Privacy policy

1. General provisions

This Privacy Policy sets out the procedure for collecting, storing, using and protecting the personal data of users of dentalpharmacy.kz.

The personal data controller is «Зубная Аптека» LLP, registered and operating in the Republic of Kazakhstan.

Personal data are processed in accordance with Law of the Republic of Kazakhstan No. 94-V “On Personal Data and Their Protection” dated 21 May 2013 (as amended) and other regulatory acts of the Republic of Kazakhstan.

By using the Website, you confirm that you have read this Policy and agree to the terms of processing your personal data.

2. Key terms

Personal data — information relating to an identified individual or an individual identifiable on the basis of that information (Article 1 of Law No. 94-V).
Data subject — an individual whose personal data are processed.
Controller — the legal entity organising and/or carrying out the processing of personal data: «Зубная Аптека» LLP
Processing — any action involving personal data: collection, recording, storage, alteration, supplementation, use, dissemination, anonymisation, blocking or destruction.
Consent — a voluntary, specific, informed and unambiguous expression of the data subject’s wishes.
Cookies — small files saved on the user’s device when visiting a website.

3. Categories of personal data

Data provided voluntarily by the user:

Surname, first name and patronymic
Telephone number
Email address
Delivery address

Data collected automatically:

IP address and device type
Browser type and version, operating system
Date and time of the visit, page addresses (URLs)
Source of the visit to the website (referrer)
Cookie data

The user may choose not to provide certain data; however, this may make some Website functions unavailable.

4. Purposes of processing

Identifying the user and placing an order
Performing the sales contract: processing, confirming and delivering the order
Providing notifications about order status and related events
Providing technical support to users and handling enquiries
Verifying payments and preventing fraud
Sending marketing messages only with separate consent; consent may be withdrawn at any time
Improving the Website and analysing user activity in anonymised form
Complying with the legislation of the Republic of Kazakhstan

5. Legal grounds for processing

Personal data are processed on the following legal grounds:

The data subject’s consent (Article 8 of Law No. 94-V) — when registering, placing an order or subscribing to marketing
Performance of a contract (paragraph 2 of Article 7 of the Law) — processing data necessary to fulfil an order to which the data subject is a party
The controller’s legitimate interests (paragraph 6 of Article 7 of the Law) — processing anonymised statistical data to improve service quality
Performance of obligations (paragraph 3 of Article 7 of the Law) — preventing fraud and responding to requests from law enforcement authorities

6. Disclosure of data to third parties

The Controller does not disclose personal data to third parties without the data subject’s consent, except as provided by law.

Data may be disclosed to the following categories of recipients in the course of performing the contract:

Logistics and delivery services
Payment systems and banks
SMS services and email providers
Analytics platforms (in anonymised form)

Agreements requiring the confidentiality of personal data are concluded with all third parties.

7. Protection of personal data

The Controller takes the necessary organisational and technical measures to protect personal data against unlawful or accidental access, destruction, alteration, blocking or dissemination.

Measures taken:

Encryption of data in transit using SSL/TLS
Restricting data access to authorised employees
Regular audits of information security systems
Storing data on secure servers with access control

However, the Controller cannot guarantee absolute protection against every possible threat.

8. Rights of the data subject

Under Article 12 of Law of the Republic of Kazakhstan No. 94-V, you have the right to:

Obtain information about your personal data processed by the Controller
Request correction of incomplete, outdated or inaccurate data
Withdraw consent to processing, including for marketing purposes
Request the blocking or destruction of your personal data
Submit a complaint to the Information Security Committee of the Ministry of Digital Development, Innovations and Aerospace Industry of the Republic of Kazakhstan if your rights are violated

To exercise your rights, contact: info@dentalpharmacy.kz

A response will be sent within 5 working days of receiving the request.

9. Cookies and automatic data collection

The Website uses cookies to improve website operation and analyse user behaviour.

Types of cookies used:

Necessary — enable basic website operation
Functional — remember user preferences
Analytics — collect anonymised visitor statistics

You can disable cookies in your browser settings; however, this may cause some website functions to work incorrectly.

10. Cross-border transfers of data

The Controller operates in the Republic of Kazakhstan. Cross-border transfers of personal data to foreign countries are carried out exclusively in the cases provided for in Article 16 of Law No. 94-V:

Obtaining the data subject’s consent
An international agreement on personal data protection with the third country
Performance of a contract to which the data subject is a party

The Controller’s servers are located in the Republic of Kazakhstan.

11. Data retention periods

Data category	Retention period
Account data	Until account deletion + 3 years
Order data	5 years (under the tax legislation of the Republic of Kazakhstan)
Marketing data	Until consent is withdrawn
Analytics data (cookies)	2 years

After the retention periods expire, data are destroyed or anonymised.

12. Changes to the Privacy Policy

The Controller may amend this Privacy Policy if legislation, data processing practices or the Website’s activities change.

The new version takes effect upon publication on dentalpharmacy.kz. Continued use of the Website after changes constitutes acceptance of the revised Policy.

13. Contact information

For enquiries concerning the processing of personal data, contact:

«Зубная Аптека» LLP, Almaty, Kazakhstan. Email: info@dentalpharmacy.kz Website: dentalpharmacy.kz

The competent authority for personal data in the Republic of Kazakhstan: Information Security Committee of the Ministry of Digital Development, Innovations and Aerospace Industry of the Republic of Kazakhstan. Address: 11 Saryarka Street, Astana. Website: gov.kz