Privacy policy

1General provisions

This policy explains how we process the personal data of visitors to nurordaalmaty.edu.kz (the “website”). It has been prepared in accordance with Law of the Republic of Kazakhstan No. 94-V of May 21, 2013, “On Personal Data and Their Protection.”

By filling in a form on the website and ticking the consent box, you agree to this policy. You can withdraw your consent at any time (see section 9).

2Personal data operator

The owner and operator of personal data collected through the website is:

School

NURORDA ALMATY

Legal entity

NURORDA ALMATY School-Lyceum LLP

BIN

140840022057

Address

133 Chulanov Street, Akbulak microdistrict, Alatau district, Almaty 050038, Kazakhstan

Email for requests

nurordaalmaty@gmail.comto be confirmed

Phone

+7 700 424 24 20

3What data we collect

When you fill in a form or write to us:

• the parent’s (legal representative’s) name and phone or WhatsApp number;
• your child’s grade and language of instruction (if you provide them);
• your preferred tour or test date, and your question or comment;
• the page the request was sent from, the website language and advertising tags (UTM), so we know where requests come from.

When you visit the website, the hosting provider’s servers automatically log technical data: IP address, browser type, time of the request and the page opened.

We do not ask for IIN numbers, ID card details, health information or payment details through the website. Admission documents are not submitted through the website.

4Why we process data

We process data only to:

• respond to your request and contact you;
• book a campus tour, consultation or entrance test for you;
• keep you informed about admission and key dates;
• keep the website running and secure;
• only with your separate consent, analyze how the website is used (section 8).

We do not sell your data or share it with third parties for advertising without your consent.

5Legal basis and consent

Data is processed on the basis of consent from the data subject or their legal representative. Consent is given by ticking the box in the form before sending it.

Only a parent or legal representative may provide a minor’s data. By entering a child’s details in a form, you confirm that you are the child’s legal representative.

6Where and how long data is stored

As required by law, personal data is stored in a database located in the Republic of Kazakhstan. The website and the request handler are hosted by a Kazakhstani hosting provider (hoster.kz).to be confirmed

Request data is kept until its purpose is fulfilled, and no longer than one year after the end of the admission campaign. If the child enrolls, data is kept in the school’s records under the education contract. Server logs are kept for a limited time under the hosting provider’s rules.to be confirmed

7Third parties and external services

The website uses several external services. Some of them load only when you open them yourself:

• Hosting provider (hoster.kz, Kazakhstan) hosts the website and the server that processes requests.
• Google Fonts: the website’s fonts load from Google’s servers, so Google receives your IP address.
• WhatsApp (Meta): if you tap a WhatsApp button, your message is sent through WhatsApp under its own terms.
• Instagram and Behold: on any page, the website loads our public Instagram posts through Behold (feeds.behold.so; images from Behold’s servers) at most once every 30 minutes per visitor; Behold sets no cookies. Videos stream from Instagram (Meta) servers only after you press play.
• YouTube (Google): videos load only after you press play.
• Maps (Google Maps, 2GIS): a map loads only after you press “Show the map” or follow a link.
• Request delivery: each request is written to a log on the server and sent to the school’s email (Google Workspace). After sending, you can also forward it on WhatsApp yourself.to be confirmed

Most of these services are run by foreign companies. So when you use them, technical data (such as your IP address) may pass through servers outside Kazakhstan, and so may request data when it is delivered to the school’s email (Google Workspace). This cross-border transfer is based on the consent you give when you send a form.

8Cookies, local storage and analytics

The website itself does not set cookies. For convenience, a few settings are saved in your browser’s local storage (localStorage), such as having closed the tour notice. This data is not sent to our server, and you can clear it in your browser settings.

The website currently does not use analytics or advertising pixels (Google Analytics, Google Tag Manager, Meta Pixel, TikTok Pixel). If they are added, the website will show a notice with a real choice, and analytics will run only after you consent.

External services such as YouTube, maps or Instagram may set their own cookies once you open them.

9Your rights

Under the law, you have the right to:

• know whether your data is being processed and access it;
• ask for your data to be corrected or completed;
• ask for your data to be blocked or deleted;
• withdraw your consent;
• complain to the authorized body or a court.

Send your request with the subject “Personal data” to nurordaalmaty@gmail.com. We will reply within the time limits set by law.to be confirmed

10Security

Data is transmitted over an encrypted connection (HTTPS). Only responsible school staff can access requests, and the server’s secret settings are not publicly accessible.

11Changes to this policy

If this policy changes, the new version will be published on this page with its date.