Privacy Policy
Last updated: 28 July 2026
This Privacy Policy describes Our policies and procedures on the collection, processing, use, storage, disclosure, modification/supplementation and destruction of Your personal data when You use the Service, and informs You about the protection of Your Personal Data and how the Law of the Republic of Kazakhstan No. 94-V of 21 May 2013 "On Personal Data and Its Protection" (hereinafter — the "Law") protects You. We use Your Personal Data to provide You with services and to improve the Service. By using the Service, You consent to the collection, processing, use, disclosure, modification/supplementation and destruction of Your personal data in accordance with this Privacy Policy. If You do not agree with the terms of this Privacy Policy, You must stop using the Website. This Privacy Policy is intended to ensure appropriate protection of information about You, including Your personal data, against unauthorised access and disclosure.
Terms and Definitions
Words with an initial capital letter have the meanings defined under the following conditions. The definitions below have the same meaning whether they appear in the singular or the plural.
For the purposes of this Privacy Policy:
- Company (referred to as the "Company", "We", "Us" or "Our") means IE ARBUZ, IIN 870523351206, address: Republic of Kazakhstan, Astana, Turan St. 55/3, office 148. The Company is the owner and operator of the Service's personal data database and a party to the public offer published on the Website.
- Partner organisation means ALIV Optics LLP, BIN 230740039760, located at: Republic of Kazakhstan, Astana, Turan Ave. 46A, 010000 — an affiliate of the Company that participates in fulfilling Your orders (retail salons, manufacture of prescription eyewear, warranty service) and, in that capacity, acts as a third party to which the Company entrusts the processing of personal data.
- Cookies are small files that a website places on Your computer, mobile device or any other device, containing details of Your browsing history on that website among their many uses.
- Country refers to: Kazakhstan.
- Device means any device that can access the Service, such as a computer, a mobile phone or a digital tablet.
- Personal Data means any information relating to an identified or identifiable natural person.
- Service refers to the Aliv.kz Website and mobile application.
- Service Provider means any natural or legal person who processes data on behalf of the Company. It refers to third-party companies or individuals engaged by the Company to facilitate the Service, to provide the Service on behalf of the Company, to perform services related to the Service, or to assist the Company in analysing how the Service is used.
- Third-party Social Media Service refers to any website or social network website through which a User can log in or create an account to use the Service.
- Usage Data refers to data collected automatically, either generated by the use of the Service or from the Service infrastructure itself (for example, the duration of a page visit).
- Website refers to Aliv.kz, accessible at https://aliv.kz/
- You means the individual accessing or using the Service, or the company or other legal entity on behalf of which such individual is accessing or using the Service, as applicable.
Collection, Processing, Use and Distribution of Your Personal Data
Types of Data Collected
Personal Data. While using Our Service, We may ask You to provide Us with certain Personal Data that can be used to contact or identify You. Personally identifiable information may include, but is not limited to:
- email address;
- first and last name;
- contact telephone number;
- delivery address: city, street and house number, apartment number, floor number;
- optical order parameters that You provide yourself: optical power (dioptres), cylinder and axis, base curve, addition, pupillary distance and other parameters required to select contact lenses and spectacle lenses;
- order history, participation in the ALIV Club loyalty programme and the related accruals;
- the content of Your enquiries to customer support, including correspondence in messengers and by email;
- usage data.
Optical order parameters are used solely to fulfil Your order, to reorder and for warranty service. We do not request or collect through the Service any medical reports, diagnoses or other information constituting legally protected medical confidentiality.
Usage Data is collected automatically when using the Service. It may include information such as Your Device's Internet Protocol address (IP address), browser type and version, the pages of the Service that You visit, the time and date of Your visit, the time spent on those pages, unique device identifiers and other diagnostic data.
When You access the Service by or through a mobile device, We may automatically collect certain information, including the type of mobile device You use, its unique identifier, IP address, mobile operating system, the type of mobile Internet browser and other diagnostic data. We may also collect information that Your browser sends whenever You visit the Service.
Tracking Technologies and Cookies
We use cookies and similar tracking technologies to monitor activity on Our Service and store certain information. The technologies used are beacons, tags and scripts to collect and track information and to improve and analyse Our Service.
By going to Your browser settings, You can block cookies or choose the option to allow cookies. However, if You do not accept cookies, You may not be able to use some parts of Our Service.
Cookies can be "persistent" or "session" cookies. Persistent cookies remain on Your device when You go offline; session cookies are deleted as soon as You close Your browser. We use both types:
- Necessary / essential (session): required to provide the services available through the Website, help authenticate users and prevent fraudulent use of accounts. Without them, the requested services cannot be provided.
- Cookie policy (persistent): identify whether users have accepted the use of cookies on the Website.
- Functional (persistent): allow us to remember choices You make (login details, language preferences) in order to provide a more personal experience.
- Tracking and performance (persistent): used to track information about visits to the Website and how users use it, including to test new pages and features and to evaluate the effectiveness of advertising.
Use of Your Personal Data
The Company may use Your Personal Data for the following purposes:
- to provide and maintain Our Service, including to monitor its usage;
- to manage Your account as a user of the Service;
- to perform the contract for the purchase and sale of products, goods or services You have purchased, or any other contract with Us through the Service, including transferring order parameters to the retail salon and the production laboratory;
- to administer the ALIV Club loyalty programme;
- to contact You by email, telephone, SMS, messengers or push notifications of the mobile application about updates or informative communications related to functionality, products or services, including security updates and reminders about the scheduled replacement of contact lenses;
- to provide You with news, special offers and general information about goods, services and events similar to those You have purchased or enquired about, unless You have opted out of receiving them;
- to manage Your requests to Us.
