Privacy and Personal Data Processing Policy

1. Personal data operator

The personal data operator is Heat Energy Capital LLP, BIN 240240013512.

Registered address: 11 Älihan Bökeyhan St., premises 1, Yesil district, Astana, Republic of Kazakhstan. Business address: 27/1 Älihan Bökeyhan St., premises 10, Yesil district, Astana.

For questions about data processing or to withdraw consent, contact info@heatenergycapital.kz or +7 701 773 44 44.

2. Data we collect

• surname, first name, and patronymic where applicable;
• telephone number and email address;
• the inquiry text, selected product details, and other information voluntarily provided by the user;
• consent status and parameters, Policy version, and form submission date and time;
• technical data that may be processed by infrastructure providers: IP address, browser and device information, request date and time, and technical logs;
• the selected site language stored locally in the user's browser.

3. Purposes of processing

• receiving and processing inquiries and contacting the user;
• preparing commercial proposals, selecting products, and discussing supply terms;
• entering into and performing contracts and maintaining business correspondence;
• maintaining, securing, and improving the website;
• sending informational and promotional messages only where separate consent has been provided;
• complying with the laws of the Republic of Kazakhstan.

4. Legal grounds and processing operations

Processing is based on the user's consent, the need to review an inquiry, enter into or perform a contract, and applicable laws of the Republic of Kazakhstan.

Processing may include collection, recording, organization, accumulation, storage, updating, use, transfer to authorized service providers, restriction, and deletion.

5. Retention periods

Data submitted through website forms is retained until the inquiry has been processed, but no longer than one year from receipt unless a longer period is required by the laws of the Republic of Kazakhstan or by contract. Contact details used for informational and promotional communications are processed until the user withdraws the separate consent.

6. External services and data transfers

The website, inquiry handler, and corporate email are hosted on PS.kz infrastructure in the Republic of Kazakhstan. Form data is transmitted over an encrypted connection directly to the website server and delivered to the corporate mailbox info@heatenergycapital.kz.

The website source code may be stored in the GitHub version-control service, but information entered by visitors into website forms is not transmitted there. The 2GIS link opens only at the user's initiative; after navigation, data is processed under the external service's rules.

Personal data submitted through website forms is not transferred across national borders and is not disseminated through publicly accessible sources.

We do not sell personal data or disclose it for third parties' independent purposes except where required by the laws of the Republic of Kazakhstan.

7. Marketing communications

Informational and promotional messages are sent only to users who separately consent to receiving them. This consent is not required to submit an inquiry. Users may unsubscribe at any time by contacting info@heatenergycapital.kz.

8. Cookies and local storage

The website language is determined by the page URL. We do not use our own advertising or analytics cookies and do not load third-party maps without user action.

9. User rights

• receive information about the processing of their personal data;
• request correction, restriction, or deletion where there are lawful grounds;
• withdraw processing consent and separately unsubscribe from promotional messages;
• challenge the operator's actions in accordance with the laws of the Republic of Kazakhstan.

10. Security and Policy updates

The operator takes organizational and technical measures to protect data against unauthorized access, alteration, disclosure, or destruction.

This Policy may be updated when the website, services, or applicable laws change. A new version takes effect on the date shown on this page and is published at heatenergycapital.kz/privacy.