Privacy policy
This page sets out what data the site collects, why we need it, who we pass it to and what you can do about it. We have tried to write it in plain language; where the law requires an exact wording, it sits next to the explanation.
1. Who processes your data
The site smartlearninghub.iossglobal.kz belongs to the organisation named below, which in the terms of Kazakhstan law is the owner and operator of personal data — the party that collects it, stores it and answers for its protection.
Any question about how your data is handled goes to the address below; we answer those the same way, and as quickly, as commercial enquiries.
2. What we collect
Only what a proposal cannot be prepared without. No hidden fields and nothing gathered just in case.
- From the enquiry form: your name, organisation, job title, work email, phone number (optional), industry, headcount, the package you are interested in, the international-programmes and integrations toggles, and your comment.
- How you reached the site: the campaign tag (UTM), the page you came from and the page you landed on. This lets the manager understand the context of your enquiry instead of starting from scratch.
- The language of the page you sent the enquiry from, so that we call you back in the language you were reading.
- The technical details any website receives when it is opened: your IP address and browser information. They are processed while your enquiry is being delivered and are not accumulated separately by us.
3. What we never collect
We do not collect biometrics, health information, national identification numbers, identity-document details or any other special category of data. If something of that kind ends up in the comment field, we remove it from the record.
The demo cabinet and demo courses on this site run on fictional employees and fictional certificates. Nothing you click there is saved or sent anywhere.
4. Why we need it
- To contact you and prepare a proposal that fits your industry, headcount and objectives.
- To know which channel the enquiry came from — in industrial B2B, months pass between a first visit and a signed contract, and without this there is no way to tell what actually works.
- To keep a record of the conversation, so that a later enquiry does not start with the same questions again.
5. On what legal basis
We process your data with your consent — article 8 of the Act of the Republic of Kazakhstan of 21 May 2013 No. 94-V on personal data and its protection. You give that consent by an action: submitting the form, or pressing “Accept” on the banner.
The Act sets out what consent must contain (article 8, paragraph 4). Here is all of it:
- Who the operator is: the legal name and business identification number are in the “Contacts” section below.
- Whose data: yours — the details you entered in the form yourself.
- How long consent lasts: until the purpose it was given for is achieved — that is, while we are working on your enquiry and remain in contact. You may withdraw it at any time.
- Transfer to third parties: yes, it happens — but only to the services through which your enquiry physically reaches us. The list is closed and appears in section 6.
- Cross-border transfer: yes, it happens. The detail is in section 7.
- Publication in publicly available sources: no. We never publish your data anywhere.
- The list of data collected: it is in section 2.
- In addition: your data is not used for marketing mailings unless you ask for them, and it is never passed to anyone for sale or exchange.
6. Who we share it with
The list is closed. Each of these services exists so that your enquiry arrives and is not lost — and none of them receives your data for purposes of its own.
- Bitrix24 — the system your enquiry lives in once it is sent. Our portal: ioss-global.bitrix24.kz.
- Cloudflare — a thin layer between the form and Bitrix24. It passes the enquiry on and does not store it. That layer exists for your safety: without it, the access key to our CRM would have to sit in the page source, where anyone could read it.
7. Cross-border transfer
The services your enquiry passes through operate outside Kazakhstan, so data does cross the border. The Act permits this where the subject has consented (article 16, paragraph 3, sub-paragraph 1) — and that consent is the basis.
If your organisation's internal rules require data to stay inside the country, do not use the form: write or call us directly using the contacts below. We will take the enquiry without the website, and no cross-border transfer will take place.
8. How long we keep it, and how it is deleted
Your enquiry is kept while we are working on it, and afterwards as a record of contact, so that a later approach does not start from nothing. The Act ties the retention period to the purpose of collection being achieved (article 12, paragraph 2).
If you ask us to delete your data, we delete it. The Act allows one working day for personal data to be amended, blocked or destroyed (article 25, paragraph 2, sub-paragraph 8), and that is the deadline we work to.
9. Your rights
Article 24 of the Act gives you rights you may exercise at any time and free of charge. An email to our address is enough — no special form or written application is needed.
- To know whether we hold your data, where we got it, why we hold it and for how long.
- To require it to be corrected or completed if anything is wrong.
- To require it to be blocked if you believe we are processing it improperly.
- To require it to be deleted.
- To withdraw your consent — entirely, or only for the notes kept in your browser.
- To complain about our actions to the authorised body for personal data protection, or to a court.
10. How we protect it
- The site runs over HTTPS only: what you type into the form cannot be read in transit.
- The CRM access key sits on the server side, never in the page source. It is nowhere in the open.
- Enquiries are visible only to staff with named accounts in the CRM.
- Instead of a captcha there is a hidden trap for bots: you never have to decode pictures, and rubbish stays out of the pipeline.
11. Analytics counters
No analytics counter is running on this site at present. That is literal: the pages load neither Google Analytics nor Yandex Metrica nor any other third-party script, and there is not a single third-party cookie on the site.
If counters are added, this section will change and the banner will ask for consent again.
12. What exactly is kept in your browser
The site sets no cookies in the usual sense: everything it needs lives in the browser's local storage and is not sent to a server on its own. Here is the complete list — we create no other records.
| Record | What it is for | How long it lives |
|---|---|---|
| ioss_consent | Your answer to the banner. Without it, the banner would ask the same question on every page. | Until withdrawn or the browser is cleared |
| ioss_attr_first | A note of where you first came from. Created only after you press “Accept”. | Until withdrawn or the browser is cleared |
| ioss_attr_first_pending | The same note, held while you have not yet answered the banner. Without consent it stays temporary. | Until you close the tab |
| ioss_attr_last | A note of where you came from this time. It lets the source travel with your enquiry. | Until you close the tab |
If you chose “This visit only”, only the last two records remain — the ones that disappear with the tab.
13. If this policy changes
The current version always sits at this address, with its date under the title. If the substance of what you agreed to changes, the banner will ask for consent again: the meaning of consent already given cannot be altered silently.
Contacts
Any question about data handling goes here. It is answered by the same team as commercial enquiries.
- Operator
- Industrial and Operational Support Services LLP (IOSS Global)
- BIN
- 190240015369
- Address
- 7/2 Quttyghai Batyr St, Atyrau 060015, Kazakhstan
- sales@iossglobal.com
- Phone
- +7 776 147 4747