Privacy and Personal Data Processing Policy
Version: September 1, 2025

1. General Provisions
1.1. This Privacy and Personal Data Processing Policy (hereinafter referred to as the "Policy") defines the procedures for collecting, storing, using, and protecting personal data of users of the website https://pavdev.net (hereinafter referred to as the "Website"), as well as measures to ensure the security of such data in accordance with the legislation of the Republic of Kazakhstan, including the Law of the Republic of Kazakhstan dated May 21, 2013 No. 94-V "On Personal Data and Their Protection."
1.2. By using the Website, the User confirms that they have read and agree to the terms of this Policy.
1.3. If the User does not agree with the terms of the Policy, they must refrain from using the Website and providing their personal data.

2. Terms and Definitions
2.1. Personal Data — information relating to an identified or identifiable individual.
2.2. Processing of Personal Data — actions aimed at collecting, storing, modifying, supplementing, using, distributing, anonymizing, blocking, or destroying personal data.
2.3. Operator — the Website owner, responsible for collecting and processing users’ personal data.
2.4. Data Subject (User) — an individual who provides their personal data through the Website.

3. Personal Data Processed
3.1. The Operator may collect and process the following categories of personal data:
  • Full name;
  • Phone number;
  • Email address;
  • Postal address (if delivery is required);
  • Payment data (limited to integrated payment services);
  • Other information voluntarily provided by the User.
3.2. Additionally, anonymized data may be collected automatically, including IP address, cookies, browser data, access times, and pages visited.

4. Purposes of Personal Data Processing
Personal data is processed for:
  • Registration and identification of the User on the Website;
  • Processing orders, providing services, and handling feedback;
  • Sending notifications, newsletters, news, and offers;
  • Improving the quality of service and the Website’s functionality;
  • Compliance with the legislation of the Republic of Kazakhstan.

5. Legal Basis for Processing
5.1. The Operator processes personal data based on:
  • Consent of the data subject;
  • A concluded agreement with the User;
  • Requirements of the applicable legislation of the Republic of Kazakhstan.

6. Transfer of Personal Data to Third Parties
6.1. Personal data may be transferred to third parties only in cases of:
  • Obtaining the User’s consent;
  • Transfer for the execution of a contract (e.g., courier services, banks, payment systems);
  • Requests from authorized government bodies as provided by law.

7. Data Retention
7.1. Personal data is stored for the period necessary to achieve the purposes of processing, but not less than the period established by the legislation of the Republic of Kazakhstan.
7.2. Upon achieving the purposes of processing or at the written request of the data subject, data shall be destroyed or anonymized.

8. Rights of the Data Subject
The User has the right to:
  • Access information about their personal data and the purposes of its processing;
  • Request the correction, supplementation, blocking, or deletion of their personal data;
  • Withdraw consent for personal data processing;
  • Appeal the Operator’s actions to the authorized bodies.

9. Data Security
9.1. The Operator implements necessary organizational and technical measures to protect personal data from unauthorized or accidental access, destruction, alteration, blocking, copying, and dissemination.
9.2. Access to personal data is restricted and provided only to authorized personnel.

10. Use of Cookies
10.1. The Website may use cookies to identify Users, simplify website navigation, and analyze traffic.
10.2. Users can change their browser settings and refuse cookies at any time; however, this may affect the Website’s functionality.

11. Liability
11.1. The Operator is responsible for compliance with the legislation of the Republic of Kazakhstan regarding personal data processing.
11.2. The Operator is not liable for disclosure of personal data caused by third parties.

12. Final Provisions
12.1. This Policy is a public document and is freely available on the Website.
12.2. The Operator reserves the right to make changes to this Policy. The new version comes into effect upon publication on the Website.
12.3. All matters not regulated by this Policy are governed by the legislation of the Republic of Kazakhstan.