This is a translation. In case of any discrepancy between language versions, the Russian text prevails.
1. General provisions
1.1. This Privacy Policy (the “Policy”) sets out how personal data of visitors to https://hanaka.kz/ (the “Site”) is collected, processed, stored and protected.
1.2. Data operator: Individual Entrepreneur “KGD”, Chetinelli Gulmira Daulenovna, IIN 740116401009, address: Republic of Kazakhstan, Almaty, Medeu district, 259/1 Ondasynov Street (the “Operator”).
1.3. Personal data is processed in accordance with the Law of the Republic of Kazakhstan “On Personal Data and Its Protection” No. 94-V of 21 May 2013, as amended.
1.4. Consent to the collection, processing and cross-border transfer of personal data is given by the visitor through an affirmative action — ticking a box when submitting a form on the Site. Without that tick the form cannot be submitted. The text of the box reads:
“I permit the collection and processing of my personal data in accordance with the Privacy Policy.”
Ticking this box means consent to everything set out in this Policy: to the collection and processing of the data listed in clause 2.1, to its cross-border transfer (clause 4.3) and to the retention period stated in clause 5.2. The Operator is named in clause 1.2.
1.5. This Policy applies only to data the Operator receives through the Site.
2. What data is collected
2.1. When a contact form is submitted, the Operator receives:
- the name given by the visitor;
- the telephone number;
- the IP address, date and time of submission — these are added automatically to the notification.
2.2. The Site uses technical cookies required for it to work: session and display settings. The services listed in clause 2.6 set their own cookies.
2.3. Comments on the Site are closed. No commenter data is collected.
2.4. The Operator does not collect through the Site: identity document data; health information; biometric data; payment details. No payment is taken through the Site.
2.5. The Operator does not collect personal data of persons under 18. If such data has been received, it is destroyed upon request of a legal representative.
2.6. To assess the usability of the Site and the effectiveness of advertising, the Operator uses third-party analytics and advertising services:
- Google Analytics — Google LLC, servers in the USA;
- Meta Pixel — Meta Platforms Inc., servers in the USA;
- Yandex Metrica — servers in the Russian Federation.
These services set their own cookies and collect anonymised information about visits: pages viewed, referral source, device and browser type, approximate location by IP address. The Operator does not link this information to the name and telephone number left in a form. Collection can be refused through the browser by disabling cookies in its settings.
3. Why data is collected
3.1. Name and telephone number — to contact the person who submitted a request: answer a question, share the schedule, confirm attendance at a session.
3.2. Name and telephone number are also used to inform people about schedule changes and about upcoming sessions and events at Hanaka. You may opt out at any time by replying to a message or writing to mail@hanaka.kz.
3.3. IP address, date and time — to protect against automated submissions and to confirm that consent was obtained.
4. Who the data is shared with
4.1. The Operator does not sell personal data and does not pass it to third parties for advertising purposes.
4.2. Service providers that keep the Site running and enable contact with visitors have technical access to the data:
| Who | What they receive | Server location |
|---|---|---|
| Hosting provider (Hoster.KZ) | all Site content, including stored form submissions | Kazakhstan |
| Mailbox on the hanaka.kz domain | name, telephone number, IP address, date of request | Kazakhstan |
| Messengers (WhatsApp / Telegram) | name, telephone number, message history | USA / EU / UAE |
| Services listed in clause 2.6 | anonymised visit information, IP address | USA, Russian Federation |
4.3. Cross-border transfer. Some of these services are located outside the Republic of Kazakhstan. By ticking the consent box, the visitor consents to the cross-border transfer of their data to the extent necessary to contact them.
4.4. Data may be disclosed to state authorities of the Republic of Kazakhstan in cases expressly provided for by law.
5. Where and how long data is stored
5.1. The Site’s main database is located on a server within the Republic of Kazakhstan, as required by clause 2 of Article 12 of the Law.
5.2. Retention period: until the purposes of processing are achieved or until the data subject withdraws consent, but no longer than 5 (five) years from the visitor’s most recent contact. After that period the data is destroyed.
5.3. Data is destroyed earlier: upon withdrawal of consent; at the visitor’s request; when the purpose of collection has been achieved.
6. Visitor rights
6.1. A visitor has the right (Article 24 of the Law) to:
- know what data the Operator holds about them, where it came from and how it is processed;
- demand correction or completion of their data;
- demand blocking of their data where the conditions of processing have been breached;
- demand destruction of their data;
- withdraw consent to the collection and processing of their data at any time.
6.2. How to do this: write to mail@hanaka.kz or to WhatsApp at +7 (701) 455-79-59, stating the name and telephone number left on the Site.
6.3. Statutory time limits:
| Request | Time limit |
|---|---|
| Correct or complete data; destroy it where correction is impossible | 1 working day |
| Block data where the conditions of processing have been breached | 1 working day |
| Destroy data collected in breach of the law | 1 working day |
| Withdraw consent | 15 working days — the Operator ceases processing or gives a reasoned refusal |
| Provide information about the data being processed | 15 working days |
Basis: sub-clause 8 of clause 2 of Article 25 of the Law (one-day limits) and clause 7 of Article 8 of the Law (withdrawal of consent).
7. How data is protected
7.1. Access to the Site’s administration panel is limited to a small number of people and is password-protected.
7.2. The list of persons with access to personal data has been approved by the Operator. Those persons have signed a non-disclosure undertaking.
7.3. From the moment a personal data security breach is discovered, the Operator notifies the authorised body within one working day — sub-clause 8 of clause 2 of Article 25 of the Law.
8. Changes to the Policy
8.1. The Operator may amend the Policy. The current version is always published at https://hanaka.kz/en/privacy-policy-en/.
8.2. The version date is given at the end of the document.
8.3. The Policy is published in Kazakh, Russian and English. In case of any discrepancy, the Russian text prevails.
9. Operator contact details
Individual Entrepreneur “KGD”
Chetinelli Gulmira Daulenovna
IIN: 740116401009
Address: Republic of Kazakhstan, Almaty, Medeu district, 259/1 Ondasynov Street
Email: mail@hanaka.kz
Telephone: +7 (701) 455-79-59
Version of 11 September 2026.