Instant delivery 24/7

Privacy policy

Version of August 5, 2026

What we collect, why it is needed and what happens to it. In short: an email address, the contents of your order, anonymised technical fingerprints and anonymised visit statistics - nothing else.

1.Who processes the data

  1. 1.1The data controller is KZ Gift Card, owner of the website kzgiftcard.com.
  2. 1.2Enquiries about data processing should be sent to the email address listed in the seller details.

2.What data is collected

  1. 2.1Your email address - required: the code and the order link are sent to it.
  2. 2.2Order data: the amounts chosen, the price, the payment currency, the payment status, the language of the order and the timestamps of order events.
  3. 2.3Technical data: your IP address and browser details are stored with the order. They are used only for fraud prevention, rate limiting and the investigation of disputed payments, including requests from your bank.
  4. 2.4Anonymised information about your visit: the pages you viewed, the referring source and the advertising click identifier if you arrived from an ad. This is collected by web analytics counters and is not tied to you by name.
  5. 2.5The time of each code reveal - so that a dispute can be investigated.
  6. 2.6The seller neither receives nor stores bank card details: they are entered on the payment provider's side.

3.Why the data is processed

  1. 3.1Performing the contract: issuing the code, sending order emails, giving access to previously purchased codes.
  2. 3.2Preventing fraud and abuse: rate limits, manual review of individual orders, handling disputes with banks.
  3. 3.3Measuring advertising and usability: how many people went from an ad to a purchase and where the others stopped. This uses anonymised statistics, not the data of an individual buyer.
  4. 3.4Meeting obligations under the legislation of the Republic of Kazakhstan.
  5. 3.5The data is not used for marketing mailings.

4.Legal basis

  1. 4.1The concluded contract of sale and the consent given by the buyer when placing an order.
  2. 4.2Requirements of the legislation of the Republic of Kazakhstan, including accounting rules.

5.Who the data is shared with

  1. 5.1The payment provider - what is needed to process a payment or refund: the amount, the currency, the order identifier and the buyer's contact.
  2. 5.2The email delivery provider - the recipient's address and the contents of the message.
  3. 5.3Government authorities - only in cases expressly provided for by law.
  4. 5.4Analytics services - Yandex Metrica and Google Analytics: anonymised visit information, the order number and its amount. The email address, gift card codes and payment data are never sent to them.
  5. 5.5Personal data is never sold. Advertising systems receive only the fact and the amount of a purchase against an anonymised ad click identifier, which cannot be used to identify the buyer.

6.Cookies and analytics

  1. 6.1Technical cookies: encrypted session cookies for buyers and staff. Signing in is impossible without them.
  2. 6.2Cookies of web analytics counters - Yandex Metrica and Google Analytics. They tell visitors apart between visits and link a purchase to the ad the person arrived from.
  3. 6.3The advertising click identifier from the page address is kept in your browser for up to 90 days and is sent together with the order, so that advertising knows which ad led to the purchase.
  4. 6.4The counters can be switched off in your browser - with an ad blocker or by blocking third-party cookies. This has no effect on placing an order or receiving your code.
  5. 6.5Session recording (webvisor) is not used: the order page shows the gift card code, and no such recording should exist.

7.Retention periods

  1. 7.1Order data is kept for the period required by law for accounting records, after which it is deleted or anonymised.
  2. 7.2One-time sign-in links and rate-limit counters are deleted automatically once they expire.

8.How the data is protected

  1. 8.1Gift card codes are stored encrypted and are decrypted only when shown to the buyer or sent by email.
  2. 8.2The account area has no password - so there is nothing to leak and nothing to brute-force.
  3. 8.3Staff access to data is restricted and recorded in an audit log.

9.Your rights

  1. 9.1You may request information about the processing of your data and ask for it to be corrected, blocked or deleted.
  2. 9.2Consent to processing may be withdrawn. Data the seller is required by law to keep is deleted once that period expires.
  3. 9.3Send your request from the email address the order was placed with - otherwise we cannot confirm that it comes from the data subject.

10.Changes to this policy

  1. 10.1The current version of the policy is published on this page, with its date shown at the top.
  2. 10.2Material changes take effect when published.

Seller details

Seller
KZ Gift Card
Contact email
support@kzgiftcard.com