1. Who the consent is given to
Consent to the collection and processing of personal data is given to TRIO LABS LLP, business identification number 260840005834, Almaty, Republic of Kazakhstan, support@qfindo.kz, as the owner and operator of the Qfindo personal data database.
The consent is given freely, specifically, on an informed basis and unambiguously, in accordance with the Law of the Republic of Kazakhstan of 21 May 2013 No. 94-V "On Personal Data and its Protection".
2. Which data
Telephone number; nickname and profile picture; city; password hash and details of number verification; the content of listings, including photographs, the coordinates of a place and the date of an event; claims, messages and complaints; settings, favourites and the block list; IP address, device and application version details, notification, Firebase installation and advertising identifiers, session and security event logs; order and payment details without card credentials; records of the documents accepted.
3. Which operations
Collection, recording, systematisation, accumulation, storage, refinement, extraction, use, comparison, anonymisation, blocking, dissemination to the extent set out in the Privacy Policy, transfer to the recipients listed below, and destruction.
4. For which purposes
Registration and authentication; account protection and number verification; publication and display of listings; searching for probable matches, including by automated means; operation of the map and distance-based features; exchange of messages between users; sending notifications; moderation and counter-fraud; taking and recording payments; user support; backups; and compliance with obligations imposed by law.
5. Who the data is passed to
Server infrastructure in the Republic of Kazakhstan; Cloudflare, Inc. — storage of photographs and backups; Google — notifications, crash reports and advertising services; SMS providers and flash-call services — delivery of one-time codes; the payment organisation and application stores — payment acceptance; providers of cartographic data; and model providers engaged under contract for automated matching. To public authorities — on a lawful, reasoned request.
6. Cross-border transfer
The user consents to the transfer of the data listed in clause 2 abroad, to the extent and on the conditions set out in the Privacy Policy, namely: photographs and backups to Cloudflare's infrastructure; device identifiers, notification tokens and crash reports to Google's infrastructure; and the data needed to display advertising to Google's advertising services. Transfer takes place on condition that the recipient ensures the protection of personal data.
7. What is not published
Only information the user has themselves placed in a public profile or listing becomes publicly available. The telephone number, exact coordinates, the content of conversations and payment details are not published. A telephone number is disclosed to a particular user only after the action provided for in the service and with the consent of the number's holder.
8. Duration and withdrawal
The consent remains in force until the purposes of processing are achieved or until it is withdrawn.
Withdrawal is submitted through the service settings, or to support@qfindo.kz once it is confirmed that the account belongs to the applicant. Withdrawal does not invalidate processing carried out before it and does not end processing continued on another lawful ground, including compliance with obligations imposed by law, accounting, the handling of a dispute and counter-fraud.
After withdrawal, features that need the data in question may become unavailable, and full use of the service may be impossible.
9. Rights of the data subject
The rights to obtain information about processing and to have data amended, blocked and destroyed, the way they are exercised, and the time limits for dealing with requests, are set out in the Privacy Policy and in the legislation of the Republic of Kazakhstan.