Privacy Policy

Last Updated: November 25, 2025

TOO “Zhana Solutions” (hereinafter referred to as “we,” “us,” “our,” or the “Company”), located at 108 Omskaya Street, Almaty, Republic of Kazakhstan, is committed to protecting the privacy and personal data of our website visitors, clients, partners, and other individuals (hereinafter referred to as “you” or “data subjects”) in accordance with the Law of the Republic of Kazakhstan No. 94-V dated May 21, 2013, “On Personal Data and Their Protection” (as amended) (the “Personal Data Law”) and other applicable legislation of the Republic of Kazakhstan. This Privacy Policy explains how we collect, process, store, protect, and disclose your personal data when you interact with our website (zhanasolutions.kz), use our services, or otherwise engage with us.

By accessing our website or providing us with your personal data, you acknowledge that you have read, understood, and agree to the terms of this Privacy Policy. If you do not agree, please refrain from using our website or services.

Definitions

For the purposes of this Privacy Policy, the following terms shall have the meanings ascribed to them under the

Personal Data Law:
Personal Data: Any information related to an identified or identifiable individual (data subject), recorded on electronic, paper, or other tangible media, including but not limited to name, contact details, identification numbers, biometric data, and other details that allow for identification.
Processing of Personal Data: Any actions or set of actions performed with personal data, including collection, accumulation, storage, modification, supplementation, use, dissemination, depersonalization, blocking, and destruction.
Owner of Personal Data Base: The Company, as a legal entity that determines the purpose of personal data processing, the composition of personal data to be processed, and the actions performed with such data.
Operator: The Company or any third party authorized by us to process personal data on our behalf.
Data Subject: The individual to whom the personal data relates.
Consent: Your voluntary, informed, and unambiguous agreement to the processing of your personal data for specific purposes, which may be provided in writing, electronically, or through conclusive actions (e.g., submitting a form).
Biometric Data: Personal data characterizing physiological and biological features of an individual used for identification purposes.
Depersonalization: Actions that make it impossible to attribute personal data to a specific data subject without additional information.
Blocking: Temporary suspension of personal data processing (except for storage) until the circumstances necessitating the blocking are resolved.
Destruction: Actions that make it impossible to restore personal data.

These definitions align with those provided in the Personal Data Law.

Scope and Principles of Personal Data Processing

This Privacy Policy applies to all personal data collected and processed by us through our website, email communications, contact forms, business interactions, or other means related to our operations in the oil and gas sector in Kazakhstan.

We adhere to the following principles in processing personal data, as mandated by the Personal Data Law:

Legality: Processing is conducted only in accordance with Kazakh law and for legitimate purposes.
Purpose Limitation: Personal data is collected and processed solely for specified, explicit, and legitimate purposes and not further processed in a manner incompatible with those purposes.
Confidentiality: We ensure the confidentiality of personal data, especially restricted-access data.
Equality: All data subjects, owners, and operators are treated equally under the law.
Security: We implement measures to protect personal data from unauthorized access, loss, or breach, ensuring the safety of individuals, society, and the state.
Minimization: We collect only the personal data necessary for the intended purposes.
Accuracy: Personal data must be accurate, relevant, and updated as necessary.

Processing without your consent is permitted only in exceptional cases provided by law, such as for law enforcement, state statistics, or international treaties.

Types of Personal Data We Collect

We may collect the following categories of personal data:

Identification Data: Name, surname, patronymic (if applicable), date of birth, identification document details.
Contact Information: Email address, phone number, postal address, company name, and job title.
Professional Data: Information related to your business role, such as in requests for quotations (RFQ), partnerships, or services in the oil and gas sector.
Technical Data: IP address, browser type, device information, cookies, and usage data when you visit our website (see Section 9 for details on cookies).
Biometric Data: Only if necessary for specific services (e.g., access control in secure facilities), with explicit consent.
Other Data: Any additional information you voluntarily provide through forms, emails, or interactions, such as project details or feedback.

We do not intentionally collect sensitive personal data (e.g., relating to health, ethnicity, or political opinions) unless required for legal compliance or with your explicit consent.

How We Collect Personal Data

We collect personal data through:

Direct Interactions: When you submit contact forms, request quotes, sign up for newsletters, or communicate via email/phone.
Automated Means: Through cookies, web beacons, and server logs on our website.
Third Parties: From partners, public sources, or business directories, provided such collection complies with the Personal Data Law.
Business Activities: During contract negotiations, project executions, or partnerships in the oil and gas industry.

