Personal Data Privacy Policy

Astana                                      June 1, 2026

This Privacy Policy, hereinafter referred to as the Policy, is a public contract in accordance with the provisions of Article 387 of the Civil Code of the Republic of Kazakhstan and applies to all information that “BEKSAR Consulting” LLP, BIN 210640040053, hereinafter referred to as the Operator, may receive about the User while the User is using the Beksar cloud Service at app.beksar.kz and the website beksar.kz.

1. Terms
1.1. Service Administration means authorized employees responsible for managing the Service, acting on behalf of the Operator, who organize and carry out the processing of personal data.
1.2. Personal Data, or PD, means any information relating to a directly or indirectly identified or identifiable individual.
1.3. Processing of PD means any action or operation, including collection, recording, systematization, accumulation, storage, clarification, use, transfer, anonymization, blocking, and destruction of data.
1.4. Anonymization means actions as a result of which it becomes impossible to determine whether PD belongs to a specific data subject without the use of additional information.
1.5. Cookies mean fragments of data used to identify the browser and ensure the proper functioning of the Service.
1.6. Statistical scripts, or pixels, mean tools that automatically transmit information about the User’s actions on the Website for payment legality control and analysis.

2. General Provisions
2.1. Use of the Service or registration in the Personal Account means the User’s unconditional acceptance of this Policy.
2.2. If the User does not agree with the terms of this Policy, the User must immediately stop using the Operator’s resources.
2.3. The Operator does not verify the accuracy of the PD provided, but assumes that the User provides up-to-date information and has legal capacity.

3. Scope of Data
3.1. The Operator processes PD provided by the User during registration and payment for the Subscription:
3.1.1. Identification data: full name, IIN, identity card or passport details, including number, date of issue, and issuing authority.
3.1.2. Contact data: mobile phone number and email address.
3.1.3. Business data: organization name, BIN, legal address, and bank details.
3.2. The Operator protects technical data transmitted automatically:
3.2.1. IP address, browser type and operating system, access time, and referrer.
3.2.2. User geolocation to ensure the security of financial transactions.

4. Purposes of Collecting Personal Information
4.1. Personal Data is used by the Operator for the following purposes:
4.1.1. Identification of the User for the performance of the Public Offer terms and provision of access to the Account.
4.1.2. Provision of technical support and feedback regarding the use of the Service.
4.1.3. Financial monitoring, payment legality control, transaction disputes, and confirmation of tax benefits.
4.1.4. Improvement of the Service quality and development of new features based on the analysis of User actions.
4.1.5. Integration and data exchange with partners, including banks and fiscal data operators, to ensure the correct operation of the product accounting system.

5. Obligations of the Parties and Data Protection
5.1. The Operator shall:
5.1.1. Ensure the confidentiality of PD and not disclose it without the User’s consent, except in cases established by the laws of the Republic of Kazakhstan.
5.1.2. Take legal, organizational, and technical measures to protect PD from accidental access or destruction.
5.1.3. Store data on servers located within the territory of the Republic of Kazakhstan.
5.2. The User shall:
5.2.1. Provide accurate information and update it in a timely manner in the Personal Account.
5.2.2. Ensure the confidentiality of the login and password. The Operator shall not be liable for losses resulting from third-party access to the Account due to the User’s fault.

6. Transfer of Data to Third Parties
6.1. The Operator has the right to transfer PD to third parties, including courier services, banks, fiscal data operators, and others, solely for the purpose of fulfilling obligations to the User within the scope of the Service.
6.2. Transfer of PD to government authorities is carried out only in accordance with the procedure established by the legislation of the Republic of Kazakhstan.

7. Blocking and Destruction of Personal Data
7.1. If inaccurate PD or unlawful actions are detected, the Operator blocks the PD for the period of verification.
7.2. PD is subject to destruction upon achieving the purposes of processing or upon withdrawal of consent by the User, unless otherwise provided by tax or civil law.
7.3. According to the Beksar Public Offer, after termination of the Subscription, data is stored for 30 calendar days to allow export, after which it is permanently deleted.

8. Dispute Resolution
8.1. Before applying to court, it is mandatory to submit a written claim to the Operator.
8.2. The claim review period is 30 calendar days from the date of receipt.
8.3. If no agreement is reached, the dispute shall be referred to the court at the Operator’s location.

9. Other Conditions
9.1. The Operator has the right to make changes to this Policy without the User’s consent.
9.2. The new version comes into force from the moment it is published on the website beksar.kz.
9.3. Official correspondence is conducted via email: beksar.consulting@gmail.com.

Company Details
“BEKSAR consulting” LLP
Astana, Sarayshyk St., 5/1, apt./office 225
BIN 210640040053
Halyk Bank of Kazakhstan JSC
IIC/IBAN KZ68601A871007152571
IIC/SWIFT HSBKKZKX
KBe 17
Email: beksar.consulting@gmail.com
Phone: +7 702 778 99 11