This policy explains which personal data of tophr.kz visitors we process, why and how. It follows the Law of the Republic of Kazakhstan "On Personal Data and Their Protection". It covers the tophr.kz website only; employee data inside the TopHR platform is governed by the agreement with the client.

Who processes the data

Cloudmaker LLP (ТОО «Cloudmaker»), BIN 150740013274, 69 Tole bi St., 6th floor, office 16, Almaty, Republic of Kazakhstan. Email for data questions: info@cloudmaker.kz.

What data we receive

From the contact form on the "Contacts" page: name, phone, email, company name, number of employees, comment, as well as the request topic and form language.

Visit data — only if you have agreed to cookies (see the Cookie Policy): pages viewed, traffic source, device and browser type, approximate location based on IP address, cookie identifiers, on-page actions.

Technical data: the IP address is used to protect the form from repeated submissions and spam. It is stored in the server's temporary files only as a hash (irreversibly encrypted) and is not used for anything else.

Why we process it

  • to respond to your request: contact you, run a demo, prepare an offer;
  • to understand how the site performs: which pages are useful and where visitors come from;
  • to protect the form from spam and abuse.

We don't sell personal data and don't use it for mailings without your separate consent.

Who we share data with

  • Discord Inc. (USA) — form submissions are sent straight to our team's internal channel in the Discord messenger. The site doesn't store submissions in its own database.
  • Google LLC (USA) — Google Analytics and Google Tag Manager. If analytics is enabled, Google also receives the email and phone from the form in hashed (irreversibly encrypted) form. See the Google Privacy Policy.
  • Yandex LLC (Russia) — Yandex.Metrica, including session replay. If analytics is enabled, Metrica records on-page actions and may receive data entered in the form in partially masked form. See the Yandex Privacy Policy.

These services process data on servers outside Kazakhstan. By submitting the form, you consent to this cross-border transfer.

How long we keep data

  • form submissions — 1 year from receipt, then deleted unless an agreement has been signed in that time;
  • Google Analytics data — no longer than the retention period set for the property (14 months at most);
  • Yandex.Metrica data — under Yandex's rules.

You can ask us to delete your data earlier — see "Your rights".

Legal basis

We process form data based on your consent, which you give by clicking "Send request". Visit data is processed based on your cookie consent. You can withdraw your consent at any time.

Your rights

You can find out what data we hold about you, ask us to correct, complete or delete it, and withdraw your consent to processing. To do so, email info@cloudmaker.kz. We will respond within the time limits set by the legislation of the Republic of Kazakhstan.

To turn off analytics, delete the site's cookies and block them in your browser settings. See the Cookie Policy for details.

How we protect data

The site works over HTTPS only. Only the employees who handle submissions have access to them. Access keys for external services are stored outside the public part of the site.

Changes to this policy

We may update this policy. The current version is always available on this page; the version date is shown at the top.