Privacy Policy

Last updated: January 2026

Related documents:

Terms of Use
Public Contract (Offer)

LLP "Tanda App" ("Tanda", "We") respects your privacy and is committed to protecting your personal data. This Privacy Policy describes what data we collect, how we use and share it, as well as your rights and how to exercise them.

1. Information We Collect

1.1. Data provided by you:

Registration data (Full name, e-mail, phone number)
Order details (contact details, delivery address)
User content (reviews, comments, photos)

1.2. Payment data:

Tanda does not store bank card data; all payment details are processed exclusively by payment agents or banks.

1.3. Technical and behavioral data:

IP address, device type, browser, session time and duration
Browsing history and search queries within the Service
Analytics data (e.g., Google Analytics)

1.4. Cookies and trackers:

We use the following categories of cookies and similar technologies:

Necessary: authentication, account security
Functional: remembering user interface preferences
Analytical: collecting user behavior statistics (Google Analytics)
Marketing: Facebook pixels, Google Ads, and other remarketing tools

Users can manage cookies and opt-out through their browser settings or read more details in the Cookie Policy.

2. Purposes of Data Processing

We use your data for the following purposes:

Providing services: registration, order processing and management, user support.
Processing payments: verifying and confirming transactions through payment agents.
Communications: notifications about orders, events, promotions, and updates (e-mail, SMS, messengers).
Marketing: sending personalized offers (with your consent).
Analytics and improvement: analyzing Service usage, A/B testing, interface improvement.
Legal purposes: complying with legal requirements and preventing fraud.

2.1. Legal Grounds for Processing

We process personal data on the following legal grounds:

Your consent (Article 15 of the Law of the Republic of Kazakhstan "On Personal Data")
Performance of a contract to which you are a party (order processing and execution)
Legal obligations of Tanda (compliance with the requirements of government bodies)
Legitimate interests of Tanda (ensuring security, analytics, Service improvement)

2.2. Use of Anonymized Data

For analysis, improving the quality of the Service, developing new products, and other lawful business purposes, Tanda and its representatives may use anonymized or aggregated data from which it is impossible to identify specific users.

3. Data Transfer to Third Parties

By using the Service, the user grants Tanda the right to transfer their personal data to third parties to the extent necessary to provide services, including to educational institutions, payment agents, banks, IT providers, and contractors, as well as in response to lawful requests from government bodies, without additional notification to the user.

We do not transfer your personal data to third parties without your consent, except for:

educational institutions — for processing orders and incoming requests
payment agents and banks — for processing transactions
IT providers and contractors — hosting, analytics, mailings, CRM
government bodies — if there is a lawful request

4. Territorial Data Storage and International Transfers

In accordance with the legislation of the Republic of Kazakhstan, the personal data of users who are residents or citizens of the Republic of Kazakhstan is stored on the territory of the Republic of Kazakhstan.
For users who are not residents or citizens of the Republic of Kazakhstan, data may be stored in other jurisdictions selected by Tanda, subject to compliance with applicable data protection laws.
In case of international data transfers, Tanda ensures a level of protection equivalent to the requirements of the legislation of the Republic of Kazakhstan and/or the legislation of the user's country (depending on which level of protection is stricter).

5. Retention Periods

Transaction data is stored for no more than 3 years from the date of the last operation
Accounts are stored until deleted by the user or upon request to info@tandakids.kz
Cookies are stored according to their type (session and persistent)

6. Your Rights

In accordance with the legislation of the Republic of Kazakhstan, you have the right to:

access your data and obtain a copy of it
rectify inaccurate or incomplete data
erase data (the "right to be forgotten"), except in cases where retention is required by law
restrict and object to processing
data portability in a machine-readable format
withdraw consent to marketing communications by sending a request to info@tandakids.kz

6.1. Exercising Your Rights

To exercise your rights, send a request to info@tandakids.kz specifying your full name, account number, and a description of the requested action. We will process your request within 3 business days.

7. Security

We apply technical and organizational security measures:

data encryption during transmission (TLS)
server protection and restricted access
regular security audits and penetration tests

Terms and Policy