Privacy policy
Privacy
1. General provisions
1.1. This Policy sets out how the personal data (hereinafter — PD) of individuals who use the meizer.kz website (hereinafter — the Site) is processed and protected. 1.2. The Operator processes PD on the basis of Article 9 of the Law of the Republic of Kazakhstan “On Personal Data and Its Protection”, having obtained separate active consent given by ticking a checkbox when a form is submitted on the Site. Without that active step on your part (ticking the box) the form cannot be submitted. 1.3. Use of the Site constitutes acceptance of this Policy. If you do not agree with its terms, please stop using the Site.
2. What data we collect
2.1. Personal data: name, telephone number, email, delivery/installation address, room dimensions (provided by you voluntarily when you fill in a request). 2.2. Technical data: IP address, device type, browser, cookies, geolocation data (collected automatically when you visit the Site). 2.3. Contract data: contract details, order history, payment information (excluding bank card data).
3. Purposes of processing
3.1. Handling requests and enquiries (feedback). 3.2. Performance of contractual obligations (manufacture, delivery and assembly of furniture). 3.3. Tax accounting and reporting (in accordance with the Tax Code of the Republic of Kazakhstan). 3.4. With your separate consent: sending advertising material, promotions and news (marketing purposes).
4. Retention periods
| Type of data | Retention period | Legal basis |
|---|---|---|
| Data from requests (no contract) | 1 year from the last contact | Law of the Republic of Kazakhstan “On Personal Data”, Article 13 |
| Data from completed contracts | 3 years after the contract ends | Tax Code of the Republic of Kazakhstan, Article 85 |
| Cookies | Up to 13 months, or until you clear them | Technical necessity |
4.1. Once these periods expire the data is deleted or anonymised automatically, unless the law provides otherwise.
5. Disclosure to third parties
5.1. We do not sell your data. It may be passed on only to:
- Transport companies: to deliver your order (name, telephone and address only).
- State authorities of the Republic of Kazakhstan: on a reasoned request (courts, the prosecutor’s office, the tax authorities).
- Partner banks: to arrange instalment payments (with your separate consent).
- IT contractors: for technical support of the Site (under a confidentiality agreement).
5.2. Cross-border transfer: where Google Analytics, Yandex.Metrica or hosting outside Kazakhstan is used, your data (IP, cookies) may be processed on servers located in the USA, Europe or Russia. By using the Site you consent to such transfer.
6. Cookies
6.1. The Site uses cookies so that it works correctly and so that we can analyse traffic. You can disable cookies in your browser settings, but some features of the Site may then be unavailable. 6.2. The Site uses:
- Essential cookies: for security and sign-in.
- Analytics cookies: Google Analytics, Yandex.Metrica (pseudonymised data).
- Marketing cookies: only with your consent (Facebook Pixel and similar).
7. Your rights (Article 14 of the Law of the Republic of Kazakhstan)
7.1. You have the right:
- Of access: to find out what data about you is being processed (free of charge).
- Of rectification: to require incorrect data to be corrected.
- Of erasure (the “right to be forgotten”): to require data to be deleted if it has been processed unlawfully or if you withdraw your consent.
- To withdraw consent: at any time (clause 7.2).
- To object: to processing for marketing purposes.
7.2. How to withdraw consent: send an email to info@meizer.kz or a WhatsApp message to +7 (777) 803-82-83 marked “Withdrawal of consent to the processing of PD”. We will delete your data within 30 calendar days, except for data we are required by law to keep (contracts, tax records).
8. Security measures
8.1. We apply:
- SSL encryption of data in transit (HTTPS).
- Restricted access to data (passwords, two-factor authentication for administrators).
- Data backups.
- Regular software updates to protect against intrusion.
9. Dispute resolution
9.1. Disputes are settled by negotiation. A pre-action (claim) procedure is mandatory. 9.2. If a settlement cannot be reached, the dispute goes to the court at the Operator’s place of business, in the manner laid down by the law of the Republic of Kazakhstan.
10. Changes to this Policy
10.1. The Operator may amend the Policy without notifying Users, by publishing the new version at meizer.kz/privacy. 10.2. The current version is always available from the link in the Site footer.
Note: this document has been drawn up in accordance with the Law of the Republic of Kazakhstan “On Personal Data and Its Protection” No. 94-V of 21 May 2013, as amended and supplemented.