Legal

Privacy Policy

Effective September 22, 2026

This Policy explains how SERIKSON MARKETING LLP (ТОО "SERIKSON MARKETING"), trading as Serikson, processes personal data: what we collect, why, who we share it with, how long we keep it, and how you can control it. It covers the serikson.kz website, our conversations on WhatsApp, Telegram and email, and our work with clients.

The Policy follows the Law of the Republic of Kazakhstan No. 94-V of May 21, 2013 “On Personal Data and Their Protection” (the “Law”), the Digital Code of the Republic of Kazakhstan and other applicable laws. This is an English translation of the Russian original; if they differ, the Russian version prevails.

1. Who processes your data

The owner and operator (controller) of your personal data is SERIKSON MARKETING LLP (ТОО "SERIKSON MARKETING"), Business Identification Number (BIN) 210440011002, registered address: 22 Kyzylkaiyn St., Kaitpas microdistrict, Karatau district, Shymkent 160000, Kazakhstan (“we”, “us”).

Serikson is a brand of SERIKSON MARKETING LLP. Our website serikson.kz, our WhatsApp number and our social media pages operate under this name.

The person responsible for organizing personal data processing is our Director, Yelnur Serikuly. Send any personal data questions to info@serikson.kz.

2. What data we collect

  • Website request form: your name, phone number, company name (if you provide it), the service you are interested in, your consent to data processing and to WhatsApp messages with the date and time, and UTM tags if you arrived via a link that contains them.
  • Messages and calls: phone number, messenger profile name, email address, message content and attachments, date and time — when you write to us, call us or reply to our messages.
  • WhatsApp: when you chat with our WhatsApp number — your phone number, WhatsApp profile name, message text and attachments, and delivery and read receipts provided by the WhatsApp Business Platform.
  • Client work: names, job titles, phone numbers and emails of client representatives, client company details, and project correspondence.
  • Technical data: IP address, browser and device information, the page requested, and the date and time of the request, recorded automatically by our website host.

We do not request biometric data, health information or copies of identity documents. We process an Individual Identification Number (IIN) only when a contract and accounting documents with a sole proprietor or an individual cannot be issued without it.

3. Why we use your data

  • to respond to your request, run a free consultation and prepare a proposal;
  • to contact you the way you chose — by phone, WhatsApp, Telegram or email;
  • to enter into and perform a contract, issue invoices and accounting documents;
  • to message you on WhatsApp if you opted in or wrote to us first;
  • to keep the website running and secure and protect it from abuse;
  • to comply with the laws of the Republic of Kazakhstan, including accounting and tax laws.

We do not sell personal data, do not use it for targeted advertising, and do not make automated decisions based on it that have legal effects for you.

4. Legal basis

We process personal data with your consent (Articles 7 and 8 of the Law). You give consent to the processing of your request data by ticking the box in the website form; the full consent text is published on the website. The box is not pre-ticked, and the form cannot be sent without it. Consent to WhatsApp messages is a separate, optional box.

If you write to us or call us yourself, you agree to the processing of the data you share to the extent needed to respond. Contracts and accounting documents are also kept under accounting and tax laws.

We keep a record of your consent: the date, time and version of the text you agreed to.

5. Who we share data with

To run the website and stay in touch with you, we use service providers that process data on our behalf and must keep it confidential and secure:

  • Vercel Inc. (USA) — website hosting and technical request logs;
  • Zoho Corporation (USA) — business email;
  • WhatsApp LLC and Meta Platforms, Inc. (USA) — the WhatsApp Business Platform that carries conversations with our WhatsApp number;
  • Telegram FZ-LLC (UAE) — if you message us on Telegram;
  • cloud artificial intelligence providers — when our AI agent drafts a reply in a conversation; only the text needed for the reply is sent;
  • banks — for payments under a contract;
  • government authorities — in the cases and manner required by the laws of the Republic of Kazakhstan.

We do not share personal data with anyone for their own purposes and do not publish it in publicly available sources.

