Privacy Policy

Effective date: 21 May 2026
Version: 1.0

1. General provisions

This Privacy Policy (the Policy) governs the processing of personal data of users of the hitz.agency website (the Site) and establishes the procedure for its collection, use, storage, transfer, and protection.

The Policy has been prepared in accordance with the requirements of:

Law of the Republic of Kazakhstan No. 94-V dated 21 May 2013, “On Personal Data and Their Protection” (as amended)
Law of the Republic of Uzbekistan No. ZRU-547 dated 2 July 2019, “On Personal Data” (as amended)

By using the Site and submitting your data through it, you confirm that you have read the Policy and accept its terms. If you do not agree with the terms of the Policy, please stop using the Site.

2. Personal data controllers

The joint controllers are:

For users from the Republic of Kazakhstan:

HITZ AGENCY LLP

BIN 240440025464

Address: Almaty, Republic of Kazakhstan

For users from the Republic of Uzbekistan:

HITZ AGENCY LLC

TIN 311213535

Address: Tashkent, Republic of Uzbekistan

Hereinafter, both legal entities are jointly referred to as the Controller.

Contact for personal data processing matters: hello@hitz.agency

3. Terms

The following terms are used in the Policy:

Personal data: any information relating directly or indirectly to an identified or identifiable individual (the personal data subject)
Processing of personal data: any action or set of actions performed on personal data, including collection, recording, systematization, storage, updating, use, transfer, anonymization, and deletion
Subject: the individual to whom the personal data relates
Site: the hitz.agency web resource, including all subdomains and pages
User: an individual who visits the Site
Cookies: small text files that the Site stores in the user's browser

4. Data we collect

4.1. Data you provide

When you complete forms on the Site, including consultation requests, contact forms, and subscriptions to materials, you may provide:

name
company name
telephone number
email address
messenger contact details, such as Telegram or WhatsApp
the text of your request or a description of the task
other data that you provide voluntarily

4.2. Data collected automatically

When you visit the Site, we automatically receive technical data:

IP address
device information, including type, operating system, and screen resolution
browser information, including type, version, and language
the source from which you reached the Site (referrer)
the Site pages you visited and the time spent on them
actions on the Site, including clicks, scrolling, and form completion
cookie identifiers
service cookies used by the Tilda Publishing platform to count visits; these operate regardless of cookie settings because they form part of the Site's technical infrastructure

4.3. Data from analytics systems and social media pixels

The Site uses the following services for analytics and marketing:

Yandex Metrica (Yandex LLC)
Google Analytics 4 (Google LLC)
Facebook Pixel and pixels from other social networks (Meta Platforms Inc.)
remarketing and targeted advertising services

These services may collect data about your behaviour on the Site through cookies and tracking pixels.

5. Purposes of processing

We process your data for the following purposes:

processing your applications and requests
contacting you about HITZ services
preparing and sending commercial proposals
entering into and performing contracts
informing you about new services, blog materials, and updates, only with your consent
improving the Site and analysing user behaviour
conducting marketing research
targeted advertising in search engines and social networks
protecting the Site against fraud and failures
complying with legal requirements

6. Legal grounds for processing

We process your data on one of the following grounds:

Your consent, given through an active action such as checking a box in a form, submitting a form, or continuing to use the Site after receiving a cookie notice
Entering into and performing a contract with you or your organisation
The Controller's legitimate interest in business development, analytics, and fraud prevention, provided that this does not infringe your rights
Compliance with the laws of the Republic of Kazakhstan and the Republic of Uzbekistan

You may withdraw your consent at any time by emailing hello@hitz.agency.

7. Cookies and tracking technologies

7.1. What cookies are

Cookies are small text files that the Site stores in the browser on your device. They help the Site remember your actions and preferences.

7.2. Cookies we use

Technical (necessary). These support the Site's basic operation and security, form submission, and visit counting at the hosting platform level (Tilda Publishing). The Site cannot operate without them. They do not require consent.
Analytics. These help us understand how users interact with the Site. We use Yandex Metrica and Google Analytics.
Marketing. These are used to show relevant advertising and include pixels from social networks and remarketing services.
Functional. These remember your settings, such as language.

7.3. Managing cookies

When you first visit the Site, you will see a cookie notice. You can:

accept all cookies
disable individual cookie categories in your browser settings
delete previously stored cookies through your browser settings

Disabling cookies may limit the Site's functionality.

