Privacy policy

1. Who processes the data

Owner and operator of the database containing personal data: [ТОО / Legal entity], BIN [000000000000], address: [Адрес / Address] ("we", One Day CFO).

For questions about personal data, write to info@cfo.birkun.kz.

2. What data we collect

Through the booking form:

• name;
• phone number;
• preferred way to contact you (WhatsApp, Telegram or a call);
• who the consultation is for (you or your business) and the product you are interested in;
• your message, if you write one.

Technical data: IP address, date and time of the request and the page it was sent from. We need these to protect the form from spam and abuse.

If you become a client, you may give us financial documents (for example, account statements) so that we can provide the service. Their processing is governed by the service agreement and this policy.

We do not intentionally collect data we don’t need to reply to your request. Please don’t include card numbers, passwords or other secrets in your message.

3. Why we process the data

• to contact you about your request, clarify the task and tell you the price;
• to book your consultation and provide the service you chose;
• to comply with the law of the Republic of Kazakhstan;
• to protect the site and the form from spam and abuse.

We do not use your data for marketing without separate consent, and we never sell it.

4. Legal basis and consent

We process the data on the basis of the consent you give by ticking the box in the booking form (Article 8 of the Law) and, if you become a client, to conclude and perform the agreement.

You can withdraw your consent at any time by writing to info@cfo.birkun.kz. Withdrawal does not affect processing carried out before it. If we need some data to perform an agreement or comply with the law, we will tell you which data we keep and for how long.

5. Where the data is stored

The Law requires personal data of Kazakhstan citizens to be stored in a database located in the Republic of Kazakhstan (Article 12(2) of the Law). Requests from the site are received and stored on a server located in Kazakhstan (hosting provider Hoster.kz).

Notifications about requests arrive in One Day CFO’s work mailbox. [Name the email service and confirm that the mailboxes are hosted in Kazakhstan.]

If you choose to message us on WhatsApp or Telegram, the conversation passes through those services’ servers, which may be outside Kazakhstan. Their own rules also apply in that case.

6. How long we keep the data

• requests that do not lead to an agreement: 12 months from the request, then deleted;
• client data: for the term of the agreement and afterwards for the period required by the law of the Republic of Kazakhstan;
• technical data (IP address and time of sending): together with the request.

7. Who we share the data with

We do not share your data with third parties except where it is needed to run the site and provide the service:

• the hosting provider whose server runs the site and the form (Hoster.kz, Kazakhstan);
• the email service that delivers request notifications [to be named];
• the One Day CFO professional who will work with you;
• public authorities, only where the law requires it.

We do not transfer personal data across borders, except when you choose to contact us through WhatsApp or Telegram.

8. Your rights

Under Article 24 of the Law you have the right to:

• know whether we hold your data and receive a copy;
• have inaccurate or incomplete data corrected;
• have data blocked or deleted if it is processed in breach of the law;
• withdraw your consent to processing;
• complain about our actions to the authorised body for personal data protection or to a court.

To use your rights, write to info@cfo.birkun.kz from the phone number or email given in your request. We will reply within the time limits set by the law of the Republic of Kazakhstan.

9. How we protect the data

The site uses HTTPS. Only staff and professionals who need requests for their work can access them. We take the legal, organisational and technical protection measures required by Article 22 of the Law.

10. Cookies and analytics

The site does not use cookies and does not load analytics or advertising services. Your browser only remembers your last choice of "For you" or "For business" (in the browser’s local storage, never sent to us) to highlight it on your next visit. You can delete it by clearing the site’s data in your browser.

If we add analytics, we will update this policy before we do.

11. Changes to this policy

We may update this policy. A new version applies from the date it is published on this page. The date of the latest version is shown at the top.