Privacy Policy

1. Data Controller and Contact Details

The controller of your personal data is EcoIndustrial Consulting Limited, a private company incorporated under the acting law of the Astana International Financial Centre (AIFC), Astana, Republic of Kazakhstan (the “Company”, “we”).

• Registration number (BIN): 241240901192
• Registered address: 5/2 Dostyk Street, VP-4, Yesil District, Astana, Republic of Kazakhstan
• Email for personal data enquiries: hello@ecoind-consulting.com

Personal data is processed in accordance with the Law of the Republic of Kazakhstan “On Personal Data and Its Protection” and other applicable legislation of the Republic of Kazakhstan and AIFC data protection acts.

2. Personal Data We Process

We process the following categories of personal data:

• first name and last name;
• email address;
• phone number (optional);
• country of residence;
• information about purchased webinars and courses, learning progress and results, and issued certificates;
• technical data collected automatically: IP address, device and browser type, cookies and analytics data (see Section 9).

We do not process special (sensitive) categories of personal data and do not collect bank card details: payments are made on the secure page of the payment provider, and card details are neither stored on the Platform nor transferred to the Company.

The Platform is not intended for persons under 18 years of age. If you become aware that a minor has provided us with personal data without the consent of a legal representative, please contact us at the email address above.

3. Purposes of Processing

Personal data is processed for the following purposes:

• conclusion and performance of the contract: processing your order, providing access to webinars and courses, and sending a personal access link to your email;
• sending transactional messages: payment confirmations, reminders about upcoming webinars, access notifications, and certificate delivery;
• issuing certificates of completion, including their public verification by certificate number;
• handling user enquiries, requests and applications, including refund requests;
• compliance with applicable legal requirements (accounting and tax records, responses to requests from competent authorities);
• analysing the use of the Platform and improving its operation (in anonymised or aggregated form where possible).

4. Legal Grounds for Processing

The legal grounds for processing personal data are:

• your consent, given by ticking the checkbox confirming acceptance of this Policy when placing an order;
• the necessity of processing for the conclusion and performance of a contract to which you are a party (the public offer agreement);
• compliance with obligations imposed on the Company by applicable law.

Consent may be withdrawn at any time by sending a request to the Company's contact email. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal and may make it impossible to continue providing services for which the data is required.

5. Disclosure of Personal Data to Third Parties

We do not sell personal data and do not share it with third parties for their own marketing purposes. Data is disclosed only to the following categories of recipients and only to the extent necessary to provide the services:

• the payment provider — to process payments (redirect to a secure payment page; card details are not shared with us);
• the email delivery service — to send transactional emails (confirmations, reminders, certificates);
• video conferencing and video hosting services (including Zoom and course video hosting) — to run webinars and provide access to video materials;
• web analytics services (Google Analytics) — see Section 9;
• cloud hosting and technical infrastructure providers — to store data and operate the Platform;
• public authorities — only in the cases and in the manner prescribed by applicable law.

Service providers processing personal data on our behalf are bound by agreements containing confidentiality and data protection obligations.

6. Cross-Border Data Transfers

The cloud hosting servers and the infrastructure of certain service providers (payment provider, email service, video hosting, analytics) may be located outside the Republic of Kazakhstan. In such cases, a cross-border transfer of personal data takes place.

By ticking the consent checkbox for this Policy, you consent to the cross-border transfer of your personal data for the purposes set out in Section 3. We take steps to ensure that such transfers comply with the personal data legislation of the Republic of Kazakhstan and that recipients provide an adequate level of data protection. [The list of countries/providers and the specific safeguard mechanism are to be confirmed by the company and reviewed by legal counsel.]

7. Data Retention Periods

Personal data is retained for no longer than necessary for the purposes of its processing:

• data related to the performance of the contract (orders, access records, correspondence) — for the duration of the contract and for [3 years] after its performance; [period to be decided by the company and confirmed with legal counsel]
• data required for certificate verification (name, surname, certificate number, course title, issue date) — for as long as the verification service is maintained; [period to be decided by the company]
• data subject to mandatory statutory retention (accounting and payment records) — for the periods prescribed by law;
• upon expiry of the retention periods, data is deleted or anonymised.

8. Your Rights as a Data Subject

Under the Law of the Republic of Kazakhstan “On Personal Data and Its Protection”, you have the right to:

• obtain information on which of your personal data is processed, and on the purposes, sources and methods of processing;
• request that your personal data be corrected or supplemented if it is incomplete, outdated or inaccurate;
• request that processing be blocked where the conditions of data collection and processing have been violated;
• request the destruction of data collected or processed in violation of the law, and in other cases provided for by law;
• withdraw your consent to the processing of personal data;
• lodge a complaint about the Company's actions or omissions with the authorised personal data protection body of the Republic of Kazakhstan or with a court.

To exercise your rights, send a request to hello@ecoind-consulting.com from the email address you provided when placing your order, or include information allowing us to identify you. We respond to requests within the timeframes established by applicable law.

9. Cookies and Analytics

The Platform uses cookies and similar technologies: strictly necessary cookies (required for the website to function) and analytics cookies (helping us understand how the Platform is used).

We use Google Analytics (provided by Google) for web analytics. The service collects anonymised visit data: pages viewed, session duration, device type, and approximate location based on IP address. Analytics data may be processed on Google servers outside the Republic of Kazakhstan.

You can restrict or disable cookies in your browser settings and use Google Analytics opt-out tools. Disabling strictly necessary cookies may affect the operation of the Platform.

10. Data Security

We take legal, organisational and technical measures to protect personal data against unlawful access, alteration, dissemination and destruction, including:

• data transmission over a secure connection (HTTPS/TLS);
• restricting access to personal data to those who need it to perform their duties;
• access to course materials via personal links, without storing user passwords;
• no storage of bank card details — payments are handled by a certified payment provider;
• contractual data protection obligations with service providers.

11. Changes to This Policy

We may update this Policy from time to time. The new version is published on this page with its version date and takes effect upon publication unless stated otherwise. We recommend reviewing this page periodically. Continued use of the Platform after changes are published constitutes acceptance of the updated version.

12. Contact Us

For any questions regarding the processing of personal data, please contact: EcoIndustrial Consulting Limited, 5/2 Dostyk Street, VP-4, Yesil District, Astana, Republic of Kazakhstan, email: hello@ecoind-consulting.com.

Policy version date: July 14, 2026.