Privacy Policy and Personal Data Processing
- Legal Business Name of the website operator
- МЕРЯНОВА НАЗУГУМ СЕЙИТЖАНОВНА
- Business form
- Individual Entrepreneur
- Registered Individual Entrepreneur Name
- Семья
- IIN
- 980623401202
- Website
- https://hotcall.kz/
- Phone
- +7 775 197 04 09
- tiktok@hotcall.kz
1. Scope
This policy describes the processing of data about visitors to HotCall.kz and people who contact us through its forms and contact channels. HotCall.kz is a software product operated by Individual Entrepreneur МЕРЯНОВА НАЗУГУМ СЕЙИТЖАНОВНА (registered Individual Entrepreneur Name: Семья), Kazakhstan (the “Operator”), also referred to as ИП «Семья». Data inquiries may be sent to the email or phone above, or to: Kazakhstan, Almaty, Taraz St., building 7, apartment 90, 050019.
Processing within a separately connected service, including CRM data and call recordings, is also governed by the agreement with the customer. This policy does not replace consents or other grounds the customer needs to process the data of its own contacts.
2. Data received through the website
- Inquiry details: the phone number entered by the user, a name if requested by the form, and the selected number of operators or managers and outbound calls where those fields are present.
- Communication details: information voluntarily provided in subsequent phone, email or WhatsApp communication.
- Technical information: IP address, request date and time, visited page and referring page, browser and device details, request and error information.
- Interaction information: page views, link visits, clicks, form submissions, form and advertising sources, selected inquiry parameters and analytics identifiers.
Website forms do not require a visitor's IIN, banking details, identity document details or document uploads. Do not send unnecessary information or another person's data without an appropriate basis.
3. Purposes of processing
- Receiving and handling inquiries, responding to requests and arranging consultations or demonstrations.
- Contacting the user through the supplied number and their chosen communication channel.
- Preparing to provide the service and fulfilling agreed terms.
- Assessing traffic, usability and advertising effectiveness, and improving pages and forms.
- Identifying technical errors, preventing spam and protecting the website.
4. Grounds for processing
Information submitted in an inquiry is processed based on the user's consent expressed when submitting it, for the purposes described in this policy. Where provided by law, processing may rely on another lawful basis. Submitting an inquiry does not authorize unlimited use for any purpose.
5. Cookies, analytics and technical identifiers
The website's pages use the following tools:
- Google Tag Manager manages website tags and events, including inquiry submission and thank-you page events.
- Meta Pixel measures visits and conversions and evaluates advertising effectiveness in Meta services.
- Yandex Metrica, loaded through Google Tag Manager, analyzes traffic, navigation and user actions. Click maps and Webvisor session replay are enabled in the counter settings.
These systems may receive device and browser details, IP address, referral source, page views and actions, set cookies and use technical identifiers. The website also uses browser sessionStorage to prevent repeated conversion counting within a session.
You can restrict or delete cookies in your browser settings. Restricting cookies and third-party scripts may affect some features and statistics. Legal pages are accessible without authentication or cookies.
Provider privacy information: Google, Meta and Yandex.
6. Data sharing and external services
The website sends inquiry notifications to Telegram for handling requests. A notification may contain the phone number, name, inquiry parameters, date and time, source and IP address so staff responsible for inquiries can contact the user.
A WhatsApp link opens an external service; subsequent communication is processed under that service's rules. Hosting delivers pages and may keep technical logs. External fonts and libraries involve requests to their providers and the technical information required to establish a connection.
Sharing with infrastructure, communication and analytics providers is limited to the purposes of their use. Information may be disclosed to authorized authorities where legally required. Foreign services may process information outside Kazakhstan; cross-border transfers must comply with applicable requirements and have the necessary legal basis.
7. Retention and protection
Inquiry information is processed in the communication channels used, and technical information is also processed in hosting logs and analytics systems. Retention depends on the purpose of the inquiry, the need to fulfill obligations and applicable legal requirements. Data is to be deleted or anonymized when its purpose is fulfilled unless further retention is legally required.
The Operator must comply with Kazakhstan's requirements for personal data storage, database location and protection. Protection includes access restrictions and available technical security measures. Storage by external providers is also subject to their policies. Contact the Operator about the data associated with a specific inquiry.
8. User rights and requests
Users may request information about processing, seek correction, blocking or deletion where provided by law, and withdraw consent. Withdrawal may limit further communication or provision of the requested service; retention required on a lawful basis may continue.
Email tiktok@hotcall.kz, call +7 775 197 04 09, or write to: Kazakhstan, Almaty, Taraz St., building 7, apartment 90, 050019. Include the phone number used in the inquiry and describe your request. Verification that the request comes from the data subject may be needed to protect their information.
Users may also contact the competent authority or a court as provided by law. Legal basis: the Law of the Republic of Kazakhstan on Personal Data and Their Protection (Russian).
9. Third-party platform and API data
HotCall may process data received through integrations with third-party business platforms and APIs, including TikTok Business Messaging API, after explicit authorization by the relevant business account owner. TikTok processing additionally requires TikTok approval and the granting of the necessary API access.
Depending on the integration and permissions granted, such data may include:
- User or account identifiers.
- Conversation identifiers.
- Message identifiers.
- Message text.
- Timestamps.
- Profile or business account information.
- Contact information voluntarily provided by users in messages.
This data is processed only for the purposes of:
- Customer communication.
- CRM synchronization.
- Lead and contact management.
- Customer support.
- Analytics related to business communications and these purposes.
HotCall does not sell personal data received through third-party APIs. Access to such data is limited to authorized users and systems. Data may be transferred to the CRM selected by the business and providers necessary for these purposes; it is not shared with unrelated third parties for unrelated purposes.
Data is to be deleted or anonymized when it is no longer required for the stated purpose, when access authorization is revoked, or upon a valid deletion request, subject to applicable legal obligations. Once authorization is revoked, further collection from that account stops. If any data must be retained by law, its use is restricted to that legal basis.
Send questions about API data, revocation or deletion to tiktok@hotcall.kz. Include the platform, business account and request details. We may need to verify your authority to protect conversations. Copies in a connected CRM are also governed by the CRM's terms and the policies of the business using it.
10. TikTok Data
The TikTok Business Messaging API integration is planned. Data received through the TikTok Business Messaging API will only be processed after TikTok approval and access are granted, for TikTok Business Accounts that explicitly authorize the integration, and only for the purposes described above. This section describes intended processing and does not mean the integration is already approved or available.
TikTok data will not be sold or shared with unrelated third parties for unrelated purposes. The proposed use case is described on our TikTok Business Messaging Integration page.
11. Policy updates
The current policy is published at hotcall.kz/en/privacy. If a change in processing purposes or conditions requires separate consent, publishing an updated policy does not replace that consent.
Last updated: .