Privacy Policy
How Paloma365 collects, uses and protects personal information about users.
Last updated: January 1, 2024
1. Data collected
1.1. LLP «Paloma365» (hereinafter — the «Operator») collects and processes personal data of users of the Paloma365 service (hereinafter — the «Service») pursuant to legislation of the Republic of Kazakhstan governing personal data and its protection.
1.2. We collect the following categories:
- Registration data: first and family name, email, telephone number and organisation name.
- Usage data: actions within the Service, features used and timing patterns.
- Technical data: IP address, browser type, OS and device category.
- Payment data: information about completed payments (excluding full PAN storage).
1.3. Personal data is collected when registering for the Service, purchasing a subscription, contacting support, filling in website forms, or otherwise using the Service.
2. Data usage
2.1. Collected personal data is processed for:
- Granting access to the Service and capabilities.
- User identification and authentication.
- Payment processing and billing.
- Technical support and user care.
- Service quality improvements and new features.
- Notifications about substantive Service updates.
- Marketing communications where consent permits.
- Compliance with lawful obligations.
2.2. We do not transfer personal data to third parties without the user’s consent, except cases required under the laws of the Republic of Kazakhstan.
3. Storage
3.1. Personal data is stored on secured servers hosted in the Republic of Kazakhstan and the Russian Federation.
3.2. We implement technical and organisational measures to safeguard personal data from unauthorised access, alteration, disclosure or destruction, including:
- Encryption during transport (SSL/TLS).
- Encryption at rest.
- Regular backups.
- Role‑based workforce access boundaries.
- Intrusion‑detection tooling and perimeter monitoring.
3.3. Personal data is retained for the term of our agreement with the user and for 3 (three) years thereafter unless the law prescribes otherwise.
4. User rights
4.1. Users may:
- Obtain notice of personal data being processed.
- Request clarification, blocking or deletion of personal data.
- Withdraw consent to processing.
- Challenge Operator actions before the competent personal‑data supervisory authority.
- Request portability of personal data in a structured format.
4.2. To exercise these rights, contact Paloma365 support by email or through the feedback form on the website.
5. Cookies
5.1. paloma365.com uses cookies to ensure reliable operation, personalise content and analyse traffic.
5.2. We leverage the cookie categories highlighted below:
- Strictly necessary cookies: provide core functionality (authentication, security settings).
- Analytics cookies: measure site usage so we can improve.
- Functional cookies: remember user preferences such as language or region.
5.3. You may disable cookies in browser settings, which may impact site behaviour.
6. Policy revisions
6.1. The Operator may amend this Privacy Policy.
6.2. The revised Privacy Policy enters into force when published on paloma365.com unless the new wording provides otherwise.
6.3. Continued use of the Service after changes take effect means you accept the updated Privacy Policy.
6.4. Please revisit this page periodically for the latest Privacy Policy text.
7. Contact
Contact us about personal‑data matters at:
Operator: LLP "Paloma365"
BIN: 160 940 016 674
Website: paloma365.com