6. International transfers

Some of these providers store data on servers outside the Republic of Kazakhstan, in the USA and other countries, so your data is transferred across borders. We do this on the basis of your consent (Article 16(3)(1) of the Law) and only through providers that apply data protection measures.

The laws of other countries may protect personal data differently from the laws of the Republic of Kazakhstan. By giving consent, you also agree to such transfers.

7. How long we keep data

  • request data and correspondence — until the purpose is achieved, but no longer than three years after our last contact with you or until you withdraw consent;
  • contracts, invoices, acts of acceptance and other primary documents — for the periods required by accounting and tax laws;
  • technical hosting logs — no longer than 30 days.

When the period ends or the purpose is achieved, we delete the data or anonymize it so that it can no longer be linked to you.

8. How we protect data

We take legal, organizational and technical measures to protect data (Article 22 of the Law):

  • the website and the request form work only over encrypted HTTPS;
  • only people who need the data for their work can access it, and work accounts are protected with two-factor authentication;
  • we collect only the data needed for the stated purposes;
  • we keep records of consents and of actions with data: consent periods, transfers to third parties and cross-border transfers;
  • we notify the competent authority of any personal data breach within one business day of discovering it.

9. Your rights

Under Article 24 of the Law and the Digital Code of the Republic of Kazakhstan, you have the right to:

  • know whether we hold your personal data and receive information about the purposes, sources, methods of collection and processing, the list of data, and processing and retention periods;
  • ask us to correct or complete your data when there are documented grounds;
  • ask us to block your data if there is information that the conditions for collecting or processing it were breached;
  • ask us to delete or destroy data collected or processed in breach of the law, and in other cases provided by law;
  • withdraw consent to processing, transfer to third parties and cross-border transfer, unless this contradicts the law or you have an unfulfilled obligation;
  • object to automated processing of your data and ask at any time to talk to a human instead of our AI agent;
  • appeal our actions to the competent personal data protection authority or to a court.

10. How to exercise your rights

Email info@serikson.kz with the subject “Personal data”, or send a letter to our registered address. Tell us which phone number or email you used and what you would like us to do. We may ask you to confirm that the request comes from you — for example, by replying from the same number or address.

  • we answer requests about your data within 10 business days;
  • we correct, block or destroy data within one business day after the grounds are confirmed;
  • after you withdraw consent, we stop processing within 15 business days unless the law requires us to keep the data, or we send you a reasoned refusal.

Access to your own data is free of charge.

11. Data deletion

You can ask us to delete your data at any time: send “Delete my data” on WhatsApp to +7 702 001 93 35 or email info@serikson.kz. The steps and timelines are described on the Data Deletion page.

12. Cookies and analytics

The website does not use cookies, web analytics or advertising pixels. Fonts and images are served from our own domain. If we add analytics, we will update this Policy and ask for your consent where required.

13. If you are outside Kazakhstan

If the laws of another country apply to the processing of your data, such as the EU General Data Protection Regulation (GDPR), we process your data on the basis of your consent, to prepare and perform a contract with you, to comply with legal obligations, and for our legitimate interest in keeping the website secure. You have the right to access, correct and delete your data, restrict its processing, receive it in a portable format, object to processing, and lodge a complaint with the supervisory authority in your country. For transfers outside your country, we rely on our providers’ data processing terms, including Standard Contractual Clauses where they are required.

14. Children

Our services are intended for businesses. We do not knowingly collect data from people under 18. If you learn that a child has shared their data with us, contact us and we will delete it.

15. Changes to this Policy

We may update this Policy. A new version takes effect when it is published on this page; its date is shown at the top. If a change requires new consent, we will ask for it.

16. Contact details

Legal name
SERIKSON MARKETING LLP (Товарищество с ограниченной ответственностью "SERIKSON MARKETING")
Registered name
ТОО "SERIKSON MARKETING"
BIN
210440011002
Registered address
22 Kyzylkaiyn St., Kaitpas microdistrict, Karatau district, Shymkent 160000, Kazakhstan
Director
Yelnur Serikuly
Email
info@serikson.kz
Phone
+7 702 001 93 35
Website
serikson.kz