PRIVACY POLICY


Welcome to the First Finance website, owned by First Finance KZ LLP, BIN 240240013295 (hereinafter referred to as the Company or the Rights Holder). We shall protect your personal data and respect your privacy.
This Privacy Policy explains how we collect, use, disclose, and protect your personal data when you interact with our website.
This Policy applies to all personal data collected and processed through our website, including data collected through our integrated digital solutions designed for personalized interaction with users and secure data management.
We fully comply with the provisions of the Law of the Republic of Kazakhstan dated May 21, 2013 No. 94-V on Personal Data and Their Protection, ensuring transparency, accountability, and security in processing your personal data. By accessing or using the Website, you acknowledge and agree to this Privacy Policy.
Our commitments include:
– Protecting your data with reliable technical and organizational measures.
– Explaining your rights regarding personal data and the ways to exercise them.
– Ensuring that any processing of your data shall be lawful, fair, and transparent.
If you do not agree with the terms of this Privacy Policy, please refrain from accessing and using our Website. Should you have any questions or require clarifications, you may contact us using the information provided in the Contact Us section.

1. DEFINITIONS

  • Personal Data: any information relating to an identified or identifiable individual.
  • Processing: any operation performed on personal data, such as collection, storage, use, disclosure, and deletion.
  • Data Subject: an individual whose personal data is being processed.
  • Controller: the organization that determines the purposes and means of processing personal data.
  • Processor: the organization that processes personal data on behalf of the controller.
  • Data Transfer: any provision, disclosure, transmission, access, or other movement of personal data to a third party or to another jurisdiction, including cross-border transfers carried out in accordance with applicable data protection laws.

2. DATA COLLECTION

We collect and process personal data in order to provide and improve our Services, comply with legal requirements, and pursue our legitimate business interests. This includes information you provide directly, data collected automatically, and information obtained from third parties. Below, we describe the types of data we collect and the methods we use:
Categories of personal data collected:
1.       Identification data: name, email address, phone number, mailing address, and other identifiers required to provide our Services.
2.       Technical data: IP address, browser type, device information, operating system details, and other diagnostic data.
3.       Usage data: information about your interactions with our Services, such as the pages you visit, the duration of your visits, your navigation routes, and the actions you perform.
4.       Communication data: messages sent through contact forms, email, or other communication channels.
5.       Payment data (if applicable): billing address, payment method details, and transaction history.
6.       Location data: precise or approximate location information collected via GPS or other geolocation services, if applicable.
7.       Behavioral data: information collected through cookies, web beacons, and similar technologies to understand user preferences and improve user experience.

How we collect data:
  • Direct input: when you provide information during account registration, form submission, or customer support requests.
  • Automated technologies: by means of cookies, server logs, tracking pixels, and analytics tools when using the Website or applications. We automatically collect and store certain types of information about your use of the Website, including information regarding your interaction with products, content, and services available on the Website. Like many online resources, we use cookies and other unique identifiers, and we obtain certain types of information when your web browser or device accesses our Services and other content provided by or on behalf of us on other websites.
  • Third parties: from affiliates, service providers, or public sources, including social media platforms to enhance our understanding of user needs.

Information collection through digital platforms:
  • Detailed user activity logs, including file downloads, settings, and user preferences.

Use of cookies and similar technologies:
We use cookies, pixel tags, and local storage to:
  • Recognize returning users and personalize their experience.
  • Analyze Website performance and improve our Services.
  • Deliver targeted advertising and measure its effectiveness.
For more information about cookies, please review our (Cookie Policy).
We do not intentionally collect sensitive personal data, such as medical information, except where explicitly required and with your consent.

3. LEGAL GROUNDS FOR PROCESSING

We process your personal data on the following legal grounds:
1.       Consent: consent shall be deemed granted through the act of acceptance expressed by completing registration on the Website and creating an account.
2.       Contractual necessity: to fulfill a contractual obligation with you or take steps at your request prior to entering into a contract.
3.       Legitimate interests: for our legitimate interests, provided that your rights and interests do not conflict these interests.

4. PURPOSES OF PROCESSING

We use your personal data for the following purposes:
  • To provide services and ensure the proper functioning of the Website.
  • To administer your user account and provide customer support.
  • To communicate with you, including responding to inquiries.
  • To analyze usage and improve the Website and the services provided.
  • To comply with statutory obligations and protect our rights.

5. DATA SHARING AND INTERNATIONAL TRANSFERS


During the provision of our Services, your personal data may be transferred to, stored, and processed in countries outside the Republic of Kazakhstan. The data protection laws in those countries may differ from the laws of your jurisdiction. However, we are committed to ensuring that your personal data remains secure and is processed in accordance with this Privacy Policy and applicable data protection regulations.
Circumstances of international transfers:
1.       Service providers: we may engage third-party service providers located in various countries to perform tasks such as hosting, analytics, payment processing, or customer support.
2.       Affiliates and partners: personal data may be shared with our global subsidiaries, affiliates, or trusted partners to support business operations.
3.       Statutory obligations: in certain cases, we may be required to transfer data in compliance with legal or regulatory requirements of other jurisdictions.
Safeguards applied to data transfers:
To ensure adequate protection of your personal data during international transfers, we implement the following safeguards:
1.       Adequacy decisions: transferring data to countries recognized by the European Commission as providing an adequate level of data protection.
2.       Other measures: encryption, pseudonymization, and strict contractual obligations with third parties to ensure data security.
Data location transparency:
Your personal data may be processed in the following regions:
  • United States: hosting and analytics services provided by leading technology companies.
  • Republic of Kazakhstan: we ensure that such processing complies with applicable data protection standards, such as the Law of the Republic of Kazakhstan on Personal Data and Their Protection.
  • EEA Member States: processing of user data within the EEA.
  • Other regions: specific cases involving support services or global partnerships.
Your rights and choices:
If your data is transferred internationally, you retain all rights under the Law of the Republic of Kazakhstan dated May 21, 2013 No. 94-V on Personal Data and Their Protection. You may request information regarding:
  • The location of your data.
  • Specific safeguards applied by us during transfer.
We continuously review and update our transfer practices to ensure compliance with evolving legislative requirements and industry standards. For additional information, please contact us (see Contact Information).

7. DATA STORING

We store your personal data solely for the duration needed to fulfill the purposes for which it was collected, comply with statutory obligations, resolve disputes, and enforce our agreements.

8. RIGHTS OF THE DATA SUBJECT

Pursuant to the Law of the Republic of Kazakhstan dated May 21, 2013 No. 94-V on Personal Data and Their Protection, you shall have the following rights:
– Right of access: obtain confirmation of whether your personal data is being processed and access your data.
– Right to rectification: request correction of inaccurate or incomplete data.
– Right to erasure: request deletion of your personal data under certain conditions.
– Right to restriction: request limitation of processing under certain circumstances.
– Right to data portability: receive your personal data in a structured, commonly used format and transmit it to another controller.
– Right to object: object to processing based on legitimate interests or for direct marketing purposes.
– Right to withdraw consent: withdraw consent at any time without affecting the lawfulness of processing based on consent prior to withdrawal.
To exercise these rights, please contact us at the following email address: Feshchenko@firstfinance.kz.

9. DATA SECURITY

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction.

10. COOKIES AND TRACKING TECHNOLOGIES

We use cookies and similar tracking technologies to improve your experience on our Website. For detailed information, please review our (Cookie Policy).

11. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and indicating the “Last Updated” date.

12. CONTACT US

If you have any questions or concerns regarding this Privacy Policy or our data processing practices, please contact us at: