Privacy Policy

Revision of 25.07.2026.

This Policy describes what data Shanraq collects and how we handle it, in accordance with the legislation of the Republic of Kazakhstan.

1. General Provisions

The operator of personal data is Qazna Technologies LLP, BIN 251040024862, Kostanay reg., Rudny, Kachar, Mkr. 2. Contact for enquiries: shanirak.org@gmail.com. Processing is carried out in accordance with the Law of the Republic of Kazakhstan “On Personal Data and Its Protection”, the Law of the Republic of Kazakhstan “On Online Platforms and Online Advertising”, and other applicable legislation. The Policy is available before registration is completed; by registering, you consent to the processing of data on the conditions set out herein.

2. What Data We Collect

• Account data: email address; for authors — a mobile phone number (to verify identity) and a first and last name (the byline on articles).
• Content: articles, comments, listings, uploaded images.
• Contacts in listings: a phone number or email that you provide yourself.
• Technical data: IP address, device and browser type, access logs — for security and diagnostics.

Uploaded images are re-encoded, which removes EXIF metadata (including geolocation) for your safety.

3. Purposes of Processing

Data is used only for the operation of the Platform: authentication and account protection; identification of authors; publication and translation of content; moderation and fraud prevention; connecting buyer and seller; responding to requests; and complying with legal requirements.

4. Legal Basis and Consent

The basis for processing is your consent, as well as the performance of a contract (the Terms) and legal requirements. Consent is recorded at registration, specifying the operator, the list of data, the purposes, the term, and the conditions of transfer; we retain a record of consent (document, version, time, channel). You may withdraw consent; a withdrawal is reviewed within the period established by law (as a general rule, within 15 business days), unless this is contrary to the law.

5. Storage and Localization

Personal data is stored in databases located within the territory of the Republic of Kazakhstan. Passwords are stored only as an irreversible hash. Data is stored for as long as the account exists and for as long as required by the purposes of processing or the law. Identification data required for publication is stored for the term of the Terms and for the period established by law after their termination.

6. Transfer to Third Parties and Cross-Border Transfer

We do not sell personal data. Transfer is possible to providers of necessary services (for example, sending emails and SMS) to the extent needed to provide them, and to authorized bodies in the cases provided for by law. Cross-border transfer is carried out only where proper protection is ensured and where there are grounds provided for by law.

7. Your Rights

• to obtain information about the processing of your data and access to it;
• to demand the correction of inaccurate data and the deletion of unlawfully obtained data;
• to withdraw consent and request deletion of your account;
• to appeal the operator’s actions, including to the authorized body.

Send requests through the support page.

8. Security and Breach Notification

We apply organizational and technical protection measures (password hashing, access restriction, protection against request forgery, security headers, rate limiting of login attempts). If unauthorized access to personal data is detected, we notify the authorized body within the period established by law (as a general rule, within one business day).

9. Cookies and Analytics

We use technically necessary cookies (for example, for the login session) and, where present, minimal analytics to improve the service. We do not conduct targeted advertising based on race, ethnicity, political views, biometric data, or health data.

10. Processing with the Help of AI

AI agents are used for moderation, automatic translation, and formatting assistance; they process content to the extent necessary for these tasks. Materials of the AI columnist are clearly marked. We do not make decisions of significance to the user solely automatically, without the possibility of recourse to a human.

11. Changes to the Policy

The Policy may be updated; material changes are published on the Platform with the date of the revision indicated. Where necessary, new consent is requested.

12. Contacts and Regulator

For questions about data processing, contact us through the support page. The authorized body in the field of personal data protection is the Ministry of Digital Development, Innovations and Aerospace Industry of the Republic of Kazakhstan.