Legal information · version dated 15 September 2026

Consent to the collection and processing of personal data

This consent applies when a user confirms it before submitting a request or questionnaire. It must be voluntary, specific, and capable of withdrawal.

1. Who receives the consent

The user gives consent to the operator, ИП SDK, IIN 770210403190. Operator address: микрорайон Мамыр-1, дом 29/6, кв./офис 14 Алматы Алматы, Алматы 050026 Казахстан. The user is identified by the surname and given name, phone, and optional email entered in the form.

2. Data covered

Consent may cover only the data requested by the form:

  • surname and given name, patronymic if applicable, phone, and optional email;
  • city, purchase purpose, budget, down payment, income information, and other questionnaire answers used for preliminary matching;
  • request source, submission page, date, time, processing status, and the record's technical identifier.

Consent does not authorize collection of data not requested by the form and is not a request to send an IIN, documents, card details, or passwords.

3. Purposes

  • register and process the request;
  • provide feedback by phone, email, or WhatsApp and conduct a consultation;
  • send service confirmations, reminders, links, and answers relating to the requested service;
  • perform preliminary matching using the supplied parameters;
  • maintain the quality and security of request processing.

Advertising messages and optional web analytics are not covered by this consent. Marketing messages require separate consent; analytics is enabled through a separate choice in the site banner.

4. Permitted actions and recipients

For the stated purposes, the operator may collect, record, organize, store, correct, use, de-identify, block, and delete data, and may provide the necessary minimum to authorized employees and contractors.

The user consents to necessary disclosure to third parties and cross-border processing when authorized CRM, hosting, telephony, and official messaging providers are used. They receive only the contact details and service parameters required to handle the request and communicate.

Questionnaire answers and financial information are not provided to messaging providers. This consent does not authorize public distribution, publication in publicly accessible sources, or advertising messages.

5. Term, withdrawal, and message opt-out

Consent is effective from the date it is given until the stated purposes are achieved, for no more than three years from submission, or until withdrawal if further processing is not required on another lawful basis.

To withdraw, email aray@eciin.kz. Provide your surname and given name, the phone or email used in the request, and ask for processing to stop. The operator stops processing within 15 business days or sends a reasoned refusal within the same period if continued retention or processing is required by the laws of the Republic of Kazakhstan.

Marketing messages may be stopped by replying “STOP” in WhatsApp or writing to aray@eciin.kz. Withdrawal does not affect the lawfulness of processing completed before it was received.

6. User confirmation

By confirming consent, the user states that they:

  • have read this consent and the privacy policy;
  • provide the data voluntarily and to the necessary extent;
  • provide their own data or have the right to disclose it;
  • understand how to withdraw consent and opt out of messages.