Policy on the Collection, Processing and Protection of Personal Data
Version of 5 October 2026
This is a translation. In case of any discrepancy, the Russian version published at velox.kz/privacy prevails.
1. General provisions
1.1. This Policy sets out how personal data of users of the website velox.kz, including its Kazakh and English versions (the “Website”), are collected, processed and protected. The Policy has been prepared in accordance with Law of the Republic of Kazakhstan No. 94-V of 21 May 2013 “On Personal Data and Their Protection” (the “Law”).
1.2. The owner and operator of the personal data is VELOX KZ LLP (the “Operator”). Address: 3 Baisultanov St, Akzhar microdistrict, Almaty 050027, Republic of Kazakhstan. E-mail for requests: sergey@tutooffgrid.com.
1.3. By submitting a form on the Website, the user confirms that they have read this Policy and consents to the processing of their personal data on its terms. The Website can be used without submitting any forms and without providing any information about oneself.
1.4. The Website is not intended for persons under 18. The Operator does not knowingly collect data of such persons.
2. What data we receive
2.1. Data that the user enters in the Website forms: name; phone or WhatsApp number; details of the planned construction (floor area, location) and the text of the message.
2.2. Correspondence data, if the user contacts us by phone, via WhatsApp or by e-mail.
2.3. Technical data transmitted by the browser: cookies, IP address, device and browser type, pages visited, time and referral source. These data are used in anonymised form for statistics.
2.4. The Operator does not request, and asks users not to enter in the forms, information about health, beliefs, biometric data, identity document numbers or bank card numbers.
3. Purposes of processing
— to respond to an enquiry, prepare an estimate of construction cost and timing, and provide advice;
— to conclude and perform a contract, if the user wishes to do so;
— to improve the Website using anonymised visit statistics.
The Operator does not sell personal data and does not send advertising without the user’s separate consent.
4. Legal grounds for processing
Personal data are processed on the basis of the user’s consent (Articles 7 and 8 of the Law), to conclude and perform a contract with the user, and where processing is required by the legislation of the Republic of Kazakhstan (Article 9 of the Law).
5. Services through which data pass
5.1. To operate the Website and receive enquiries, the Operator uses services that process data on its behalf: the Tilda website builder (hosting of the Website and form handling), Telegram (notifications of new enquiries), Google Workspace (enquiry records and e-mail), and Yandex Metrica (visit statistics, including the Webvisor tool, which records visitor actions on the page).
5.2. The servers of these services may be located outside the Republic of Kazakhstan. By submitting a form, the user consents to the cross-border transfer of their personal data to the extent and for the purposes set out in this Policy (subparagraph 1) of paragraph 3 of Article 16 of the Law).
5.3. Data are disclosed to other persons only in cases provided for by the legislation of the Republic of Kazakhstan or with the user’s consent.
6. Retention and destruction
6.1. Data are kept until the purposes of processing are achieved. If no contract is concluded, enquiry data are kept for no longer than three years from the user’s last contact. If a contract is concluded, data are kept for the periods established by the legislation of the Republic of Kazakhstan for contractual, accounting and tax records.
6.2. Once the purposes of processing are achieved, the retention period expires, or upon the user’s justified request, the data are destroyed, except where their retention is required by law.
7. Cookies
The Website uses cookies necessary for its operation and cookies of analytics services. The user can block or delete cookies in the browser settings; some Website functions may then not work properly.
8. Data protection
8.1. The Operator takes legal, organisational and technical measures to protect personal data (Article 22 of the Law): access to the data is limited to persons who need it to handle enquiries; data are transmitted from the Website over a secure connection (HTTPS); service accounts are protected and monitored.
8.2. If a personal data security breach is detected, the Operator notifies the authorised body in the manner established by the Law.
8.3. The person responsible for organising the processing of personal data is appointed by order of the Operator. Requests to this person are sent to the e-mail address stated in paragraph 1.2.
9. User rights
In accordance with Article 24 of the Law, the user has the right:
— to know whether the Operator processes their personal data, and to receive information on the purposes, sources and methods of processing, the list of data and the retention periods;
— to request amendment and supplementation of their data upon presentation of supporting documents;
— to request blocking of their data if there is information that the conditions of their collection and processing have been breached;
— to request destruction of their data collected and processed in breach of the law, and in other cases established by law;
— to withdraw consent to the collection, processing and cross-border transfer of personal data, except in the cases provided for by paragraph 2 of Article 8 of the Law;
— to protection of their rights and legitimate interests, including compensation for moral and material damage.
To exercise these rights, it is sufficient to write to the Operator’s e-mail or postal address stated in paragraph 1.2. The Operator responds within the periods established by the legislation of the Republic of Kazakhstan. Withdrawal of consent does not affect the lawfulness of processing carried out before it was received.
10. Final provisions
10.1. The Operator may amend this Policy. A new version takes effect upon publication on the Website unless it states otherwise. The current version is always available at velox.kz/privacy.
10.2. Matters not covered by this Policy are governed by the legislation of the Republic of Kazakhstan.