Privacy Policy

Data Controller

The data controller is Toi.kz LLC, registered in the Republic of Kazakhstan. For questions about data processing, please contact: privacy@toi.kz.

What Data We Collect

When registering and using the platform, we may collect the following data:

• First and last name
• Phone number
• Listing data: title, description, photos, price, address
• Technical data: IP address, browser type, pages visited

Purposes of Data Processing

Collected data is used for the following purposes:

• User identification and account management
• Publishing and managing listings
• User support and responding to inquiries
• Platform security and fraud prevention
• Service quality improvement

Data Retention

Personal data is stored for the duration of the user account and for 3 years after deletion — in accordance with the requirements of the legislation of the Republic of Kazakhstan. Technical data (logs) is stored for no more than 1 year.

Data Transfers to Third Parties

We do not sell or transfer your personal data to third parties for commercial purposes. Data may be transferred only in the following cases: at the request of authorized state authorities of the Republic of Kazakhstan in accordance with applicable law; to infrastructure service providers (hosting, cloud storage) ensuring the operation of the platform, subject to confidentiality obligations.

Cookies

The platform uses only strictly necessary cookies for user authentication and session management. These cookies are not used for tracking or advertising purposes, are not shared with third parties, and are stored for no more than 7 days. Without these cookies, signing in to your account is not possible.

Your Rights

In accordance with the Law of the Republic of Kazakhstan «On Personal Data and Its Protection», you have the right to:

• Access your personal data
• Request correction of inaccurate data
• Request deletion of data (right to be forgotten)
• Receive data in a structured format
• Object to the processing of data

To exercise your rights, send a request to privacy@toi.kz. We will respond within 30 days.

Data Security

We apply technical and organizational measures to protect your data: data transmission encryption (HTTPS), httpOnly cookies for authorization tokens (tokens are inaccessible to browser JavaScript), limited employee access to personal data.

Contact Information

For any questions related to personal data processing, please contact: privacy@toi.kz. We review requests within 30 calendar days.

Changes to This Policy

We may update this Policy. We notify users of changes by posting the new version on the platform with the update date. Continued use of the platform after changes are posted constitutes acceptance of the new Policy.