Privacy Policy of Zan Consulting LLP

Effective Date: May 25, 2026

Zan Consulting LLP (hereinafter referred to as the “Company”, “we”, “us”, or “our”) adheres to the principles of confidentiality and personal data protection in the course of its professional activities, as well as during the use of the Company’s website (hereinafter referred to as the “Website”) by its users.

This Privacy Policy (hereinafter referred to as the “Policy”) defines the procedure for the collection, processing, storage, use, and protection of personal data in accordance with the legislation of the Republic of Kazakhstan, including the Law of the Republic of Kazakhstan “On Personal Data and Their Protection”.

1. Personal Data Operator

The operator of personal data is: Zan Consulting LLP

Phone: +7 (705) 705-05-81

BIN: 160640007743

Legal Address: Almaty, Medeu District, Pushkin Street, 2/76, “JBS Sayahat” BC, Office 602

E-mail: sh.medetbekov@zancons.com

For questions regarding the processing of personal data, you may reach out using the contact details provided above.

2. General Provisions

By using the Website, submitting requests, applications, or providing personal data to the Company by any means, the User confirms that they have read and understood this Policy and express their consent to the processing of their personal data in the manner and under the conditions stipulated by this Policy.

If the User does not agree with the terms of this Policy, they must refrain from using the Website and providing their personal data.

3. Categories of Processed Data

The Company has the right to process the following categories of personal data:


3.1. Contact and Identification Data

  • Surname, first name, and patronymic (if any);
  • Telephone number;
  • Email address;
  • Postal address;
  • Job title/position;
  • Name of the organization represented by the User.

3.2. Data Provided Within the Scope of Legal Services

The Company may process information contained in:

  • Requests and communications;
  • Contracts, agreements, and annexes;
  • Corporate, judicial, arbitral, and other documents;
  • Materials provided for legal analysis, project support, or the preparation of legal opinions.

3.3. Technical Data

When using the Website, the following may be collected automatically:

  • IP address;
  • Browser and device information;
  • Language settings;
  • Information on actions taken on the Website;
  • Cookies;
  • Date and time of visiting the Website pages.

4. Purposes of Personal Data Processing

The Company processes personal data solely for the following purposes:

  • Reviewing User requests and communications;
  • Providing legal, consulting, and expert services;
  • Preparing, concluding, and executing contracts;
  • Conducting legal analysis and supporting projects;
  • Ensuring communication with clients and counterparties;
  • Sending analytical materials, legislative reviews, event invitations, and other information messages (subject to the User’s consent);
  • Ensuring the functioning and security of the Website;
  • Complying with the statutory requirements of the legislation of the Republic of Kazakhstan.

5. Legal Grounds for Processing

The processing of personal data is carried out by the Company on the following grounds:

  • Consent of the personal data subject;
  • Necessity for the conclusion and execution of a contract;
  • Performance of obligations provided for by the legislation of the Republic of Kazakhstan;
  • Protection of the legitimate interests of the Company;
  • Execution of the professional activities of the Company in the field of legal and consulting support.

6. Principles of Personal Data Processing

The Company processes personal data based on the following principles:

  • Lawfulness and good faith;
  • Confidentiality;
  • Limitation of processing to the achievement of specific, explicit, and legitimate purposes;
  • Minimization of the volume of processed data;
  • Accuracy, sufficiency, and relevance of information;
  • Limitation of data storage periods;
  • Ensuring an appropriate level of personal data protection.

7. Confidentiality of Information

The Company treats information obtained within the framework of interaction with clients, counterparties, and Users as confidential and takes necessary legal, organizational, and technical measures to protect it.

Information provided within the scope of consultations, project support, corporate, commercial, judicial, arbitral, and other legal matters is subject to protection in accordance with:

  • The legislation of the Republic of Kazakhstan;
  • Internal policies of the Company;
  • Confidentiality obligations;
  • Terms of executed agreements and Non-Disclosure Agreements (NDAs).

8. Cookies and Analytics

The Website may use cookies and other technologies to collect technical information in order to:

  • Ensure the correct operation of the Website;
  • Analyze user activity;
  • Improve the structure and functionality of the Website;
  • Enhance the quality of the Company’s services.

The User has the right to modify their browser settings to restrict or disable the use of cookies. However, certain functions of the Website may not work correctly as a result.

9. Transfer of Personal Data to Third Parties

The Company does not sell or distribute the personal data of Users. The transfer of personal data to third parties is permitted exclusively in the following cases:

  • To engaged consultants, experts, contractors, and service providers involved in executing the Company’s instructions, subject to confidentiality obligations;
  • To state authorities, courts, law enforcement agencies, arbitration institutions, and other authorized entities—in cases and in accordance with the procedures provided for by the legislation of the Republic of Kazakhstan;
  • Subject to the explicit separate consent of the User;
  • In other cases directly provided for by the legislation of the Republic of Kazakhstan.

10. Cross-Border Transfer of Personal Data

In cases associated with supporting international projects, cross-border transactions, international arbitration, or interaction with foreign counterparties, the Company has the right to carry out cross-border transfers of personal data, provided that the requirements of the legislation of the Republic of Kazakhstan are met and an adequate level of personal data protection is ensured.

11. Storage and Protection of Personal Data

The Company takes necessary organizational, legal, and technical measures to protect personal data from:

  • Unauthorized access;
  • Destruction;
  • Modification;
  • Blocking;
  • Copying;
  • Distribution;
  • Other unlawful actions.

To achieve this, the Company may employ:

  • Secure data transmission channels;
  • Access right differentiation and control;
  • Internal information security policies;
  • Antivirus and technical protection tools.

Personal data is stored for the period necessary to achieve the purposes of its processing, unless a different storage period is stipulated by the legislation of the Republic of Kazakhstan or the terms of a contract.

12. Localization of Personal Data

The collection, systematization, and storage of personal data of citizens of the Republic of Kazakhstan are carried out in compliance with the statutory requirements of the legislation of the Republic of Kazakhstan regarding the localization of personal data databases.

13. Rights of the Personal Data Subject

The User has the right to:

  • Obtain information regarding the availability, composition, and content of their personal data;
  • Request clarification, updating, or correction of their personal data;
  • Demand the blocking or destruction of personal data in cases provided for by legislation;
  • Withdraw consent to the processing of personal data;
  • Opt-out of receiving informational and marketing communications;
  • Appeal to authorized bodies or courts to protect their rights.

To exercise these rights, the User may submit a written request using the contact details specified in this Policy.

14. Third-Party Resources

The Website may contain links to third-party web resources. The Company is not responsible for the content of such resources or for the personal data processing procedures implemented by third parties.

15. Amendments to the Policy

The Company reserves the right to make changes and additions to this Policy at any time.

The current version of the Policy is published on the Company’s Website and comes into effect from the date of its publication, unless otherwise provided by the new edition.

16. Contact Information

For matters concerning the processing of personal data and the exercise of the rights of personal data subjects, you may contact:

Zan Consulting LLP

  • BIN: 160640007743
  • Legal Address: Almaty, Medeu District, Pushkin Street, 2/76, “JBS Sayahat” BC, Office 602
  • E-mail: sh.medetbekov@zancons.com
  • Phone: +7 (705) 705-05-81