We may share Your personal information in the following situations: with the Partner organisation and Service Providers (to fulfil an order, analyse use of the Service, process payments, deliver, contact You); in connection with a business transfer (merger, sale of assets, financing, acquisition); with affiliates (bound to honour this Policy); with business partners; with other users (when You share information in public areas of the Service).
Retention of Your Personal Data
The Company retains Your Personal Data only for as long as is necessary for the purposes set out in this Policy, to comply with legal obligations, resolve disputes and enforce our agreements and policies. Usage Data is generally retained for a shorter period, except where it is used to strengthen security or improve the functionality of the Service, or where We are legally obliged to retain it for longer. The retention period is determined by the date on which the purposes of collection and processing are achieved, unless otherwise provided by the legislation of the Republic of Kazakhstan.
Transfer of Your Personal Data
Your information is processed at the Company's operating offices and at the locations of the parties involved in the processing. The Service's personal data databases are hosted within the territory of the Republic of Kazakhstan.
Certain categories of data — primarily Usage Data, device identifiers and cookies — may be transferred to and processed outside the Republic of Kazakhstan by Service Providers of web analytics, advertising, cloud infrastructure and communications. Such cross-border transfer is carried out to states that ensure the protection of personal data, or with Your consent, in the manner provided by the Law. Your agreement to this Policy followed by Your submission of information represents Your consent to such transfer. The Company will take all steps reasonably necessary to ensure that Your data is processed securely and in accordance with this Policy.
Disclosure of Your Personal Data
- Business transactions. In the event of a merger, acquisition or sale of assets, Your Personal Data may be transferred. We will provide notice before the transfer.
- Law enforcement. The Company may be required to disclose Your data by law or in response to valid requests by public authorities.
- Other legal requirements. The Company may disclose data in the good-faith belief that such action is necessary to comply with legal obligations, protect the rights and property of the Company, prevent or investigate possible wrongdoing, protect the personal safety of users or the public, or protect against legal liability.
Security of Your Personal Data
The security of Your Personal Data is important to Us, but no method of transmission over the Internet or method of electronic storage is 100% secure. While We strive to use commercially acceptable means to protect Your Personal Data, We cannot guarantee absolute security.
Modification and Supplementation of Your Personal Data
As You interact with the Service, We may modify and supplement Your personal data. Any interaction with the Service to modify or supplement personal data (in particular, in the account profile) is deemed to be Your request.
Destruction of Your Personal Data
Your Personal Data is subject to destruction: upon expiry of the retention period; upon termination of the legal relationship between You and the Company; upon a relevant court decision entering into legal force.
Detailed Information on the Processing of Your Personal Data
Service Providers may have access to Your Personal Data only to perform their tasks on Our behalf and are obliged not to disclose or use it for any other purpose.
Analytics and advertising. We use third-party service providers to monitor and analyse the use of the Service and to evaluate the effectiveness of advertising:
- Google Analytics and Google Tag Manager — web analytics and tag management services provided by Google. You can opt out of Google Analytics by installing the relevant browser add-on. Google's privacy policy: https://policies.google.com/privacy
- Yandex Metrica — a web analytics service provided by Yandex. Privacy policy: https://yandex.ru/legal/confidential/
- Meta Pixel and Conversions API — advertising measurement technologies provided by Meta Platforms. Privacy policy: https://www.facebook.com/privacy/policy/
Anonymisation. When collecting and processing Your data for statistical, sociological, scientific or marketing research, We undertake to anonymise it in accordance with the personal data processing rules.
Payments. We may provide paid products and services. In that case, We use third-party services for payment processing. We do not store or collect Your payment card details — that information is provided directly to our third-party payment processors and is governed by their privacy policies. These payment processors adhere to the PCI-DSS standard managed by the PCI Security Standards Council (a joint venture of Visa and Mastercard). PCI-DSS requirements help ensure the secure handling of payment information.
Links to other websites. Our Service may contain links to third-party websites that We do not control. We advise You to review the privacy policy of every site You visit. We are not responsible for the content or practices of third-party websites.
Changes to This Privacy Policy
We may update our Privacy Policy from time to time. We will notify You of any changes by posting the new version on this page, by email and/or by a prominent notice on the Service before the changes take effect, and We will update the "Last updated" date. Changes take effect once published on this page.
Trademarks
The name Aliv.kz and the logo, all product and service names, graphics, icons and trademarks appearing on this Website are, unless otherwise stated, trademarks (registered or not), service marks and/or trade dress of Aliv.kz. All other trademarks, product and company names, logos and service marks mentioned on this Website are the property of their respective owners. Use of these materials without the prior written permission of the rights holders is prohibited.
Contact Us
If You have any questions about this Privacy Policy, about withdrawing consent to the processing of personal data or about exercising Your rights under the Law, You can contact us:
IE ARBUZ
- IIN: 870523351206
- Address: Republic of Kazakhstan, Astana, Turan St. 55/3, office 148
- Email: hi@aliv.kz
- Telephone: +7 702 223 7 223
How to Withdraw Consent and Delete Your Account
To delete your account, write to customer support at hi@aliv.kz. For users of the iOS application (version 9.0 and later), account deletion is available in the "My data" section.