Privacy Policy

Publication view counter

A view is counted after 2 seconds in a visible tab. To prevent repeats, the browser stores a random technical identifier, and the server stores its hash and the view time. Reopening the same material within 30 minutes does not increase the counter. A hash of the IP address limits automated requests; the original IP address is not written to the counter database. Repeat records older than 48 hours and expired rate limit records are deleted on the next counter request. Aggregate totals are retained. These are views, not unique visitors. The counter is separate from form data and does not send it to advertising services.

Data Controller and Contact

The draft identifies the data controller as STARTWORK LLP, Business Identification Number (BIN) 170840017819. Address: 34 A Gogol Street, Karaganda. Contact for personal data matters: startworkholding@gmail.com.

This document applies to the enquiry form on the SMART AUYL website. The data controller still needs to approve the proposed organisational retention periods and deletion procedures.

Data and Purposes

The form includes first and last name, email, applicant role, selected materials and area of interest, and optional question text. This information is needed to reply and send requested materials. Evidence of consent relates to the same enquiry.

Public PDFs are available without completing the form. The company uses email to reply and continue correspondence about your enquiry. News and advertising mailing lists are not provided.

How the Form Works

After you click “Send” and required fields are validated, the browser submits the enquiry to FormSubmit for delivery to startworkholding@gmail.com. The message includes acceptance of consent and the document version. The form does not save data in persistent browser storage. A success message confirms acceptance by the sending service; it does not confirm that the company has read the message.

Users send direct messages to the specified Gmail address themselves through their own email service. Such messages are subject to the terms of the email services used; this form does not confirm that such correspondence is stored in Kazakhstan.

Storage and Recipients

Enquiry recipients are authorised STARTWORK LLP employees, FormSubmit and Gmail. This method involves transfer to external services; cross-border transfer may occur. FormSubmit states that it retains submission archives for 30 days. Storage of FormSubmit and Gmail data in Kazakhstan has not been confirmed.

No separate private storage on a server in Kazakhstan has been connected yet. The location of the website's pages does not itself determine where enquiries are stored. Google Docs and Google Sheets have not been connected as storage.

Retention and Deletion

Data is intended for processing a specific enquiry and must not be retained longer than necessary for that purpose, except as required by law. A limit of 6 months from receipt is proposed for launch, with earlier deletion when the enquiry is concluded or consent is withdrawn, unless there are lawful grounds for further processing. Evidence of consent is retained for the same period. Residual backups are cleared within 30 days of deletion from the active database and are not used for new purposes.

Your Rights

You may request information about the processing of your data, correction, restriction or deletion in cases provided by law, and withdraw consent. Contact: startworkholding@gmail.com; postal address: 34 A Gogol Street, Karaganda.

Provide the email address used for your enquiry and the details of your request. The company must consider such requests within statutory deadlines. In a dispute, you may contact the competent authority or a court.

Evidence of Consent and Security

The form includes acceptance of consent and the text version in the submitted message. The website has no in-house server-side consent log. A separate record of the receipt date, an immutable copy of the text and an enquiry identifier remains a task for future private storage.

The data controller also needs to confirm access restrictions, security measures, deletion procedures and backup handling. This document does not state that these measures have already been implemented.