This is a translation. If it differs from the Russian version, the Russian version prevails.
1. Who processes your data
The data controller is the trading and manufacturing company Avrora-stroy (AVRORA), 129 Auelbekov Street, Office 1, Kokshetau 020000, Akmola Region, Republic of Kazakhstan.
We process data in accordance with the Law of the Republic of Kazakhstan “On Personal Data and Their Protection”. For any questions, contact us through the form on the Contact page or call +7 707 933 31 54.
2. What data we receive
We only receive the information you send us through the website and the technical data needed to run it.
- Enquiries through the Contact and Professionals forms: name, email, phone (if given), message, site language and time sent.
- Orders: name, email, phone, country and delivery address, the items ordered and the amount.
- Customer account: contact person details, company details (legal name, BIN/IIN, address, bank details), delivery addresses, orders, invoices, payments, requests and messages with your account manager.
- With an enquiry, registration or order we store technical details: IP address, device and browser type, browser languages, the page that referred you, your landing page, campaign tags (UTM) and the pages you viewed on the site.
- Customer account sign-in log: time, IP address and outcome.
- We never receive or store card details: payments are made on the payment provider’s secure page.
3. Why we use it
We use data only for purposes you would expect, and we do not send marketing emails.
- to answer your question or enquiry;
- to process, invoice, deliver and settle your orders and keep you updated on their status;
- to understand where customers come from and which pages help them, so we can improve the site and range (our own statistics, no third-party services);
- to protect the site and customer accounts from spam, fraud and password guessing;
- to comply with the laws of the Republic of Kazakhstan.
4. Legal basis
By submitting a form you consent to the processing of the data it contains. Order data is needed to conclude and perform the sales contract. Technical data is processed to keep the website secure and working, and where the law requires it.
5. Cookies and browser storage
The site uses essential cookies and one first-party statistics cookie. We set no advertising cookies and use no third-party trackers.
- Avrora.Session — keeps your basket and protects checkout; deleted after 12 hours of inactivity.
- .AspNetCore.Antiforgery — protects forms against forged requests.
- Avrora.Account — keeps you signed in to your customer account (up to 14 days if you choose “Keep me signed in”).
- avrora_vid — a random visitor ID for AVRORA’s own statistics: it links page views to your enquiry or order; kept for up to 12 months and never shared with third parties. If your browser sends Do Not Track or Global Privacy Control, we do not set it and do not record your visits.
- Avrora.Admin — used only by staff signing in to the administration area.
- The calculator and order form keep what you type in your browser’s storage so it survives a page reload. This stays on your device and is not sent to us.
6. Who we share data with
We do not sell your data or share it for advertising. Only those needed to fulfil your request or order have access:
- payment providers (Kaspi, FreedomPay) when you pay for an order;
- delivery services: the recipient’s name, phone number and address;
- the hosting provider whose servers run the website;
- government authorities, only where the law expressly requires it.
7. Retention and security
We keep data only as long as its purpose requires and as long as the law requires, for example for sales and settlement records. Page views are kept for 180 days and server logs for a limited time; then they are deleted.
The website works only over secure HTTPS. Data is accessible only to staff who need it for their work, and passwords are stored as secure hashes.
8. Your rights
At any time you can:
- find out what data we hold about you;
- correct inaccurate data;
- ask us to delete data we are no longer legally required to keep;
- withdraw your consent;
- complain to the government authority responsible for personal data protection.
9. Changes to this policy
We may update this policy when the website or the law changes. The current version is always published on this page, with the date of the last update shown at the top.