Instant delivery 24/7

Privacy policy

Version of August 5, 2026

What we collect, why it is needed and what happens to it. In short: an email address, the contents of your order and anonymised technical fingerprints - nothing else.

1.Who processes the data

  1. 1.1The data controller is CardKZ, owner of the website cardkz.com.
  2. 1.2Enquiries about data processing should be sent to the email address listed in the seller details.

2.What data is collected

  1. 2.1Your email address - required: the code and the order link are sent to it.
  2. 2.2Order data: the amounts chosen, the price, the payment currency, the payment status, the language of the order and the timestamps of order events.
  3. 2.3Technical data: your IP address and browser details are stored as irreversible fingerprints and used only for fraud prevention and rate limiting. The addresses themselves are not stored.
  4. 2.4The time of each code reveal - so that a dispute can be investigated.
  5. 2.5The seller neither receives nor stores bank card details: they are entered on the payment provider's side.

3.Why the data is processed

  1. 3.1Performing the contract: issuing the code, sending order emails, giving access to previously purchased codes.
  2. 3.2Preventing fraud and abuse: rate limits, manual review of individual orders, handling disputes with banks.
  3. 3.3Meeting obligations under the legislation of the Republic of Kazakhstan.
  4. 3.4The data is not used for marketing mailings.

4.Legal basis

  1. 4.1The concluded contract of sale and the consent given by the buyer when placing an order.
  2. 4.2Requirements of the legislation of the Republic of Kazakhstan, including accounting rules.

5.Who the data is shared with

  1. 5.1The payment provider - what is needed to process a payment or refund: the amount, the currency, the order identifier and the buyer's contact.
  2. 5.2The email delivery provider - the recipient's address and the contents of the message.
  3. 5.3Government authorities - only in cases expressly provided for by law.
  4. 5.4Personal data is never sold or passed to advertising networks.

6.Cookies and analytics

  1. 6.1The website uses technical cookies only: encrypted session cookies for buyers and staff. Signing in is impossible without them.
  2. 6.2There are no third-party counters, advertising pixels or trackers on the website.

7.Retention periods

  1. 7.1Order data is kept for the period required by law for accounting records, after which it is deleted or anonymised.
  2. 7.2One-time sign-in links and rate-limit counters are deleted automatically once they expire.

8.How the data is protected

  1. 8.1Gift card codes are stored encrypted and are decrypted only when shown to the buyer or sent by email.
  2. 8.2The account area has no password - so there is nothing to leak and nothing to brute-force.
  3. 8.3Staff access to data is restricted and recorded in an audit log.

9.Your rights

  1. 9.1You may request information about the processing of your data and ask for it to be corrected, blocked or deleted.
  2. 9.2Consent to processing may be withdrawn. Data the seller is required by law to keep is deleted once that period expires.
  3. 9.3Send your request from the email address the order was placed with - otherwise we cannot confirm that it comes from the data subject.

10.Changes to this policy

  1. 10.1The current version of the policy is published on this page, with its date shown at the top.
  2. 10.2Material changes take effect when published.

Seller details

Seller
CardKZ
Contact email
support@cardkz.com