1. Introduction
STI-12 commits to protecting customer privacy while complying with Kazakhstan data protection laws. Users agree to policy terms by selecting "Agree" upon access or service use.
2. Information Collected
2.1 Basic Personal Information
- Full name, gender, date of birth
- Username, password, mobile phone, email
- Contact/delivery address
- Linked social accounts (Google/Facebook/Apple)
- Marketing communication preferences
2.2 Identification & Authentication Information
- Duplicate information (DI) for preventing duplicate registrations
- Connecting information (CI) - encrypted identifier
- National ID or passport numbers
- Personal identification numbers
2.3 Health & Medical Information
- Current health status and medical history
- Personal medical records
- Insurance or group agreement information
2.4 Payment & Transaction Information
- Bank card and account information
- Payment records and transaction history
- Invoice details, vouchers, reward points
2.5 Information Generated During Service Usage
- IP address, cookies, service usage logs
- Device access information, location data
- User behavior on website/application
Data collection occurs through registration forms, account creation, phone calls, or service usage. STI-12 collects only necessary data complying with applicable laws.
3. Purpose of Data Collection and Use
- Responding to and contacting customers
- Providing and maintaining services
- Managing user accounts
- Internal management and operations
- Complying with legal regulations
4. Data Retention Period
STI-12 stores data for five years from collection date. Valid deletion requests reset this period until deletion completion. Data is securely deleted after retention ends.
5. Disclosure of Data to Third Parties
Users may opt-in or opt-out of third-party data sharing. With consent, STI-12 shares data with partners for service delivery, complying with all legal regulations and state authority requests.
6. Data Transfer Abroad
STI-12 may transfer data internationally under Kazakhstan law conditions with appropriate authority approval.
7. Disclaimer
STI-12 limits liability for:
- Unauthorized access from user negligence
- Cyberattacks beyond control
- Third-party service failures
- Legal policy changes
- User-caused data modification
- System maintenance interruptions
Users are responsible for protecting accounts and following security instructions.
8. Terms of Compensation for Damages
STI-12 disclaims liability for direct, indirect, or consequential damages from service use or breaches. Users indemnify STI-12 from claims arising from policy violations, service misuse, unauthorized third-party disclosures, or fraudulent activities. Maximum liability equals amounts paid for affected services within 12 months.
9. Policy Changes
STI-12 reserves rights to modify policies for legal compliance or operational improvement. Significant changes receive seven-day advance notice. Continued service use indicates acceptance of revisions.
10. Governing Law, Complaints and Dispute Resolution
Laws of the Republic of Kazakhstan govern all policies. STI-12 addresses complaints within 30 working days. Disputes proceed through good-faith negotiation, then competent courts. Losing parties bear all dispute costs including legal fees.
11. Contact Information
STI-12 (OPEN Healthcare Kazakhstan)
- Address: Almaty, Kazakhstan
- Phone: +7 (727) 000-0000
- Email: support@sti12.kz
- Website: www.sti12.kz