Personal Data Processing Policy

Version of 10 November 2026

This is a translation of the Russian version. If the versions differ, the Russian version prevails.

1. Who processes your data

The website integroworld.com operates under the Integro Group brand (Integro World). The personal data of website visitors and clients are collected and processed by the company:

Integro Law Agency LLP (ТОО «Юридическое агентство „Интегро“»)

BIN 221140013348

Address: 46/1 Turan Avenue, office 613, Astana, Republic of Kazakhstan

Director: Artur Davletshin (Давлетшин Артур Рафаэлевич)

Email for questions about personal data: info@integroworld.com

Person responsible for organizing personal data processing: Director Artur Davletshin

Below, we refer to the company as "we". Under the Law of the Republic of Kazakhstan No. 94-V of 21 May 2013 "On Personal Data and Their Protection" (the "Personal Data Law"), we are both the owner and the operator of your personal data.

This Policy is written under the legislation of the Republic of Kazakhstan. It explains what data we receive, why, who we transfer them to, how long we keep them and how you can manage them.

2. Where this Policy applies

• the website integroworld.com and all its pages;
• request forms on the website;
• the Integro World AI consultant: the website chat, the Telegram bot @integroai_bot and, once it is connected, WhatsApp Business;
• correspondence and calls with our managers in WhatsApp, Telegram, WeChat and by email;
• contracts for our services.

This Policy does not apply to websites and services of other companies, even if we link to them: websites of consulates, banks, government bodies, payment systems. They have their own rules.

3. What data we receive

3.1. From the request form

• your name or how you would like to be addressed;
• a contact for communication: phone number, username or number in Telegram or WhatsApp;
• citizenship;
• the description of your task that you wrote yourself;
• the address of the page from which you sent the request, and the name of the service;
• the date and time of sending, as well as advertising campaign tags (UTM) if you came via an advertising link, and technical information that the Tilda website builder adds to the request, such as the IP address and the address of the page you came from.

Do not write passport details, health information, criminal records or debts in the "Briefly, what do you need?" field. They are not needed for the first reply.

3.2. From correspondence with the AI consultant and a manager

• the text of messages, voice messages and files you have sent;
• profile name, phone number or messenger ID;
• a short summary of your request that the AI consultant prepares for the manager.

3.3. When providing services under a contract

We request only what is needed for your procedure. Depending on the program, this may include:

• passport details, IIN (individual identification number) or TIN (taxpayer identification number), residential address;
• information about family, education, employment, income and source of funds;
• data about the company, its members, directors and beneficial owners;
• documents required by a government body, consulate or bank of the destination country: a certificate of no criminal record, a medical certificate, account statements and others.

Before requesting documents, the manager explains what is needed and why. We receive health and criminal record information only from you and only when the procedure directly requires it.

We accept documents in electronic form. We do not collect paper copies of identity documents, except where the law permits it.

3.4. Automatically, when you use the website

• IP address, device type, browser, language, approximate location based on IP;
• which pages you opened, where you came from, what you clicked and how much time you spent on the website;
• cookie identifiers and advertising identifiers.

These data are collected by the analytics and advertising services listed in Section 7. We use them in aggregate statistics and to set up advertising, not to identify you.

4. Why we process data

We process data only for these purposes and do not ask for more than they require. We do not sell personal data, do not transfer them for other parties' advertising and do not place them in publicly available sources.

The AI consultant does not make decisions that have legal consequences for you. Whether to take your case, on what terms and at what price is decided by a person.

5. Where and how long we store data

5.1. Where

• Requests from the website are saved in the CRM of the Tilda website builder; a notification of the request is sent to the responsible employee in Telegram.
• Conversations with the AI consultant are stored on a rented server in Finland (Hetzner Online GmbH).
• Clients' documents are stored in the work accounts of the employees handling the case and in the case correspondence.
• Data held by the foreign services listed in Section 6 are transferred abroad; see Section 8.

5.2. How long

When the period expires or the purpose is achieved, we delete the data or depersonalize them so that no person can be identified from them. We return the originals of your documents to you after the case is completed.

6. Who we transfer data to

We transfer only the data needed for a specific purpose.

6.1. Services that run the website and communications

• Tilda Publishing: website builder, receiving requests, CRM;
• Telegram: request notifications, the AI consultant's Telegram bot, correspondence with a manager;
• WhatsApp: the AI consultant's WhatsApp Business and correspondence with a manager;
• WeChat: correspondence with a manager, if you chose this channel yourself;
• Google (Gemini API): the AI model provider; it receives the conversation text to generate the AI consultant's answer; servers in the USA;
• Hetzner Online GmbH: hosting for the AI consultant, server in Finland;
• Yandex 360: email on the integroworld.com domain.

6.2. Analytics and advertising services

Google (Google Analytics 4, Google Tag Manager), Yandex (Yandex Metrica), Meta (Meta Pixel). Details are in Section 7.

6.3. Contractors and partners

Part of the work under the contract is performed by third parties we engage: lawyers and consultants in the destination country, registration agents, notaries, translators, couriers. We transfer data to them only after you have agreed the service with us, and only to the extent needed for your case. We require them to keep the data confidential and not to use them for other purposes.

6.4. Government bodies, consulates, banks

These are the organizations to which we submit documents on your instructions: migration services, consulates, company registrars, banks. How they process the data is decided by them under the laws of their own country.

6.5. As required by law

Courts, law enforcement and other government bodies, when the law obliges us to provide data.

7. Cookies, analytics and pixels

Cookies are small files that a website saves in your browser. We use:

These services are activated when you open pages of the website. You can opt out of them as follows:

• in your browser settings: block or delete cookies;
• with the services' own tools: Google Analytics opt-out add-on, Yandex Metrica opt-out, ad settings in your Meta account.

The website works without these cookies, but we understand less well what to improve in it.

8. