Privacy Policy

Effective date: 1 September 2026

This Privacy Policy explains how Digital Qazaqstan LTD collects, uses, stores and shares personal data under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 when you visit digitalqazaqstan.com, contact us, create or use a platform account, access courses or AI tutor features, manage a subscription, or enquire about professional services through Microsoft commercial marketplace or another channel.

Please read this Policy together with any service-specific or just-in-time privacy information shown when personal data is collected.

Contents

1. Who we are

Digital Qazaqstan LTD is the data controller responsible for the personal data described in this Policy.

  • Legal name: DIGITAL QAZAQSTAN LTD
  • Company number: 17178943
  • Registered in: England and Wales
  • Registered office: Office 393, Unit 5, 399–405 Oxford Street, Mayfair, London W1C 2BU, United Kingdom
  • Privacy contact: porta@aisctech.dev

DIGITAL QAZAQSTAN® is a registered UK trade mark, UK Intellectual Property Office number UK00004263004.

2. Scope

This Policy applies to personal data processed through the Digital Qazaqstan website and platform, including member accounts, subscriptions, learning-management-system features, AI tutor interfaces, enquiry and contact channels, professional services, and leads received through Microsoft commercial marketplace.

Independent websites, vendors, funding bodies and technology programmes linked from our directories operate under their own privacy policies. This Policy does not govern their independent processing.

3. Personal data we collect

Contact and enquiry data

When you contact us through a form, email, telephone call, Microsoft commercial marketplace or another business channel, we may collect your name, work email address, telephone number, job title, company or organisation, country, the text of your enquiry, and any related correspondence or documents that you choose to provide.

Account, subscription and learning data

When you register or use the platform, we may process your email address, user identifier, email-verification and authentication status, account role, subscription and entitlement status, course enrolments, lesson and assessment progress, completion records, certificates, and support history. For paid services, we may also receive billing contact details, invoice references, payment or subscription status, and limited payment-method information supplied by the payment provider, but not a full payment-card number.

Where an AI tutor or metered platform feature is available, we may also process operational usage records such as token counts, model or tool calls, request timestamps, feature usage and calculated usage cost. These measurements may be displayed in your account interface and are used to operate the service, manage limits, provide transparency and support billing or capacity administration. We do not use these measurements to make solely automated decisions about you that produce legal or similarly significant effects.

Microsoft marketplace lead data

If you use a “Contact me” or comparable enquiry action on a Digital Qazaqstan professional-services listing in Microsoft commercial marketplace, Microsoft may provide us with the lead information associated with your request. Depending on the information you submit, this may include your name, work contact details, organisation, job role, country or region, offer of interest and enquiry details.

Technical and security data

Our systems may record IP address, browser and device information, operating system, requested URLs, referring URL, date and time, response status, account and session identifiers, diagnostic events, security events and server logs. We use this information to deliver and protect the platform, diagnose faults and prevent fraud or abuse.

Please do not send special-category data, criminal-offence data, passwords, private cryptographic keys, payment-card details or information that you are not authorised to disclose through ordinary enquiry forms or email.

4. How we obtain personal data

We obtain personal data directly from you when you contact us, create an account, use the platform, enrol in learning content, manage a subscription or request professional services. We may also receive data from Microsoft when it sends us a marketplace lead, from a payment provider when it confirms a payment or subscription status, from a referral partner acting with your authority, or from public business sources where relevant to a genuine professional enquiry.

We use personal data only where we have a lawful basis under the UK GDPR:

  • Contract and pre-contract steps — Article 6(1)(b): to respond to a service request, create and administer your account, provide courses and platform features, manage a subscription, deliver professional services, and take steps at your request before entering into a contract.
  • Legal obligation — Article 6(1)(c): to maintain legally required company, accounting and transaction records, respond to valid legal requests, and comply with applicable law.
  • Legitimate interests — Article 6(1)(f): to operate and secure our website and platform, respond to genuine business enquiries, administer marketplace leads, measure service usage, improve reliability, prevent fraud and misuse, establish or defend legal claims, and maintain appropriate business records. We consider whether these interests are overridden by your rights and interests.
  • Consent — Article 6(1)(a): for optional analytics, advertising or comparable non-essential cookies where consent is required, and for marketing communications where we rely on consent. You may withdraw consent at any time without affecting earlier lawful processing.

6. Microsoft commercial marketplace

Microsoft operates Microsoft commercial marketplace and processes information under the Microsoft Privacy Statement. When you submit an enquiry concerning our offer, Microsoft may transmit the resulting lead to Digital Qazaqstan LTD. From the time we receive that lead, we process it as an independent data controller for responding to the enquiry, assessing the requested work, preparing a proposal, maintaining business records and, if applicable, entering into and performing a contract.

Professional solutions that we implement for a customer are designed to operate within that customer’s own Microsoft Azure tenant. Customer documents and workload content remain in the customer-controlled Azure environment and are not transferred to or stored by Digital Qazaqstan LTD as part of the standard architecture. If a separate support or professional-services engagement requires any access to customer data, its scope, roles, security controls and instructions will be agreed in writing before access is provided.

7. LMS, subscriptions and AI tutors

The learning platform records account status, course enrolment and progress so that requested learning services can be delivered and resumed. Subscription status and service entitlements are used to determine which features are available to an account.

AI tutor interfaces may display metering information, including tokens, calls and usage cost. Metering records are operational account data; they are not sold and are not used for behavioural advertising. Users should not enter confidential customer documents, special-category data or third-party personal data into an AI tutor unless the relevant service expressly permits it and appropriate contractual controls are in place.

8. Cookies and similar technologies

As at the effective date, digitalqazaqstan.com uses the following strictly necessary WordPress cookies or cookie patterns:

  • wordpress_test_cookie — checks whether the browser accepts cookies; it is a temporary session cookie used on the sign-in interface.
  • wordpress_[hash] and wordpress_sec_[hash] — authenticate registered users in secure and administrative areas.
  • wordpress_logged_in_[hash] — keeps a registered user signed in and identifies the authenticated session for platform features.
  • wp-settings-{user_id} and wp-settings-time-{user_id} — preserve interface preferences for a registered user.
  • wp_lang — stores the language selected on the sign-in interface for the browser session.

Authentication-cookie duration depends on whether “Remember Me” is selected and on security configuration. Preference cookies may persist for up to one year. You can block cookies in your browser, but strictly necessary cookies are required for sign-in, account security and requested platform functions.

Our production audit at the effective date did not identify optional browser analytics or advertising cookies on the sampled public website routes, and the LMS does not require a separate public analytics cookie for anonymous visitors. If we introduce optional analytics, advertising or comparable non-essential cookies, we will request consent before setting them where required and will provide a way to withdraw that consent.

If Stripe checkout is enabled for a paid subscription, Stripe may set cookies or use similar technologies that are necessary for payment processing, fraud prevention and security on Stripe-hosted or embedded payment interfaces. Stripe processes payment information under the Stripe Privacy Center. Digital Qazaqstan LTD does not receive or store full payment-card numbers.

9. How we share personal data

We do not sell personal data. We may share limited personal data only where necessary with:

  • hosting, cloud, security, email, authentication, support and other IT providers acting under our instructions;
  • Microsoft in connection with Microsoft commercial marketplace, Azure services and the relevant customer engagement;
  • Stripe or another disclosed payment provider where needed to process or administer a subscription or payment;
  • accountants, auditors, insurers, lawyers and other professional advisers subject to appropriate duties;
  • public authorities, regulators, courts or law-enforcement bodies where disclosure is required or permitted by law; and
  • a purchaser or successor in connection with a genuine corporate transaction, subject to appropriate confidentiality and data-protection safeguards.

Where you ask us to arrange access to an independent perk, technology programme, vendor or other third-party service, we may provide the minimum information needed to fulfil that request or enable the requested access.

10. International transfers

Some providers, professional advisers or business operations may process personal data in the European Economic Area, the United States, the United Arab Emirates or other locations outside the United Kingdom.

Where UK data-protection rules treat a transfer as restricted, we use an applicable UK adequacy regulation or appropriate safeguards such as the UK International Data Transfer Agreement, the UK Addendum to approved EU Standard Contractual Clauses, or another lawful transfer mechanism. Where required, we also assess transfer risks and apply supplementary technical and organisational measures.

11. Retention

  • Enquiries and Microsoft marketplace leads: normally 24 months after the last meaningful contact, unless the enquiry results in a contract or a longer period is needed for a legal claim.
  • Contractual, invoicing and accounting records: normally six years after the end of the relevant financial year or contractual relationship, as applicable.
  • LMS accounts, subscription status, learning progress and AI tutor metering: while the account or subscription is active and for 24 months afterwards.
  • Security and server logs: for the operational period reasonably necessary for security, diagnostics and incident investigation, and longer only where required for an identified incident, legal obligation or claim.
  • Consent and suppression records: for as long as needed to demonstrate consent or ensure that an opt-out continues to be respected.

We may delete or irreversibly anonymise information earlier when it is no longer required. A service provider may retain separate records where it has an independent legal obligation to do so.

12. Security

We use proportionate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. Measures include access controls, secure authentication, encrypted network transport, system hardening, logging, backups and provider oversight where appropriate. No online service can guarantee absolute security.

13. Your rights

Subject to the conditions and exemptions in UK data-protection law, you may have the right to:

  • request access to your personal data;
  • request correction of inaccurate or incomplete data;
  • request erasure of your data;
  • request restriction of processing;
  • object to processing based on legitimate interests or to direct marketing;
  • request portability of data you provided in applicable circumstances; and
  • withdraw consent at any time where processing relies on consent.

To exercise a right, email porta@aisctech.dev. We may request information needed to verify your identity and clarify the request. We normally respond within one month. Where the law permits an extension because a request is complex or numerous, we will notify you within the initial one-month period.

14. Complaints

Please contact us first so that we can investigate your concern. You also have the right to complain to the UK Information Commissioner’s Office. Information about making a data-protection complaint is available at ico.org.uk.

15. Changes to this Policy

We may update this Policy to reflect changes in our services, technology, providers or legal obligations. The current version and its effective date will be published on this page. Where a change materially affects how we use personal data, we will provide additional notice where required.

16. Contact

Questions, requests or concerns about this Privacy Policy may be sent to:

Digital Qazaqstan LTD
Office 393, Unit 5
399–405 Oxford Street
Mayfair, London W1C 2BU
United Kingdom
Email: porta@aisctech.dev