Privacy Policy

Version of October 4, 2026

This is a translation. If it differs from the Russian version, the Russian version prevails.

1. What this document covers

This policy explains what personal data SD SOFT (SD SOFT) LLP receives through sdsoft.kz and its subdomains, why we need it, where and how long it is stored, and who it may be shared with. It is prepared in accordance with Law of the Republic of Kazakhstan No. 94-V of May 21, 2013 “On Personal Data and Their Protection” and the Digital Code of the Republic of Kazakhstan.

2. Legal basis for processing

We process personal data with your consent. You give consent by ticking the checkbox in a form on the site before submitting it. The form cannot be sent without it. Simply browsing the site does not count as consent to the processing of personal data.

We also process data when needed to conclude and perform a contract with you or your company, and in other cases expressly provided for by the laws of the Republic of Kazakhstan.

3. What data we receive

From forms on the site and from correspondence:

• last name and first name;
• phone number and email address;
• company name and job title;
• the text of your request, question or message.

Automatically when you visit the site:

• IP address and the approximate region it indicates;
• device, browser and operating system type;
• cookies;
• referral source, pages viewed and actions on the site.

We do not ask for your IIN, ID document details, health information, biometrics or other sensitive data. Please do not enter them in our forms.

4. Why we need this data

• to respond to your request and prepare a quote or contract;
• to perform the contract: issue and activate licenses, carry out implementation, training and technical support;
• to register you for a webinar or event and send you materials afterwards;
• to tell you about products, updates and events – only if you have agreed to this. You can unsubscribe at any time by writing to info@sdsoft.kz;
• to understand how the site and advertising perform and improve them;
• to comply with the laws of the Republic of Kazakhstan.

5. Cookies and analytics

The site uses cookies and the following services:

• Google Analytics 4 – visit statistics;
• Google Ads – tracking inquiries from ads and showing ads to people who have visited the site (remarketing);
• Yandex Metrica – visit statistics and on-page behavior analysis.

These services do not receive your name, phone number or email from us. They work with technical data and cookie identifiers.

You can disable cookies in your browser settings. You can also block Google Analytics data collection with the official browser add-on, and turn off personalized Google ads in My Ad Center. If you disable cookies completely, some site features may not work properly.

6. Who we may share data with

• contractors that maintain our IT infrastructure: hosting, email, CRM. They work under contract and are bound by confidentiality;
• manufacturers of the software you buy through us (for example, Autodesk, ALLPLAN, Graphisoft, Sodis Lab) – to the extent needed to issue and register a license, subscription or training;
• Google and Yandex – technical data for analytics and advertising (see section 5);
• government authorities – only on grounds provided by law.

We do not sell personal data or share it with third parties for their own advertising.

7. Transfers outside Kazakhstan

The site is hosted on servers in the Republic of Kazakhstan by PS Internet Company (ps.kz).

Form submissions go to our corporate email on the Microsoft 365 platform. Its servers, like those of Google, Yandex and software manufacturers’ licensing systems, may be located outside the Republic of Kazakhstan. Cross-border transfers follow the rules of Law No. 94-V: to countries that ensure the protection of personal data, and to other countries with your consent. By ticking the consent checkbox in a form, you also consent to such transfers within the purposes listed in section 4.

8. How long we keep data

For as long as needed for the purposes in section 4. If you withdraw consent, we stop processing and delete your data, except data we are legally required to keep. For example, contract documents are kept for the periods set by accounting and archiving laws.

9. How we protect data

Only employees who need personal data for their work have access to it. The site runs over secure HTTPS, and system accounts are protected by passwords and role-based access. If a personal data breach occurs, we will notify the competent authority and, where required, you, in the manner and within the time limits set by law.

10. Your rights

You can:

• find out whether we hold your personal data and obtain it;
• ask us to correct or complete your data;
• ask us to block, delete or anonymize your data, or restrict its processing;
• withdraw your consent to processing, unless this contradicts the law;
• appeal our actions to the competent personal data protection authority or to a court.

To exercise your rights, email info@sdsoft.kz with the subject “Personal data”. Include your last name, first name and the contact details you left on the site so we can find your data. We will respond within the time limits set by law.

11. Changes to this policy

We may update this policy, for example when the law or the services used on the site change. The current version is always published on this page, with the version date shown at the top.

12. Contact

For any questions about the processing of personal data, write to info@sdsoft.kz.