restrict Processing: You can request limitation on how we use your data in certain circumstances.
Right to Data Portability: You can request a machine-readable copy of your data to transfer to another service.
Right to Object: You can object to processing based on legitimate interests or direct marketing.
Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
Right to Lodge a Complaint: You have the right to complain to the authorized body for personal data protection in Kazakhstan (e.g., the Committee of Information Security under the Ministry of Digital Development, Innovation and Aerospace Industry) or your local data protection authority.

To exercise any of these rights, please contact us using the details in Section 11. We will respond within 30 days, as required by Kazakh law.

8. Cookies and Tracking Technologies

We use cookies and similar technologies to improve functionality and analyze usage. Types of cookies we use:

Essential Cookies: Necessary for basic site functions, such as authentication and session management.
Preference Cookies: Remember your settings and preferences.
Analytics Cookies: Help us understand how users interact with the Site (e.g., Google Analytics).
Marketing Cookies: Used to deliver relevant advertisements (only with your consent, where required).

You can manage cookie preferences through your browser settings. Disabling certain cookies may affect site functionality. For more details, see our Cookie Policy (if applicable).

9. Third-Party Services

Our Service may contain links to third-party websites, payment processors, or tools (e.g., Google Analytics, payment gateways). We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any data.

We use the following third-party services:

Payment processors (e.g., Kaspi.kz, Visa/Mastercard gateways) – they handle payment data according to their own policies and PCI-DSS standards.
Analytics providers (e.g., Google Analytics) – they collect anonymized data about usage.
Email service providers for transactional and marketing emails.

10. International Data Transfers

Your information may be transferred to and processed in countries other than Kazakhstan, including where our service providers are located (e.g., servers in the United States or Europe). We ensure that appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) or adequacy decisions under applicable law, to protect your data. By using our Service, you consent to such transfers.

11. Children's Privacy

Our Service is not intended for individuals under the age of 16 (or the age of majority in Kazakhstan). We do not knowingly collect personal data from children. If you believe a child has provided us with data, please contact us, and we will delete it promptly.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. We will notify you of material changes by posting a prominent notice on our Site or via email (if you have an account). The "Last Updated" date at the top indicates when the policy was last revised. Your continued use of the Service after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Email: privacy@kzmemorental.live
Phone: +7 (7172) 123-456 (Kazakhstan local time, 9:00-18:00, Mon-Fri)
Mailing Address: Data Protection Officer, kzmemorental.live, 050010, Almaty, Republic of Kazakhstan, 123 Abay Avenue, Office 45

We will respond to your inquiry within 30 days.

14. Specific Provisions for Kazakhstan Residents

In compliance with the Law of the Republic of Kazakhstan "On Personal Data and Their Protection":

We process your data only with your consent, unless otherwise permitted by law.
You have the right to access information about our data processing activities.
You can demand the cessation of processing and deletion of your data, subject to legal requirements.
We store your data primarily on servers located within Kazakhstan or in countries with adequate protection levels.
We appoint a responsible person for data protection (Data Protection Officer) as per legal requirements.
In case of data breaches, we will notify you and the competent authority within 48 hours, as required by law.

For any disputes, you may contact the authorized body for personal data protection in Kazakhstan: Committee of Information Security, Ministry of Digital Development, Innovation and Aerospace Industry, address: 010000, Nur-Sultan, 8 Mangilik El Avenue, Phone: +7 (7172) 74-20-90.

15. Governing Law

This Privacy Policy is governed by and construed in accordance with the laws of the Republic of Kazakhstan. Any disputes relating to this policy shall be subject to the exclusive jurisdiction of the courts of Almaty, Kazakhstan.

16. Definitions

"Personal Data" means any information relating to an identified or identifiable natural person, as defined by Kazakh law.
"Processing" means any operation performed on personal data, such as collection, recording, storage, use, or deletion.
"Service" refers to the website kzmemorental.live and all related services offered.
"User" refers to any individual who accesses or uses the Service.

By using kzmemorental.live, you acknowledge that you have read and understood this Privacy Policy. Thank you for trusting us with your personal information.