This Privacy Policy (hereinafter – the Privacy Policy) is a public agreement concluded between ASTANA VISION LLP and a Prospective Patient in accordance with Article 387 of the Civil Code of the Republic of Kazakhstan. It is based on the Law of the Republic of Kazakhstan «On Personal Data and Their Protection» and applies to information containing personal data of the Prospective Patient that the website www.en.vision.kz (hereinafter – the Site) may obtain about Prospective Patients during their use of the Site.

1. Definition of Terms
1.1. Personal data – information relating to a specific or identifiable subject of personal data, recorded on electronic, paper, and/or other tangible media.

1.2. Non‑personal data – information automatically transmitted during the Prospective Patient’s viewing of advertising blocks and when visiting pages where a statistical script of the system is installed: the requested page address, cookie information, IP address, browser information, referrer (previous page address), and access time.

1.3. Collection of personal data – actions aimed at obtaining personal data.

1.4. Processing of personal data – actions aimed at accumulating, storing, modifying, supplementing, using, distributing, depersonalising, blocking, and destroying personal data.

1.5. Protection of personal data – a set of measures, including legal, organisational, and technical measures, carried out for the purposes established by the Law of the Republic of Kazakhstan «On Personal Data and Their Protection».

1.6. Site – located on a server in Almaty and having the Internet address www.en.vision.kz, where the services offered to Prospective Patients are presented.

1.7. Site services – all services available for use on the website www.en.vision.kz

1.8. Prospective Patient – a user of the website www.en.vision.kz

1.9. Provider – ASTANA VISION LLP, address: Astana, Korgalzhyn Highway, 13/7, BIN 111040004730.

1.10. Cookies – small text files that the browser writes with data from websites visited by the Prospective Patient. Cookies allow the Prospective Patient to navigate efficiently between pages, remembering preferences, and improving interaction with the site. They may also help ensure that the advertising the Prospective Patient sees online matches their interests.

1.11. IP address – a unique network address of a node in a computer network built using the IP protocol, which allows determining the Prospective Patient’s location. The Site does not track location beyond the city and region.

2. Subject of the Privacy Policy
2.1. This Privacy Policy establishes the Provider’s obligations not to disclose and to ensure the protection of personal data that the Prospective Patient provides at the Provider’s request during registration on the Site and/or when placing a call‑back request.

2.2. Personal data permitted for processing under this Privacy Policy are provided by the Prospective Patient by filling out the registration form on the Site and include the following information:

2.2.1. Surname, first name, patronymic (patronymic – optional) of the Prospective Patient;
2.2.2. Prospective Patient’s contact phone number;
2.2.3. Email address (e‑mail).

2.3. Any other personal information not specified above (visit history, browsers and operating systems used, etc.) is also subject to secure storage and non‑disclosure, except as provided in clauses 4.3. and 4.4. of this Privacy Policy.

3. Purposes of Collection and Processing of Personal Data by the Prospective Patient
3.1. The Provider collects, processes, and stores only those personal data that are necessary for the provision of the Services.

3.2. The Provider uses the Prospective Patient’s personal data for the following purposes:

3.2.1. Identification of the Prospective Patient;
3.2.2. Processing and receiving payments from the Prospective Patient;
3.2.3. Providing effective customer support to the Prospective Patient;
3.2.5. Providing personalised Services to the Prospective Patient;
3.2.6. Communicating with the Prospective Patient, including sending notifications, requests, and information related to the use of the Services, provision of services, and processing of requests and enquiries;
3.2.7. Improving the quality of the Services, ease of use, and developing new Services and offerings;
3.2.8. Informing the Prospective Patient about events and promotions;
3.2.9. Conducting statistical and other research based on non‑personal data, as well as optimising advertising messages.

4. Rights and Obligations of the Parties
4.1. The Prospective Patient undertakes to:

4.1.1. Provide personal data information necessary for using the Site and receiving feedback from the Provider;
4.1.2. Update and supplement the information provided if inaccurate data are discovered during use of the Site.

4.2. The Prospective Patient has the right to:

4.2.1. Access and edit personal data information at any time via the web interface provided within the Services.

4.3. The Provider undertakes to:

4.3.1. Use the information received solely for the purposes specified in Section 3 of this Privacy Policy;
4.3.2. Keep confidential information secret, not to disclose it without the Prospective Patient’s prior written consent, except as established by the legislation of the Republic of Kazakhstan;
4.3.3. Take precautions to protect the confidentiality of the Prospective Patient’s personal data.

4.4. The Provider has the right to:

4.4.1. Provide third parties with access to collect and analyse the Prospective Patient’s non‑personal data for statistical purposes and optimisation of advertising messages. The use of non‑personal data by third parties is governed by their own privacy policies, and the Site is not responsible for their use.

5. Other Conditions
5.1. Use of the Site by the Prospective Patient constitutes their agreement with this Privacy Policy and the terms of personal data processing.

5.2. In case of disagreement with the terms of the Privacy Policy, the Prospective Patient must stop using the Site.

5.3. The Provider does not verify the accuracy of the personal data provided by the Prospective Patient. The Provider assumes that the Prospective Patient provides accurate data and keeps it up to date. The Prospective Patient bears full responsibility for providing inaccurate or outdated data.

5.5. Disabling Cookies may result in the inability to access parts of the Site that require authorisation.

5.6. The Site collects statistics on the IP addresses of Prospective Patients. This information is used to identify and resolve technical issues, as well as to control the legality of financial payments if necessary.

5.7. This Privacy Policy and the relationship between the Prospective Patient and the Provider are governed by the applicable legislation of the Republic of Kazakhstan.

5.8. The Provider reserves the right to unilaterally amend the Privacy Policy in order to improve the security system in accordance with the current legislation of the Republic of Kazakhstan.

5.9. All suggestions or questions regarding this Privacy Policy should be sent to the email address info@vision.kz or to the address: Astana, Korgalzhyn Highway, 13/7.

5.9.1. The Prospective Patient’s consent to the processing of their personal data is perpetual and may be revoked by submitting a written statement to the email address info@vision.kz or to the address: Astana, Korgalzhyn Highway, 13/7.

5.9.2. The Provider has the right to send the User notifications about new products and services, special offers, and various events. The User may opt out of receiving such messages by sending a letter to the Company at info@vision.kz marked «Unsubscribe from notifications».