Privacy policy

This Privacy Policy explains how [QORGAU Paints LLP] (the "Operator", "we") collects, uses, stores, shares and protects the personal data of users of qorgau.kz, qorgau.kg, qorgau.asia and of the myQORGAU partner portal (ws.qorgau.kz). It is based on the Law of the Republic of Kazakhstan "On Personal Data and Their Protection" No. 94-V of 21 May 2013.

• Name: [QORGAU Paints LLP]
• BIN: [____________]
• Address: [____________]
• E-mail: [____________]
• Person responsible for personal data processing: [name, position]

We process only the data we need: myQORGAU account data (name, e-mail, phone, company, position), "Become a partner" applications (company name, BIN/IIN, contact details), site requests (name, phone, e-mail, calculation parameters), project materials and drawings, technical data (IP address, browser details, action log, cookies).

Portal registration and sign-in, account recovery; reviewing partner applications; handling site requests; fire protection calculations (including the QORGAU AI service); loyalty bonuses; preparing documents; notifications; security; compliance with the laws of Kazakhstan.

We process data based on your consent (Article 8 of the Law), a contract with you or your organisation, and legal requirements of Kazakhstan. You may withdraw consent at any time (section 10).

Under paragraph 2 of Article 12 of the Law, personal data of citizens of Kazakhstan are stored in a database located in Kazakhstan: [hosting provider, city]. Retention: accounts — while active and [3 years] after deactivation; applications — [1–3 years]; projects and documents — contract term plus [5 years]; logs — [1 year].

We do not sell personal data. Data are shared only as needed: with the hosting provider, the e-mail (SMTP) service, the QORGAU AI drawing recognition service, Telegram (staff notifications about site requests) and public authorities where required by law. [List actual recipients.]

Some services may process data outside Kazakhstan. Cross-border transfer follows Article 16 of the Law; the primary database stays in Kazakhstan. [List countries.]

Under Article 24 of the Law you may access your data, request correction, blocking or deletion, withdraw consent, and complain to the authorised data protection body or a court.

Send your request to [____________] or by post to [____________]. We will reply within the period set by the Law.

We apply legal, organisational and technical measures: HTTPS, hashed passwords, one-time reset links, role-based access, an action log, request rate limits and backups.

The site uses only a necessary cookie that remembers your language. The portal uses access_token and refresh_token cookies for sign-in. No analytics or advertising cookies are used.

We may update this Policy. The new version takes effect when published on this page unless stated otherwise.

Questions about personal data: [e-mail], [phone], [postal address].