Personal Data Processing Policy (Privacy Policy)

1. What this document regulates

1.1. This Personal Data Processing Policy is drafted in accordance with the requirements of the Law of the Republic of Kazakhstan dated May 21, 2013 No. 94-V “On Personal Data and Their Protection” and defines the procedure for processing personal data and measures to ensure the security of personal data by:
  1. “ИП Кошкаров Асылбек Касымбекович”, IIN:
  2. IE Turekhan, IIN: 950902401642
  3. IE Alimkulova, IIN: 830203499031
  4. IE Rustamova Farangiz Nasirovna, IIN: 840903400971
    (hereinafter referred to as the “Operator”), in relation to the processing of personal data collected through the website https://delcappuccino.kz (hereinafter – the “Website”), and contains information about the measures implemented by the Operator to protect such personal data.
1.3. The legal grounds for personal data processing are the regulatory legal acts of the Republic of Kazakhstan, internal regulations of the Operator, agreements with personal data subjects, and consents of personal data subjects.
1.3. Personal data processing is carried out in compliance with confidentiality. The Operator does not disclose personal data to third parties or distribute it without the consent of the personal data subject, unless otherwise provided by the legislation of the Republic of Kazakhstan.

2. Rights and obligations of the Operator and personal data subjects

2.1. The Operator has the right to:
  • receive reliable information from the personal data subject regarding the provided personal data;
  • request timely clarification of personal data from the subject.
2.2. The Operator undertakes to:
  • process personal data in accordance with applicable legislation of the Republic of Kazakhstan;
  • consider requests from personal data subjects (or their legal representatives) and provide reasoned responses within ten business days;
  • provide free access to personal data to the subject (or their representative);
  • take measures to update or delete personal data upon lawful request or upon achieving processing purposes;
  • ensure protection of personal data;
  • fulfill other obligations under applicable law.
2.3. Rights of personal data subjects:
  • to receive information about their personal data processed by the Operator by sending a request to the contact details указанным on the Website page “Offer”;
  • to access their personal data;
  • to update, block, or delete personal data if it is incomplete, outdated, inaccurate, unlawfully obtained, or unnecessary;
  • to withdraw consent to processing by sending a written request;
  • to exercise other rights under Kazakhstan law.
2.4. Obligations of personal data subjects:
  • to provide accurate data;
  • to notify the Operator of updates or changes.

3. Whose and what personal data is processed

3.1. The Operator processes personal data of the following categories:
  • unregistered users;
  • registered users;
  • recipients of goods/services (who may not be registered users).
3.2. Personal data includes all information provided via the Website, including:
  • full name;
  • mobile phone number;
  • email address;
  • delivery address;
  • order history;
  • browsing and request history;
  • other information (the list may vary depending on purposes).

4. Purposes of personal data processing

4.1. For unregistered users:
  • Website usage (information, consultations, support, usability improvement);
  • promotion of goods/services.
Processed data:
  • browsing/request history;
  • other voluntarily provided data.
4.2. For registered users:
  1. Website usage (communication, support, usability);
  2. marketing and direct communication;
  3. delivery of goods (notifications, consultations, support).
Processed data:
  • full name;
  • phone number;
  • email;
  • delivery address;
  • order history;
  • browsing history;
  • other relevant data.
4.3. For recipients of goods/services:
  • communication;
  • delivery notifications;
  • delivery-related support.
Processed data:
  • full name;
  • phone number;
  • email;
  • delivery address;
  • other necessary data.

5. How personal data is processed

5.1. Processing may include collection, recording, systematization, storage, updating, use, transfer, blocking, deletion, and destruction, with or without automation.
5.2. The Operator may transfer personal data to third parties if necessary to achieve processing purposes or as required by law.
5.3. Personal data is processed only for the duration necessary to achieve processing purposes unless otherwise required by law.

6. Protection of personal data

6.1. The Operator implements necessary measures to ensure protection of personal data in accordance with legislation.
6.2. The Operator is not responsible for unauthorized access caused by user negligence (e.g., account access). Users must protect their credentials.

7. Consent to processing

7.1. Users voluntarily provide personal data.
7.2. Users confirm data accuracy.
7.3. By filling in data fields, users accept this Policy and consent to processing.
7.4. When providing data of third parties (recipients), the user guarantees their consent and notification.
7.5. Users confirm awareness of their rights.
7.6. Processing ends upon achieving purposes, expiration, or withdrawal of consent.
7.7. If the user does not agree, they must stop using the Website.

8. Other data processing

8.1. The Operator may collect data via cookies and analytics tools (e.g., Yandex.Metrica, Google Analytics) for marketing, analytics, and usability improvements. Such data is not used to identify unregistered users.
8.2. Users may disable cookies in browser settings.
8.3. Disabling cookies may limit Website functionality.
8.4. If the user disagrees, they must stop using the Website.

9. Destruction of personal data

9.1. Personal data is destroyed upon achieving processing purposes, expiration of consent, or withdrawal, unless otherwise required by agreements or law.
9.2–9.4.
Destruction is confirmed by official acts and system logs depending on processing method.
9.5. Documentation is stored for 3 years.

10. Final provisions

10.1. This Policy may be amended due to changes in legislation or at the Operator’s discretion. The current version is always available on the Website.
10.2. All other matters are governed by the legislation of the Republic of Kazakhstan.
10.3. Last updated: 09.02.2026