1. Who we are
Kaz Letter Invitation is the trading name used on this website for invitation-documentation assistance operated by Novango LLP, a private company registered in Kazakhstan (BIN 230940041839). In this policy, “we”, “us” and “our” refer to that business.
We provide private travel support. We are not a government authority, embassy or consulate, and we do not make visa, immigration or entry decisions.
2. Information we collect
Information you provide
When you submit a request form or contact us by email, telephone or WhatsApp, we may receive:
- your full name, citizenship and country of residence;
- planned travel date and the trip or support details in your message;
- your telephone or WhatsApp number and, if supplied, your email address;
- the contents of correspondence and follow-up communications; and
- your confirmation that you agree to this policy and may be contacted about your request.
Please do not send passport scans, payment-card details or other sensitive documents through the initial website form. If you proceed with a service and additional information is required, we should explain the relevant collection and handling process separately.
Website and referral information
The form sends the page URL from which you submit your request. If that current URL contains campaign parameters, the form may also submit its UTM source, medium, campaign, term and content values. These details help us understand which page or campaign led to an enquiry. The website does not save those values in cookies, local storage or session storage.
Security information
Our form endpoint processes your IP address to apply basic rate limits and prevent abuse. It uses a keyed hash derived from the IP address for rate-limit state and technical log entries rather than writing the plain address into those application records. Server and hosting providers may maintain their own access and security logs under their configurations. Form requests use a stateless security token and do not require a session cookie.
3. How and why we use information
We use information only for relevant business and website purposes, including to:
- review and respond to your enquiry;
- contact you using the channel you provided and explain possible assistance;
- prepare a quotation or take steps you request before entering into a service arrangement;
- provide and administer services if you later agree to proceed;
- protect the website, manage rate limits, investigate errors and prevent misuse;
- meet accounting, compliance or other legal obligations that apply to us.
Depending on the activity and the law that applies, processing may be based on your consent, steps taken at your request, performance of an agreement, our legitimate need to operate and secure the service, or a legal obligation.
4. Website technology
This website does not set cookies and does not save information in local storage or session storage. It does not load Google Analytics, Google Ads, Google Tag Manager or other analytics or advertising tags.
UTM parameters are read only from the current page URL and are included only if you choose to submit the enquiry form. Following an external link, such as a WhatsApp link, takes you to a separate service that operates under its own privacy and technology practices.
6. International transfers
We operate from Kazakhstan, while some hosting, email, communications or service providers may process data in other countries. Those countries may have different privacy rules. Any transfer is handled according to the requirements that apply to the relevant provider, purpose and destination. When you ask us to coordinate travel documentation, information may also need to be sent to a destination you request or to an authority involved in the process.
7. Retention and security
We keep enquiry and service information only while it is reasonably needed to respond, provide agreed support, maintain appropriate business and accounting records, resolve disputes, prevent abuse and comply with legal obligations. Technical security records are retained only for the configured operational period or while an incident is investigated. If UTM values are submitted with a form, they become part of the enquiry record and follow the same retention criteria; they are not retained in browser storage.
The exact period depends on the type of record, the status of the request, provider settings and applicable legal requirements. Records are deleted, anonymised or securely archived when they are no longer needed.
We use proportionate administrative and technical measures, including transport security on the production site, input validation, CSRF protection and rate limiting. No website, email system or transmission method can be promised to be completely secure.
8. Your choices and rights
You may choose not to submit the form and can contact us directly instead. You may also ask us to stop optional marketing communications; service-related replies to an active request are separate.
Subject to applicable law and relevant exceptions, you may be entitled to ask whether we hold information about you and request access, correction, deletion, restriction or a copy, object to certain uses, or withdraw consent for future processing. These rights are not absolute and we may need to verify your identity or retain information where the law requires it. You may also have a right to contact the competent privacy authority.
9. Privacy requests and policy updates
For a privacy question or request, contact Novango LLP and write “Privacy request” in the subject line where possible:
- Email: yulchieva.a@mail.ru
- Phone / WhatsApp: +7 747 024 20 67
- Address: Office 321, 3rd floor, Emerald Tower Business Centre, 10 Kunaev Street, Esil district, Astana, Kazakhstan
We may update this policy if the website, providers or legal requirements change. The revised date at the top should be updated whenever material changes are published.