Purposes of Processing Personal Data

We process your personal data for the following purposes:

To provide and improve our services, including responding to inquiries, processing RFQs, and delivering MRO solutions in the oil and gas sector.
To communicate with you, such as sending updates, newsletters, or marketing materials (with your consent where required).
To fulfill contractual obligations and manage business relationships.
To ensure website functionality, analyze usage, and enhance user experience.
To comply with legal obligations, such as tax reporting or anti-money laundering requirements under Kazakh law.
To protect our rights, prevent fraud, and ensure security.
For internal administrative purposes, such as record-keeping and auditing.

We will not process your data for purposes other than those specified without your consent.

Legal Basis for Processing

The legal bases for processing include:

Your consent (e.g., for marketing or non-essential cookies).
Performance of a contract or pre-contractual steps (e.g., processing an RFQ).
Compliance with legal obligations (e.g., under the Personal Data Law or tax laws).
Legitimate interests (e.g., website security or business development), provided they do not override your rights.

Sharing and Disclosure of Personal Data

We may share your personal data with:

Affiliates and Partners: For joint projects in the oil and gas sector, with appropriate safeguards.
Service Providers: Third-party operators (e.g., IT hosting, analytics providers) acting on our behalf, bound by confidentiality agreements.
Government Authorities: As required by law, such as for regulatory compliance or investigations.
Third Parties in Business Transactions: In the event of a merger, acquisition, or asset sale.

We do not sell your personal data. Any sharing is limited to what is necessary and complies with the Personal Data Law.

Cross-Border Transfers

As a Kazakhstan-based company, we primarily process data within the Republic of Kazakhstan. However, if personal data is transferred outside Kazakhstan (e.g., to international partners in the oil and gas industry), we ensure:

The recipient country provides an adequate level of protection, as determined by the authorized body (Ministry of Digital Development, Innovations and Aerospace Industry).
Appropriate safeguards are in place, such as contractual clauses, your explicit consent, or other mechanisms under the Personal Data Law.
Transfers are necessary for contract performance or legal compliance.

Data localization requirements may apply for certain state-related data, in line with Kazakh legislation.

Cookies and Tracking Technologies

Our website uses cookies and similar technologies to enhance functionality and analyze usage. Categories include:

Essential Cookies: Necessary for website operation (no consent required).
Analytics Cookies: To track visitor behavior (e.g., Google Analytics), with anonymized data where possible.
Marketing Cookies: For targeted communications, only with your consent.

You can manage cookie preferences via your browser settings. For more details, see our Cookie Policy (if separate) or contact us. Processing of technical data follows the principles of the Personal Data Law.

Data Security

We implement legal, organizational, and technical measures to protect personal data, including:

Encryption and access controls.
Regular security audits and employee training.
Firewall and antivirus protection.
Incident response plans.

In the event of a security violation (as defined in the Personal Data Law), we will notify the authorized body within one business day and affected data subjects as required.

Data Retention

We retain personal data only as long as necessary to fulfill the purposes for which it was collected, or as required by law (e.g., tax records for up to 5 years). Upon expiration, data is depersonalized, blocked, or destroyed in a manner that prevents recovery.

Your Rights as a Data Subject

Under the Personal Data Law, you have the following rights:

Access: To know if we hold your data and obtain details on its processing.
Rectification: To request corrections or supplements to inaccurate data.
Blocking: To temporarily halt processing if violations occur.
Erasure/Destruction: To request deletion if data is unlawfully processed or no longer needed.
Withdrawal of Consent: To revoke consent at any time (may affect service provision).
Objection: To object to processing based on legitimate interests.
Compensation: To seek remedies for damages caused by violations.

To exercise these rights, contact us at the details in Section 15. We will respond within the legal timelines (e.g., one business day for certain requests). Proof of identity may be required.

Children's Privacy

Our services are not directed at individuals under 18. We do not knowingly collect personal data from children without parental consent. If we become aware of such collection, we will take steps to delete it.

Changes to This Privacy Policy

We may update this Policy to reflect changes in our practices or legal requirements. Updates will be posted on our website with the new effective date. For significant changes, we may notify you via email or prominent notice.

Contact Information

If you have questions, requests, or complaints regarding this Privacy Policy or your personal data, please contact our responsible person for personal data processing:

“Zhana Solutions” LLP
Address: 108 Omskaya Street, Almaty, Republic of Kazakhstan
Email: info@zhanasolutions.kz
Phone: +7 702 181 44 48

You may also lodge complaints with the authorized body: Ministry of Digital Development, Innovations and Aerospace Industry of the Republic of Kazakhstan.

By continuing to use our website or services, you confirm your acceptance of this Privacy Policy.

Contact Us

Send Us an Email

We’d love to hear from you! Please feel free to reach out to us via mail.

Give Us a Call

We’re here to help! Don’t hesitate to reach out to us by phone.