Privacy Policy

Engineering Procurement Services Kazakhstan LLP (hereinafter referred to as the Operator or the Company)

Privacy Policy

Revision dated January 31, 2026

1. General Provisions 1.1. This Privacy Policy (hereinafter - the Policy) defines the order of processing, storage, protection and destruction of information received when using the site https://eps-ltd.kz (hereinafter - the Site), including anonymized data, as well as personal data that can be obtained only through direct correspondence (hereinafter - the User).

1.2 The Policy is developed in accordance with the Constitution of the Republic of Kazakhstan, the Law of the Republic of Kazakhstan dated May 21, 2013 № 94-V "On personal data and their protection" (hereinafter - the Law), the Law of the RK "On informatization" and other regulatory legal acts of the Republic of Kazakhstan.

1.3 Operator - Engineering Procurement Services Kazakhstan LLP, BIN 121140021954, legal address: 050007, Republic of Kazakhstan, Almaty, Medeu district, 124, Kopernik str., office 212. Contact for confidentiality and personal data: info@eps-ltd.kz.

1.4 By using the Site, the User confirms familiarization and agreement with this Policy. In case of disagreement, the User shall stop using the Site.

2. Basic Concepts Terms are used in the meanings defined by the Law:

• personal data - information related to a certain or determined on their basis subject of personal data, recorded on electronic, paper and (or) other material medium;
• processing of personal data - actions aimed at accumulating, storing, modifying, supplementing, using, disseminating, depersonalizing, blocking and destroying personal data;
• operator - Engineering Procurement Services Kazakhstan LLP.

3. Information received when using the Site 3.1. There are no feedback, subscription, application forms or any other forms for entering and sending personal data on the Site.

3.2 The Operator automatically collects and processes only anonymized (non-personalized) data on the User's interaction with the Website using cookies, web beacons and similar technologies, as well as web analytics services (Yandex.Metrica, Google Analytics, etc.).

Such data include:

• browser type and version, operating system and device;
• the source of the link to the Site;
• IP address;
• Geolocation (at the country/region/city level, if allowed);
• date, time and duration of the visit;
• pages viewed and actions taken on the Site;
• other technical parameters.

3.3 This data is completely impersonal and does not identify a specific User.

3.4 If the User sends personal data on his/her own (e.g. by e-mail to info@eps-ltd.kz with a question or suggestion), such data will be processed solely for the purpose of responding to the request.

4. Purposes of information processing 4.1. Anonymized data is processed for the purposes of:

• ensuring correct operation and functionality of the Site;
• analyzing traffic and improving the Site;
• identifying and correcting technical problems;
• compliance with the requirements of the legislation of the Republic of Kazakhstan.

4.2 Personal data received through direct correspondence is processed only for the purpose of responding to the User's request and to the extent necessary for this purpose.

5. Terms of data processing 5.1. Processing of anonymized data is carried out without the User's consent, as they are not personal data according to the Law.

5.2 The processing of personal data from correspondence is carried out on the basis of consent (expressed by the fact of sending the letter) and/or Art. 9 of the Law (fulfillment of obligations initiated by the subject).

5.3 The User may withdraw consent by sending a notice to info@eps-ltd.kz. Withdrawal does not affect processing authorized by the Act without consent.

6. Storage, protection and destruction of information 6.1. Data is stored no longer than necessary to achieve the purposes, but no longer than the terms established by the legislation of the Republic of Kazakhstan.

6.2 The Operator shall apply the necessary legal, organizational and technical measures to protect information from unlawful access, destruction, alteration, blocking, copying or distribution.

6.3 If a data incident is detected, the Operator shall notify the authorized body within the established timeframe (mandatory from 01.07.2024).

6.4 Once the objectives have been achieved, the data shall be destroyed or anonymized.

7. Cross-border transfer 7.1. Anonymized data may be transferred to analytics services (Yandex, Google, etc.) outside of the Republic of Kazakhstan, provided adequate protection or in accordance with Article 16 of the Law.

7.2 Personal data from correspondence is not transferred cross-border, except in cases provided for by law.

8. Cookies and analytical services 8.1. The Site uses cookies to ensure performance and to collect anonymized statistics.

8.2 The User can manage cookies in the browser settings (block or delete). Disabling it may affect the display of the Site.

8.3 Data from Yandex.Metrics, Google Analytics and similar services are processed according to their privacy policies.

9. Rights of the personal data subject 9.1. If personal data is still processed (e.g. from correspondence), the User has rights under Art. 24 of the Act:

• Receive processing information;
• require clarification, blocking or destruction;
• to withdraw consent;
• appeal against the Operator's actions to the Ministry of Digital Development, Innovation and Aerospace Industry of the Republic of Kazakhstan or to the court.

10. Final Provisions 10.1 The Policy may be updated; the new version becomes effective upon posting on the Website.

10.2 Unresolved issues shall be resolved according to the legislation of the Republic of Kazakhstan.

10.3 Policy Questions: info@eps-ltd.kz.