Effective October 15, 2026
Who we are and what this document covers
The easygrc.kz website belongs to the EasyGRC team (“we”). This document explains what personal data we receive when you submit a request through the form on the site, why we need it and what happens to it next. We process data in accordance with the laws of the Republic of Kazakhstan on personal data and its protection.
What data we receive
Only what you enter in the request form yourself:
- your name;
- your phone number;
- company and job title, if you provided them;
- the plan you selected, if you selected one;
- the text of your message.
Together with the request we automatically save the submission date, the page language and the IP address. The IP address is used only to protect the form from spam.
What we use the data for
For one purpose only: to get in touch with you about your request, that is, to answer your question, arrange a platform demo or discuss your task. We have no other purposes.
What we do not do
- we do not publish your data or make it publicly available;
- we do not sell it or pass it to third parties for their own purposes;
- we do not use it for mailings, advertising or analysis of your behavior.
How long we keep it and when we delete it
We keep a request only until we achieve its purpose: we get in touch with you and discuss your question. After that we delete all the data from the request. If we could not reach you, the data is deleted no later than 30 days after we receive the request.
If we go on to work together, we will process the data we need under the terms of a contract with you.
Cookies and visit statistics
The site uses the Yandex Metrica web analytics service. It collects anonymized visit statistics (pages viewed, traffic source, device type) and uses cookies. What you type into the request form is not sent to Metrica. A YouTube video loads only after you press the play button. You can disable cookies in your browser settings.
Your rights
At any time you can:
- find out what data of yours we hold;
- ask us to correct or delete it;
- withdraw your consent to processing.
To do so, write to dpo@easygrc.kz. We will reply and act on your request within 3 business days.
Data protection
The connection to the site is encrypted (HTTPS), and access to the list of requests is password-protected and limited to the staff who need it for their work.
Changes to this policy
If we change this policy, the new version will appear on this page with a new date.
Contact
For any questions about personal data, write to dpo@easygrc.kz