Privacy Policy

iText LLP
Business Identification Number (BIN): 161040008257
Publication date: January 20, 2026

1. General Provisions

1.1. This Privacy Policy (the “Policy”) governs the collection, processing, storage, and protection of personal data of users of itext.kz (the “Site”) and clients of iText LLP (the “Operator”).

1.2. This Policy was developed in accordance with:

Law of the Republic of Kazakhstan No. 94-V of May 21, 2013, “On Personal Data and their Protection”;
the Civil Code of the Republic of Kazakhstan;
other legal acts of the Republic of Kazakhstan concerning personal data protection.

1.3. Use of the Site and/or submission of personal data to the Operator constitutes the data subject’s consent to this Policy.

1.4. A user who disagrees with this Policy must stop using the Site.

2. Terms and Definitions

2.1. Personal data — information relating to an identified or identifiable data subject.

2.2. Data subject — the individual to whom the personal data relates.

2.3. Processing of personal data — actions involving the collection, recording, organization, accumulation, storage, updating, retrieval, use, transfer, anonymization, blocking, deletion, or destruction of personal data.

2.4. Operator — iText LLP, which organizes and/or processes personal data independently or together with other persons.

3. Data Collected

3.1. The Operator collects and processes the following categories of data:

3.1.1. Data voluntarily provided by users:

last name, first name, and patronymic (if any);
contact phone number;
email address;
organization name and job title (for representatives of legal entities);
content of an inquiry or order;
documents submitted for translation services.

3.1.2. Data collected automatically when the Site is used:

device IP address;
browser type and version;
device type (mobile or desktop);
operating system;
date and time of the Site visit;
pages viewed and actions taken on the Site;
source of the visit to the Site.

3.1.3. Data contained in submitted documents:

third-party personal data contained in documents submitted for translation (names, dates of birth, addresses, and other information depending on the document).

4. Purposes of Personal Data Processing

4.1. Personal data is processed for the following purposes:

identifying users to place and fulfill orders;
communicating with users about the provision of services;
issuing invoices and preparing completion documents;
performing contractual obligations;
improving the Site and the services;
analyzing visits and user behavior on the Site;
maintaining security and preventing fraud;
complying with the laws of the Republic of Kazakhstan.

4.2. Automatically collected data (IP address, browser and device information) is used to:

support the technical operation of the Site;
analyze and improve the user experience;
maintain information security;
analyze visit statistics.

5. Legal Grounds for Processing

5.1. Personal data is processed on the following legal grounds:

the data subject’s consent (Article 7(1) of the Law of the Republic of Kazakhstan “On Personal Data and their Protection”);
performance of a contract to which the data subject is a party;
fulfillment of the Operator’s obligations under the laws of the Republic of Kazakhstan;
protection of the Operator’s legitimate interests (security and fraud prevention).

5.2. Consent to the processing of personal data is given by:

completing and submitting a form on the Site;
emailing documents and information;
placing an order for services;
continuing to use the Site after reading this Policy.

6. Personal Data Processing Procedures

6.1. Personal data is processed both with and without automated tools.

6.2. Personal data will not be disclosed or transferred to third parties except when:

the data subject has provided written consent;
disclosure is necessary to perform a contract (including the engagement of translators and editors);
required by the laws of the Republic of Kazakhstan;
requested by authorized government agencies.

6.3. When third parties (translators or editors) are engaged to fulfill an order, the Operator ensures that they comply with confidentiality requirements.

6.4. Personal data is not transferred across borders unless such a transfer is necessary to fulfill an order and the data subject has consented to it.

7. Personal Data Retention

7.1. Personal data is retained for as long as necessary to achieve the purposes of processing, but not for less than the periods required by the laws of the Republic of Kazakhstan.

7.2. Retention periods:

Data relating to completed orders - 5 years from completion
Accounting and financial documents - 5 years
Contact form data - 1 year
Automatically collected data - 1 year

7.3. At the end of the retention period, personal data is destroyed or anonymized.

8. Personal Data Protection

8.1. The Operator takes the legal, organizational, and technical measures necessary to protect personal data against unlawful or accidental access, destruction, alteration, blocking, copying, and disclosure.

8.2. Protective measures include:

restricting access to personal data to authorized employees;
using secure data transmission channels (SSL/TLS);
using antivirus protection;
performing regular backups;
training employees on personal data handling;
entering into nondisclosure agreements with employees and engaged specialists.

8.3. At the Client’s request, a separate nondisclosure agreement (NDA) is concluded for documents containing confidential information.

9. Data Subject Rights

9.1. A data subject has the right to:

obtain information about the processing of their personal data;
access their personal data;
request the correction, blocking, or destruction of personal data that is incomplete, outdated, inaccurate, unlawfully obtained, or unnecessary for the stated purpose of processing;
withdraw consent to personal data processing;
challenge the Operator’s actions or inaction before the authorized personal data protection authority or a court.

9.2. To exercise these rights, a written request must be sent to itext@itext.kz or the Operator’s postal address.

9.3. The request must include:

the applicant’s last name, first name, and patronymic;
contact details for a response;
the substance of the request;
the applicant’s signature (for written requests).

9.4. A response will be sent within 15 business days after receipt of the request.

9.5. Withdrawal of consent to personal data processing may prevent the provision of services.

10. Use of Cookies

10.1. The Site uses cookies to provide functionality and improve the user experience.

10.2. Types of cookies used:

Essential cookies — necessary for the Site to function;
Analytics cookies — used to collect visit statistics.

10.3. Users can disable cookies in their browser settings. Disabling cookies may affect Site functionality.

11. Confidentiality of Translation Materials

11.1. All materials submitted by the Client for translation are confidential information.

11.2. The Operator undertakes to:

refrain from disclosing the materials to third parties other than persons directly involved in fulfilling the order;
refrain from using the materials for purposes unrelated to fulfilling the order;
ensure that engaged specialists maintain confidentiality.

11.3. Confidentiality obligations remain in effect for 5 years after completion of the order.

11.4. Confidentiality obligations do not apply to information that:

became public through no fault of the Operator;
was received by the Operator from third parties without confidentiality obligations;
must be disclosed under the laws of the Republic of Kazakhstan.

12. Changes to the Policy

12.1. The Operator may amend this Policy.

12.2. The current version of the Policy is posted on the Site with the date of its latest update.

12.3. Continued use of the Site after changes are made constitutes acceptance of the revised Policy.

13. Contact Information

For questions about personal data processing, please contact:

iText LLP
Address: 25 Victory Square (Altyn Business Center), Office 106, Pavlodar, Republic of Kazakhstan
Email: itext@itext.kz
Phone: +7 (771) 267-21-55

This Policy takes effect upon publication on the Site.