Privacy Policy

Website: pathfolio.kz


Contents
1. General Provisions
2. Terms and Legal Basis
3. Processed Data
4. Purpose of Processing
5. Legal Basis for Processing
6. Storage, Retention, and Security
7. Third-Party and Cross-Border Transfers
8. Data Subject Rights
9. Cookies, Analytics, and Payments
10. Children
11. Policy Updates
12. Operator Contact Information

1. General Provisions
This Policy describes how company «B&R Projects» (hereinafter — «Operator», «we») processes personal data of users of https://pathfolio.kz/ (hereinafter — «Website»).
We comply with the legislation of the Republic of Kazakhstan, including the Law of the RK “On Personal Data and Their Protection,” as well as applicable provisions of civil law and generally accepted internet practices.

2. Terms and Legal Basis
The terms “personal data,” “processing,” “distribution,” “anonymization,” and “cross-border transfer” are used as defined by the legislation of the RK.
Operator — an entity that independently determines the purposes and scope of processing users’ personal data on the Website.

3. Processed Data
  • Identification data: last name, first name, patronymic.
  • Contact data: email address, phone number.
  • Account and survey data: questionnaire responses, educational/career preferences.
  • Payment data (partial and anonymized): transaction ID, payment status (card details are not stored on our servers).
  • Technical data: IP address, cookies, browser and device information, log data.

4. Purpose of Processing
  • Registration and management of user profiles on the Website.
  • Provision of online services for creating a personalized development plan.
  • Communication: sending service and informational messages, payment and progress notifications, service news.
  • Execution of the public offer agreement and payment processing.
  • Improving service quality, usage analytics, and troubleshooting.
  • Compliance with legal requirements and responding to government inquiries.

5. Legal Basis for Processing
  • User consent (checked via the “Agree with Policy and Offer” checkbox during registration/order).
  • Conclusion and execution of the public offer agreement.
  • Legitimate interests of the Operator: website maintenance, fraud prevention, protection of rights.
  • Fulfillment of obligations under RK legislation.

6. Storage, Retention, and Security
  • Data is retained as long as necessary for processing purposes or while the agreement with the user is active unless otherwise required by law.
  • We implement legal, organizational, and technical security measures (access control, encryption during transmission, access logging, backup).
  • Users may request updates or corrections via the contact information below.

7. Third-Party and Cross-Border Transfers
We may share data with contractors and partners as necessary for service provision (hosting providers, payment processors, analytics systems, communication tools). Such entities process data under contracts and must maintain confidentiality and security.
Cross-border transfers may occur if data is stored or processed on servers outside the RK or through foreign services. Measures are taken to ensure proper protection of such transfers.

8. Data Subject Rights
  • Receive information about data processing.
  • Request access, correction, blocking, deletion, or restriction of processing.
  • Withdraw consent or object to processing where permitted by law.
  • Challenge the Operator’s actions with competent authorities and/or courts.
To exercise rights, send a request from the registered email with the subject line “Personal Data.”


9. Cookies, Analytics, and Payments
  • Cookies are used for authorization, saving settings, and analytics.
  • Analytical services (e.g., web analytics systems) receive anonymized technical data.
  • Payments are handled via external providers; payment card details are not stored on company «B&R Projects» servers.

10. Children
The Website is not intended for independent use by children under 14. If you are a parent/legal guardian and believe a child has provided us data without your consent, contact us — we will delete such data.

11. Policy Updates
We may update the Policy. The new version takes effect upon publication on this page unless otherwise specified.

12. Operator Contact Information
Company «B&R Projects»
BIN: 170240011647
Legal address: Almaty, Aksay 1 microdistrict, Building 15B, Office 202
E-mail: hakimovbegzod@yahoo.com

Made on
Tilda