1. Who we are
Kaz Letter Invitation provides independent assistance with invitation documentation. In this policy, “we”, “us” and “our” refer to the service provider responsible for this website and the processing described here.
We provide private travel support. We are not a government authority, embassy or consulate, and we do not make visa, immigration or entry decisions.
2. Information we collect
Information you provide
When you submit a request through the form, we may receive:
- your full name and citizenship;
- your reply details included in the request;
- the trip or support details you include in your message; and
- the contents of correspondence and follow-up communications.
Please do not send passport scans, payment-card details or other sensitive documents through the initial website form. If you proceed with a service and additional information is required, we should explain the relevant collection and handling process separately.
Website and referral information
When you visit the website, Google Tag Manager and tags published through it may process technical and usage information such as the page URL, referrer, campaign parameters, browser and device information, approximate location derived from an IP address, and interactions with the website. Depending on the tags configured in the container, identifiers or preferences may be stored in cookies or similar browser storage.
The enquiry form also sends the page URL from which you submit your request. If that URL contains campaign parameters, the form may include its UTM source, medium, campaign, term and content values so we can understand which page or campaign led to the enquiry.
Security information
Our form endpoint processes your IP address to apply basic rate limits and prevent abuse. It uses a keyed hash derived from the IP address for rate-limit state and technical log entries rather than writing the plain address into those application records. Server and hosting providers may maintain their own access and security logs under their configurations. Form requests use a stateless security token and do not require a session cookie.
3. How and why we use information
We use information only for relevant business and website purposes, including to:
- review and respond to your enquiry;
- contact you using the channel you provided and explain possible assistance;
- prepare a quotation or take steps you request before entering into a service arrangement;
- provide and administer services if you later agree to proceed;
- protect the website, manage rate limits, investigate errors and prevent misuse;
- measure website and campaign performance and improve our communications or advertising where analytics or advertising tags are configured; and
- meet accounting, compliance or other legal obligations that apply to us.
Depending on the activity and the law that applies, processing may be based on your consent, steps taken at your request, performance of an agreement, our legitimate need to operate and secure the service, or a legal obligation.
4. Google Tag Manager, cookies and similar technology
This website loads Google Tag Manager container GTM-N93S9D4V to manage website tags. Tags published through that container may include measurement, analytics or advertising services and may send usage or campaign information to Google or another configured provider.
Google Tag Manager is a tag-management system. The individual tags it delivers determine whether cookies or similar browser storage are set or read, what information is collected and how long it is retained. You can restrict or delete browser storage through your browser settings, although doing so may affect measurement or some website features.
Following external links takes you to separate services that operate under their own privacy and technology practices. Information about Google's handling of data is available in its Privacy Policy.
6. International transfers
We operate from Kazakhstan, while Google and some hosting, email, communications or service providers may process data in other countries. Those countries may have different privacy rules. Any transfer is handled according to the requirements that apply to the relevant provider, purpose and destination. When you ask us to coordinate travel documentation, information may also need to be sent to a destination you request or to an authority involved in the process.
7. Retention and security
We keep enquiry and service information only while it is reasonably needed to respond, provide agreed support, maintain appropriate business and accounting records, resolve disputes, prevent abuse and comply with legal obligations. Technical security records are retained only for the configured operational period or while an incident is investigated. If UTM values are submitted with a form, they become part of the enquiry record and follow the same retention criteria.
Retention of analytics, advertising identifiers and browser storage depends on the tags and provider settings configured through Google Tag Manager. You can delete browser storage at any time. Other records are deleted, anonymised or securely archived when they are no longer needed.
We use proportionate administrative and technical measures, including transport security on the production site, input validation, CSRF protection and rate limiting. No website, email system or transmission method can be promised to be completely secure.
8. Your choices and rights
You may choose whether to submit the form. Browser controls can be used to block or delete cookies and similar storage, and Google provides separate privacy and advertising controls for its services. You may also ask us to stop optional marketing communications; service-related replies to an active request are separate.
Subject to applicable law and relevant exceptions, you may be entitled to ask whether we hold information about you and request access, correction, deletion, restriction or a copy, object to certain uses, or withdraw consent for future processing. These rights are not absolute and we may need to verify your identity or retain information where the law requires it. You may also have a right to contact the competent privacy authority.
9. Privacy requests and policy updates
For a privacy question or request, submit the request form and write “Privacy request” in the message. We may ask for information needed to verify your request.
We may update this policy if the website, providers or legal requirements change. The revised date at the top should be updated whenever material changes are published.