Privacy Policy

Effective date: March 5, 2026

This Privacy Policy describes how vmagroup.kz (the "Website"), owned by VMA GROUP (the "Company"), collects, processes, and protects personal data of its users.

This policy has been developed in accordance with the Law of the Republic of Kazakhstan dated May 21, 2013, No. 94-V "On Personal Data and Their Protection".

1. Data We Collect

When using the Website, we may collect the following personal data:

During registration: name, email address, phone number
When placing an order: name, phone, email, delivery address, company name, BIN
Automatically: IP address, browser type, date and time of visit

2. Purposes of Data Processing

Personal data is processed for the following purposes:

User account registration and management
Order processing and delivery
Communication with users (notifications, responses to inquiries)
Improving Website performance and service quality

3. Legal Basis

Personal data processing is carried out based on:

Consent of the data subject (during registration and order placement)
Performance of a contract to which the data subject is a party
Legitimate interests of the Company (ensuring Website security and functionality)

4. Data Storage and Protection

Personal data is stored on secure servers located in the Republic of Kazakhstan. The Company implements organizational and technical measures to protect data from unauthorized access, alteration, disclosure, or destruction.

Data is retained for the period necessary to achieve the purposes of processing, but no less than the period established by the legislation of the Republic of Kazakhstan.

5. Data Sharing with Third Parties

The Company does not share personal data with third parties, except in the following cases:

With the consent of the data subject
As required by the legislation of the Republic of Kazakhstan
When necessary for contract performance (e.g., delivery service)

6. Cookies

The Website uses only technical (essential) cookies for:

Maintaining the authorization session
Cross-site request forgery (CSRF) protection

We do not use advertising or tracking cookies. Technical cookies do not contain personal data and are necessary for the proper functioning of the Website.

7. Your Rights

In accordance with the legislation of the Republic of Kazakhstan, you have the right to:

Know whether the Company holds your personal data
Obtain information about the composition and conditions of your data processing
Request modification or supplementation of your personal data
Request deletion of your personal data
Withdraw consent to the processing of personal data

To exercise these rights, please contact us using the information below.

8. Contact Information

For questions related to personal data processing:

9. Changes to This Policy

The Company reserves the right to amend this Policy. The current version is always available on this page.