8. Transfer of data to third parties

8.1. Recipients of your data

We transfer your data to the following categories of recipients:

Hosting and infrastructure. Tilda Publishing (Tilda Publishing LLC) is used to host the Site and collect technical visit statistics within the platform's infrastructure. Tilda installs service cookies to count visitors and operate the Site. This processing is an integral part of using the platform and is carried out under an agreement with Tilda Publishing. More information: tilda.cc
Analytics systems. Yandex LLC (Yandex Metrica) and Google LLC (Google Analytics)
Advertising platforms. Yandex Direct, Google Ads, Meta (Facebook and Instagram), TikTok, LinkedIn, and other platforms on which we advertise
Mailing services. If you consent to receiving mailings, email marketing services are used
CRM systems and task trackers. These are used to process applications and communicate with you
Payment services. When services are paid for, Kaspi Bank, Trastbank, and other banks and payment operators are used
Government authorities of the Republic of Kazakhstan and the Republic of Uzbekistan, where required by law

We do not sell your personal data to third parties.

8.2. Cross-border data transfers

Some of these services have infrastructure outside the Republic of Kazakhstan and the Republic of Uzbekistan. By using the Site and providing data, you consent to the cross-border transfer of your data to the countries in which the servers and offices of these services are located.

We aim to work with services that provide an adequate level of data protection and comply with international standards.

9. Retention periods

Retention periods depend on the category of data and the purpose of processing:

Application form data: three years from receipt, after which it is anonymised or deleted
Client data under concluded contracts: five years after the contractual relationship ends, as required by tax and accounting laws
Cookies and analytics data: 14 to 26 months, depending on the cookie type and service settings
Mailing list subscriber data: until consent to receive mailings is withdrawn
Site logs, including IP addresses and actions: 12 months

After these periods expire, the data is deleted or anonymised unless otherwise required by law.

10. Data protection measures

We apply technical and organisational measures to protect your data:

encrypting data in transit using HTTPS and an SSL/TLS certificate
restricting employee access to data
regularly updating security systems
storing data on secure servers operated by reliable providers
internal training for employees who handle personal data
regular audits of processing procedures

If an incident has caused or may cause a data breach, the Controller will notify the competent authorities of the Republic of Kazakhstan and the Republic of Uzbekistan and the affected subjects in the manner and within the time limits established by law.

11. Your rights

You have the right to:

obtain information about which of your data we process
obtain a copy of your data
request that inaccurate data be clarified, corrected, or deleted
withdraw your consent to processing
request that processing be stopped and your data deleted
restrict processing
object to processing for marketing purposes
submit a complaint to the competent personal data protection authority

To exercise your rights, email hello@hitz.agency with the subject line “Personal Data Request”. We will respond within 15 working days of receiving the request.

Attach a copy of an identity document to your request, or provide information that allows us to identify you, and describe the nature of your request.

12. Contacts of competent authorities

If you believe your rights as a personal data subject have been violated, you may contact the competent authority:

In the Republic of Kazakhstan:

Ministry of Artificial Intelligence and Digital Development of the Republic of Kazakhstan

Information Security Committee

Website: gov.kz

In the Republic of Uzbekistan:

State Inspectorate for Control in the Field of Informatisation and Telecommunications (UZKOMNAZORAT)

State Personalisation Centre

Website: gki.gov.uz

13. Use of the Site by minors

The Site is not intended for users under the age of 18. We do not knowingly collect data from minors. If you are a parent or legal guardian and learn that your child has provided us with data, email hello@hitz.agency to request its deletion.

14. Changes to the Policy

We may update the Policy from time to time. The current version is always available at hitz.agency/en/privacy.

If material changes are made, we will notify you by:

placing a notice on the Site's home page
sending a notice by email to subscribers and clients

The date of the latest update appears at the beginning of this document. Continued use of the Site after changes are made means that you accept the new version.

15. Governing law

The Policy is governed, as applicable, by the laws of the Republic of Kazakhstan and the Republic of Uzbekistan. Disputes are resolved in accordance with the laws of the jurisdiction in which the personal data subject is located.

16. Contact details

For all matters relating to personal data processing, contact us at:

Email: hello@hitz.agency
Telephone: +7 775 347 69 76
Telegram: t.me/hitzmedia

The controllers' addresses are listed in Section 2 of the Policy.