Privacy Policy
Revision of 25.07.2026.
This Policy describes what data Shanraq.org collects and how we handle it, in accordance with the legislation of the Republic of Kazakhstan.
1. General Provisions
The operator of personal data is Qazna Technologies LLP, BIN 251040024862, Kostanay reg., Rudny, Kachar, Mkr. 2. Contact for enquiries: shanirak.org@gmail.com. Processing is carried out in accordance with the Law of the Republic of Kazakhstan “On Personal Data and Its Protection”, the Law of the Republic of Kazakhstan “On Online Platforms and Online Advertising”, and other applicable legislation. The Policy is available before registration is completed; by registering, you consent to the processing of data on the conditions set out herein.
2. What Data We Collect
- Account data: email address; for authors — a mobile phone number (to verify identity) and a first and last name (the byline on articles).
- Content: articles, comments, listings, uploaded images.
- Place: the region, city, or town you choose yourself from a reference list. It is a choice from a list, not a determination of your location: we do not use GPS and do not derive coordinates from your IP. The place is used to show you local messages, and you can change or clear it in your profile.
- Organisation data (if you apply to publish on its behalf): name, kind, business identification number, website, and territory. The name of a verified organisation is shown publicly next to your own.
- Contacts in listings: a phone number or email that you provide yourself.
- Technical data: IP address, device and browser type, access logs — for security and diagnostics.
Uploaded images are re-encoded, which removes EXIF metadata (including geolocation) for your safety.
3. Purposes of Processing
Data is used only for the operation of the Platform: authentication and account protection; identification of authors; publication of content in three languages; showing material for your place; moderation and fraud prevention; connecting buyer and seller; responding to requests; and complying with legal requirements.
4. Legal Basis and Consent
The basis for processing is your consent, as well as the performance of a contract (the Terms) and legal requirements. Consent is recorded at registration, specifying the operator, the list of data, the purposes, the term, and the conditions of transfer; we retain a record of consent (document, version, time, channel). You may withdraw consent; a withdrawal is reviewed within the period established by law (as a general rule, within 15 business days), unless this is contrary to the law.
5. Storage and Localization
Personal data is stored in databases located within the territory of the Republic of Kazakhstan. Passwords are stored only as an irreversible hash. Data is stored for as long as the account exists and for as long as required by the purposes of processing or the law. Identification data required for publication is stored for the term of the Terms and for the period established by law after their termination.
6. Transfer to Third Parties and Cross-Border Transfer
We do not sell personal data. Transfer is possible to providers of necessary services (for example, sending emails and SMS) to the extent needed to provide them, and to authorized bodies in the cases provided for by law. Cross-border transfer is carried out only where proper protection is ensured and where there are grounds provided for by law.
7. Your Rights
- to obtain information about the processing of your data and access to it;
- to demand the correction of inaccurate data and the deletion of unlawfully obtained data;
- to withdraw consent and request deletion of your account;
- to appeal the operator’s actions, including to the authorized body.
Send requests through the support page.
8. Security and Breach Notification
We apply organizational and technical protection measures (password hashing, access restriction, protection against request forgery, security headers, rate limiting of login attempts). If unauthorized access to personal data is detected, we notify the authorized body within the period established by law (as a general rule, within one business day).
9. Cookies and Analytics
We use technically necessary cookies – for the login session, the chosen language, and your time zone, so that times on the charts are shown by your clock rather than ours – and our own traffic analytics.
Why we count. To show advertisers the size and shape of the audience, and to see what is read. Without those figures the advertising does not sell, and without that the site does not run.
What is counted. Hosts, visitors, visits and views, in half-hour windows, split between Kazakhstan and the rest of the world and between mobile and other devices. The same figures are shown openly to everyone on the Analytics page: we keep no traffic data that we do not show you.
How it is kept from becoming surveillance. A visitor is counted under an anonymous identifier, derived from the address and the browser string with a key that is generated afresh every day; the address itself is never stored anywhere. Yesterday’s key cannot be recovered, so the same person on Monday and on Tuesday yields two unrelated values. Following anyone for longer than a day is not technically possible – for us either.
What we do not do. We do not record your path through the site, do not build an interest profile, do not pass this data to third parties, and do not use it to select advertising for a particular person.
A ZERO.kz visitor counter runs in the site footer: it counts page views independently of us, so that the traffic figures we show advertisers are not figures only we have counted. The counter is an image: when a page opens, your browser requests it from ZERO.kz and thereby reports your IP address and browser type there. ZERO.kz code does not run on our pages — our security policy does not permit it. We do not conduct targeted advertising based on race, ethnicity, political views, biometric data, or health data.
10. Processing with the Help of AI
AI is used to screen listings and articles for rule violations; it processes only the text of the material, to the extent necessary for that task. AI does not read comments — readers rate them. Automatic translation is switched off: the author writes the versions in all three languages. Materials of the AI columnist are clearly marked and closed to search engines. We do not make decisions of significance to the user solely automatically, without the possibility of recourse to a human.
11. Changes to the Policy
The Policy may be updated; material changes are published on the Platform with the date of the revision indicated. Where necessary, new consent is requested.
12. Contacts and Regulator
For questions about data processing, contact us through the support page. The authorized body in the field of personal data protection is the Ministry of Digital Development, Innovations and Aerospace Industry of the Republic of Kazakhstan.