Privacy Policy

1. General Provisions

The personal data controller is IE Kursa Technology (Almaty, Republic of Kazakhstan), the owner of the Kursa Academy product and the website https://kursa.technology. This Policy applies to users of the website and platform, including contact forms and personal accounts. Data processing is carried out in accordance with the Law of the Republic of Kazakhstan "On Personal Data and Their Protection" dated May 21, 2013 No. 94-V and, where applicable, Regulation (EU) 2016/679 (GDPR).

2. What Data We Collect

Depending on how you use the platform, we may collect:

• Identity data: first name, last name, date of birth, and other profile data you provide voluntarily.
• Contact data: email, phone number, and other communication channels if you provide them.
• Technical data: IP address, cookies, browser type, device data, interface language, and system logs.
• Learning and usage data: visited pages, schedule activity, progress, assignment/test results, and lesson interactions.
• Payment data: amount, status, and date of payments received from payment providers. Full bank card details are not stored by us.

3. Purposes and Legal Bases

We process personal data for the following purposes:

• Contract performance: account registration, access to courses, lesson delivery, assignment review, and user support.
• Legitimate interests: analytics, quality improvement, and development of platform features and stability.
• Communication: service and learning notifications, replies to requests, and organizational updates.
• Security: authentication, abuse prevention, incident investigation, and fraud prevention.
• Compliance with legal obligations, including retention periods required by applicable law.

4. Data Sharing with Third Parties

We do not sell personal data. Data may be shared only to the extent necessary to operate the platform and on lawful grounds. Where cross-border transfer occurs, legally required safeguards are applied.

• Service providers: hosting/cloud infrastructure, video conferencing, communications, analytics, and payment processors.
• Public authorities or other authorized parties where required by the laws of Kazakhstan, the EU, or other applicable law.
• Partners and contractors with your explicit consent or when needed to provide a service you requested.

5. Data Security and Retention

We apply organizational and technical safeguards, including access control, TLS encryption, backups, monitoring, and logging. Data is retained only for as long as necessary for processing purposes, contractual obligations, and legal requirements, and then deleted or anonymized.

6. Your Rights

You may submit requests regarding access to and control over your personal data. Depending on applicable law, you may have the following rights:

• Right of access: obtain confirmation of processing and a copy of your personal data.
• Right to rectification: correct inaccurate or incomplete personal data.
• Right to erasure: request deletion of personal data when legal grounds apply.
• Right to data portability: receive data in a structured format where applicable.
• Right to withdraw consent and object to certain processing activities, and to lodge a complaint with a competent supervisory authority.

7. Cookies and Similar Technologies

We use essential cookies to run the platform and additional cookies (analytics, preferences, communications) to improve the service. Where required by law, such cookies are enabled only after your consent. You can change cookie settings in your browser.

8. Third-Party Services and Links

The platform may contain third-party services and links to external websites. Their data processing is governed by their own privacy policies, which we recommend reviewing separately.

9. Data of Minors

The service is designed for school and university learners. If a user has not reached the age required by applicable law to provide independent consent, processing is carried out with participation of a parent or legal representative. Upon a lawful request from a legal representative, we will clarify, correct, or delete a child's data as required by law.

10. Changes to This Policy

We may update this Policy when the service or legal requirements change. The current version is always published on this page with the date of the latest update.

11. Personal Data Contact

For questions about personal data processing, exercising data subject rights, or this Policy, contact us by the email below or through https://kursa.technology.