Last updated: 2026-05-12. Draft pending review by qualified counsel before final publication.
1. Who we are
Akashi Data Center LLP ("Akashi", "we", "us") is the data controller for personal data processed via akashi.cloud.
- Registered address: Syganak Street 60/4, Abu Dhabi Plaza, 15th floor, Office 1501, 1508, Astana, Kazakhstan.
- Privacy contact: privacy@akashi.cloud.
2. Scope
This policy describes how we collect, use, share, and protect personal data when you visit the site, submit a form, or subscribe to our newsletter. It applies regardless of where you live. If you are in the EU/EEA, the EU General Data Protection Regulation (GDPR) applies. If you are in Kazakhstan, Law No. 94-V "On Personal Data and Protection" (PDP) applies. We aim to meet the stricter of the two.
3. What data we collect
- Contact forms (contact, consultation): first and last name, company, phone, work email, inquiry type, your message, language, page URL, submission timestamp.
- Newsletter: email address, language, submission timestamp.
- Analytics (only with your consent): page URL, referrer, device/browser type, approximate location derived from IP, interaction events. IPs are anonymized inside Google Analytics 4.
- Cookies: see our Cookie Policy.
4. Why we use it (purposes and lawful basis)
- Respond to your inquiry (contact / consultation forms) — performance of a contract or pre-contractual steps, GDPR Art. 6(1)(b); KZ PDP Art. 7-8 (consent + legitimate purpose).
- Send the quarterly newsletter — consent, GDPR Art. 6(1)(a); KZ PDP Art. 7 (consent). You can withdraw at any time.
- Measure site traffic and improve content — consent via the cookie banner.
- Security and abuse prevention (honeypot, rate-limiting) — legitimate interest, GDPR Art. 6(1)(f).
5. Who we share it with (processors and recipients)
We do not sell personal data. We share it only with service providers acting on our behalf, under contract:
- Make.com (Celonis SE / Integromat s.r.o.) — form webhook processing. EU-based; may use sub-processors outside the EEA under Standard Contractual Clauses.
- Google LLC — Google Tag Manager and Google Analytics 4 (analytics only). United States; transfer governed by Standard Contractual Clauses and the EU-US Data Privacy Framework where applicable.
- Hosting and email providers for the website and our business mailboxes.
Disclosure to public authorities only where required by Kazakhstan law or by a binding order from a competent authority.
6. International data transfers
Some processors are located outside Kazakhstan and the EEA (mainly in the European Union and the United States). For transfers from the EEA we rely on Standard Contractual Clauses adopted by the European Commission, plus supplementary measures (TLS in transit, access controls, contractual safeguards). For cross-border transfers under KZ PDP, we ensure the receiving country provides an adequate level of protection or obtain your consent.
7. How long we keep it
- Inquiry forms: up to 24 months after last contact, unless a longer period is needed for an ongoing business relationship or legal obligation.
- Newsletter: until you unsubscribe.
- Analytics: up to 24 months at Google Analytics; aggregated reports may be retained longer.
- Consent record (cookie choice): up to 12 months in your browser.
8. Your rights
Subject to applicable law, you have the right to:
- Access your data and obtain a copy.
- Rectify inaccurate data.
- Erase your data ("right to be forgotten").
- Restrict or object to processing.
- Receive your data in a portable format.
- Withdraw consent at any time (does not affect prior lawful processing).
- Lodge a complaint with a supervisory authority — in Kazakhstan: the Committee on Information Security of the Ministry of Digital Development; in the EU/EEA: your local Data Protection Authority.
Send requests to privacy@akashi.cloud. We respond within 30 days (GDPR Art. 12(3)). We may ask for proof of identity to prevent unauthorized access.
9. Security
We use HTTPS in transit, access controls, separation of duties, processor agreements, and reasonable physical and organizational measures. No system is perfectly secure; if you believe your data has been compromised, contact us immediately.
10. Children
The site is not directed to children under 16, and we do not knowingly collect data from them. If you believe a child has provided data, contact us and we will delete it.
11. Automated decision-making
We do not use automated decision-making or profiling that produces legal effects on you.
12. Changes to this policy
We may update this policy from time to time. The "Last updated" date at the top reflects the latest change. Material changes will be highlighted on the site.
13. Contact
For any privacy question or request: privacy@akashi.cloud, or by post at the address above.