Final Provisions
Personal Data Processing Policy
Last updated: October 9, 2025
10.1. This Policy is publicly available at https://luneburo.com/personal-data-processing
10.2. The Operator reserves the right to amend this Policy at any time. Changes take effect upon publication on the website.
10.3. The Policy is valid indefinitely until replaced by a new version.
Retention and Deletion
9.1. Personal data is stored no longer than required by the purposes of its processing, or until the User withdraws consent.
After achieving the purposes or upon request from the User, personal data is deleted or depersonalized.
Cross-Border Transfer of Data
8.1. The Operator may transfer personal data to foreign countries that ensure adequate protection of individuals’ rights.
Transfers to countries not providing such protection are allowed only with the User’s written consent or when required by law.
Measures for Data Protection
7.1. The Operator takes organizational and technical measures to protect personal data from unauthorized access, alteration, disclosure, or destruction.
7.2. Data protection includes access control, encryption, secure storage, and regular monitoring of systems handling personal information.
7.3. Access to personal data is granted only to authorized employees or contractors bound by confidentiality obligations.
Rights of the Personal Data Subject
6.1. Individuals whose personal data is processed by the Operator have the right to:
receive information on the processing of their personal data;
request correction, blocking, or deletion of inaccurate or unlawfully obtained data;
withdraw consent to data processing;
appeal unlawful actions of the Operator in accordance with the legislation of the Republic of Kazakhstan.
Requests related to personal data may be sent to:
luneburo.projects@gmail.com
+7 (706) 654-13-52
Principles of Personal Data Processing
5.1. Personal data is processed in accordance with the following principles:
lawfulness and fairness;
limitation to specific, lawful purposes;
data minimization — processing only what is necessary;
accuracy and relevance;
limited storage period;
ensuring data confidentiality and security.
Categories of Processed Personal Data
4.1. Depending on the purpose of interaction, the Operator may process:
full name;
contact information (email, phone number, address);
resume and portfolio (for applicants);
other data voluntarily provided by the User through forms on the Website.
4.2. The Operator does not process special categories of personal data (such as health, political views, or religion).
Purposes of Processing Personal Data
Legal Grounds for Processing
3.1. The Operator processes personal data strictly for the following purposes:
to provide services and fulfill contractual obligations;
to identify and communicate with the User;
to send informational and promotional materials with the User’s consent;
to ensure proper functioning of the website and improve user experience;
to comply with legal and regulatory requirements.
2.1. The Operator processes personal data based on:
the consent of the data subject;
the necessity of processing to perform a contract or pre-contractual actions;
the Operator’s legal obligations;
other grounds provided by the legislation of the Republic of Kazakhstan.
2.2. The Operator acts in full compliance with the Law of the Republic of Kazakhstan “On Personal Data and Their Protection.”
General Provisions
1.1. This Policy applies to all personal data processed by LUNE BURO (hereinafter — the “Operator”).
1.2. The Operator ensures the lawful and fair processing of personal data to protect the rights and freedoms of individuals.
1.3. The Policy applies to all processes of collecting, recording, systematizing, storing, updating, using, transferring, depersonalizing, blocking, and destroying personal data.
1.4. The Operator may process data both with and without the use of automation tools.
LUNE BURO, a Kazakhstan-based marketing agency registered at Almaty city, Republic of Kazakhstan, Zhandosov street, 1/1, hereby establishes this Personal Data Processing Policy (hereinafter referred to as the “Policy”).
This Policy defines the procedure and principles for processing personal data and the measures taken to ensure their protection in accordance with the Law of the Republic of Kazakhstan “On Personal Data and Their Protection.”
