personal data processing policy

1. General provisions
This policy describes how Spark Studio processes personal data of website visitors, users of contact forms, clients and potential clients.
The policy applies to all data that a user voluntarily provides through the website, request forms, files, correspondence and other communication channels related to discussing or delivering a project.
Personal data is processed in accordance with the personal data protection requirements applicable in the Republic of Kazakhstan.
2. Key terms
Personal data means information relating to an identified or identifiable individual.
Personal data processing means any action or set of actions with data, including collection, recording, organization, storage, clarification, use, transfer, anonymization, blocking and deletion.
User means a person who visits the website, sends a request, attaches materials or provides information to receive a consultation, project estimate or commercial proposal.
3. Data we process
- name, surname or another form of address provided by the user;
- phone number, Telegram, email and other contact details;
- company name, business area, task description, budget, timeline and expected result;
- files, links, presentations, technical specifications, references and other materials provided by the user;
- technical data: IP address, device type, browser, visit date and time, viewed pages, traffic source, cookies and similar identifiers.
4. Purposes of processing
- processing an incoming request and contacting the user;
- clarifying the task, analyzing the project and estimating timeline, budget and scope;
- preparing a proposal, agreement, invoice, presentation or other project document;
- maintaining business correspondence, client communication and project support;
- improving the website, interface, analytics, content and service quality;
- fulfilling contractual, tax, accounting and other legal obligations.
5. Legal basis
Data is processed based on the user's consent expressed by sending a form, providing information, attaching materials, continuing communication or accepting cookies.
Certain data may also be processed to perform an agreement, prepare for an agreement, comply with legal requirements, and protect the rights and legitimate interests of Spark Studio.
6. Processing procedure
We process only the data needed for the stated purposes and do not request information unrelated to communication, project estimation or project delivery.
Access to data is limited to people who need such information to perform their work duties or provide services for Spark Studio.
We use organizational and technical safeguards, including access restrictions, user rights control, secure services and careful handling of client materials.
7. Cookies and analytics
The website may use cookies and similar technologies to keep the interface working correctly, store technical settings and analyze page visits.
Analytics helps us understand which sections are useful, how the path to a request improves and which interface elements need refinement.
Users can restrict or delete cookies in browser settings. Some website functions may behave differently as a result.
8. Transfer to third parties
Spark Studio does not sell personal data and does not transfer it to third parties for their own marketing.
Data may be transferred to services and contractors that support website operation, hosting, analytics, communication, file storage, accounting or project delivery.
Such parties receive only the information needed for a specific task and must observe confidentiality and applicable data protection requirements.
9. Cross-border transfer
When separate cloud, analytics, communication or infrastructure services are used, data may be processed on servers located outside the Republic of Kazakhstan.
Such processing is allowed to the extent necessary for website operation, user communication, materials storage and project tasks.
10. Retention periods
Personal data is stored no longer than necessary for the purposes of processing: reviewing a request, preparing a proposal, delivering a project, accounting, protecting rights and complying with legal requirements.
When processing is no longer needed, data is deleted, anonymized or archived where required by law or internal procedures.
11. User rights
- receive information about the processing of personal data;
- request correction of inaccurate or outdated data;
- withdraw consent to data processing;
- request deletion of data if there is no legal basis for retention;
- submit a question or complaint about data processing.
12. Withdrawal of consent
The user may withdraw consent to personal data processing. After receiving such a request, we stop processing the data unless further storage or use is required to perform an agreement, protect rights or comply with the law.
Withdrawal of consent may affect our ability to continue communication, prepare a proposal or deliver a project.
13. Confidentiality of project materials
Materials provided for project estimation are treated as confidential if the nature of the information suggests it is not intended for public distribution.
We use such materials only to analyze the task, prepare a proposal, plan work and fulfill agreed arrangements.
14. Final provisions
Spark Studio may update this policy when the website, processing procedures, services used or legal requirements change.
The current version of the policy is published on this page and applies from the moment of publication unless stated otherwise.