Privacy Policy

2. Data we collect

We ask only for data needed to consider a technical or commercial enquiry. Do not upload identity documents, special-category personal data or another person's data unless it is necessary for the enquiry and you are authorised to provide it.

• full name, company name, telephone number and email address for communication;
• enquiry details: manufacturer, model or part number, quantity, task description and equipment parameters;
• the name, metadata and contents of a voluntarily attached file;
• technical information needed to secure the form: submission time, website language, IP address or a derived identifier and anti-spam data.

3. Purposes and legal basis

We process data to receive and verify an enquiry, contact the sender, prepare a proposal or response, maintain necessary business correspondence, secure the form and prevent spam. We do not use the data for marketing mailings without separate consent.

The main legal basis for processing form data is your express consent. By ticking the checkbox before submitting, you consent to the collection and processing of the data listed in this Policy for these purposes.

4. Consent terms and processing operations

Consent applies until the purpose of the enquiry is achieved, unless a different period is required by the legislation of the Republic of Kazakhstan or by contractual relations. It covers information about the operator, the data list, purposes, the possibility of transfer to technical providers, cross-border transfer conditions and the absence of public dissemination.

We may collect, record, organise, store, update, use, transfer to the necessary extent, block and delete data — only within the stated purposes and the law.

5. Third parties and transfers outside the Republic of Kazakhstan

We do not sell personal data or publish it in publicly available sources. Access may be given to CORPO personnel and technical providers where necessary for website operation, receipt and delivery of an enquiry, information-security support or fulfilment of the enquiry.

No cross-border transfer of personal data is made when the form is submitted in its standard flow. If a specific enquiry requires work with a foreign manufacturer, supplier or logistics partner, CORPO will obtain the data subject's separate consent in advance or rely on another ground expressly provided by the legislation of the Republic of Kazakhstan.

6. Retention and deletion

Data and attachments are retained no longer than necessary to consider the enquiry, continue business correspondence and fulfil related obligations. Where a document has a mandatory statutory retention period, that period applies.

After the purpose of processing has been achieved, data are deleted or anonymised in accordance with the law and CORPO's internal procedures.

7. Data protection

CORPO applies legal, organisational and technical safeguards proportionate to the processing: it restricts access, maintains confidentiality, controls access to information systems and responds to incidents as required by law.

8. Your rights

• to know whether your data are held and the purposes, sources, methods and periods of processing;
• to receive information about the data being processed;
• to request correction, completion, blocking or deletion of inaccurate data or data processed in breach of the law;
• to withdraw consent, except where withdrawal is limited by the legislation of the Republic of Kazakhstan or an unfulfilled obligation;
• to apply to the authorised body or a court to protect your rights.

9. Requests and withdrawal of consent

Write to legal@corpo.kz from the address used for the enquiry and explain your request: access, correction, deletion, blocking or withdrawal of consent. To protect data from unauthorised access, we may ask for reasonable proof of identity or authority of a representative.

Information in response to a request, or a reasoned refusal, is provided within the periods established by the legislation of the Republic of Kazakhstan. On withdrawal of consent, processing stops within the statutory period except where retention is mandatory or another lawful ground applies.

10. Cookies and technical logs

The website does not use advertising or behavioural-analytics cookies. When the website is accessed, hosting and security tools may process technical access logs, including an IP address, date and time, for security, diagnostics and abuse prevention.

11. Changes to this Policy

We may update this Policy when the service, processing activities or legislation changes. The current version is always published on this page with its effective date.