Privacy policy

What data we receive

From the request form: name, email, phone, company and the "What you need" comment. From the "Call me back" form: name (optional) and phone.

Together with the request, service data is sent: the language and address of the page it was sent from, which form it was and where the button was, UTM tags, the first touch (the first page of the visit, the referrer and the time) and the time spent filling in the form.

The server also records the IP address and browser details (user agent) in the request log. They are not included in the request email.

In your browser the site keeps in sessionStorage the first page of the visit, the referrer and the time (kzr_first) and, if you came via a link with UTM tags, those tags (kzr_utm). The browser deletes this data when you close the tab; it reaches the server only together with a request.

The site uses Yandex Metrica. It uses cookies and receives the IP address, device and browser details, Webvisor session recordings, a click map, link clicks, the addresses of the pages viewed and the referring source, and actions on the site, such as clicking the phone number or sending a form. Webvisor does not record what you type into form fields: the fields are hidden from it with special markup.

Why we need the data

To reply to your request, to protect the form from spam and to understand how the site is used and where requests come from.

Legal basis

We process data from the forms on the basis of your consent. You give it by an action: under the button of every form it says that by clicking it you agree to this policy and to the processing of your data to answer your request.

Where we store data and for how long

The request log (form fields, service data, IP address and browser details) is kept with the hosting provider hoster.kz in Kazakhstan, outside the website's web root: it cannot be opened through the site. Log entries are kept for no longer than 12 months and are deleted automatically. Requests that the server treats as spam are logged too.

To limit the number of requests from one IP address, the server keeps daily counter files. They store a hash of the IP address (HMAC-SHA256), not the address itself; files older than 3 days are deleted automatically.

Requests with many links are not emailed right away: they are collected into a digest for the day, and the digest arrives at info@kazrubber.kz as one email. The digest file is deleted after sending and in any case is kept for no longer than 12 months.

The request email arrives at info@kazrubber.kz with the form fields, page, language, request number, date and time. This mailbox is with the same hosting provider hoster.kz and is read by a company employee.

Nobody deletes the correspondence in info@kazrubber.kz automatically: we keep it as long as it is needed to reply and to work together, and delete it on request.

The hosting provider also keeps web server logs, which record requests to the site. How long they are kept depends on the hosting settings.

Who receives the data

Yandex LLC (Russia) receives the Yandex Metrica data. This is a cross-border transfer: the data leaves Kazakhstan.

The contractor who maintains the site also has access to the hosting, where the request log and the info@kazrubber.kz mailbox are kept.

Your rights

You can find out what data we hold about you, correct or delete it and withdraw your consent. Write to info@kazrubber.kz - we will provide information about your data within 3 working days, correct it on the basis of supporting documents within 1 working day and, after you withdraw your consent, stop processing it within 15 working days.

Changes to this policy

If our practice changes, we will update the policy and give it a new version number and date.