Privacy Policy

1. General provisions

This Privacy Policy (the “Policy”) governs how personal data of users of the website brainteam.kz (the “Site”) is processed and protected. The data controller is the creative agency Brain Team Creative Agency (the “Operator”).

The Policy is based on the Law of the Republic of Kazakhstan No. 94-V of 21 May 2013 “On Personal Data and Its Protection”, and also follows international principles (including GDPR) for users from other jurisdictions.

By using the Site and submitting data through its forms, you confirm your agreement with this Policy. If you do not agree, please do not use the Site or submit your data.

2. Data we collect

We process only data you provide voluntarily or that is collected automatically:

• Form data: name, phone number, email, message — when you submit a request or fill out a brief.
• Technical data: IP address, device and browser type, OS, referrer, viewed pages, date and time of visit.
• Cookies and identifiers: cookies and similar technologies (see section 5).

We do not request or collect special categories of data (health, religion, political views, etc.).

3. Purposes of processing

• processing requests and communicating with you;
• preparing proposals and delivering services;
• improving the Site, traffic analytics and usability;
• marketing and retargeting (only with consent);
• compliance with legal requirements.

4. Legal basis

Processing is based on your consent given by submitting the Site forms, as well as on contract performance (service delivery) and the Operator’s legitimate interests that do not override your rights.

5. Cookies and analytics

The Site uses cookies for proper operation, remembering preferences and analysing behaviour. We use third-party analytics and advertising services that may set their own cookies:

• Google Analytics / Google Ads — statistics and advertising;
• Meta Pixel (Facebook/Instagram) — ad measurement and retargeting.

You can disable cookies in your browser settings. This may limit some Site features.

6. Disclosure to third parties

We do not sell your personal data. Data may be shared with:

• processors acting on our behalf (hosting, mailing, analytics, messaging services);
• government authorities — in cases directly provided by law.

7. International transfers

Some services (Google, Meta) process data on servers outside Kazakhstan. Transfers occur provided such services ensure an adequate level of data protection.

8. Retention

Personal data is stored for as long as necessary for the stated purposes or until you withdraw consent, after which it is deleted or anonymised unless the law requires otherwise.

9. Your rights

Under applicable law you have the right to:

• obtain information about the processing of your data;
• request its correction, blocking or deletion;
• withdraw consent to processing at any time;
• lodge a complaint with the authorised body.

To exercise your rights, contact us using the details in section 12.

10. Data security

The Operator applies legal, organisational and technical measures to protect data from unauthorised access, alteration, disclosure or destruction (HTTPS encryption, access control, backups).

11. Changes to this Policy

The Operator may update this Policy. The current version is always published on this page with the last update date.

12. Operator contacts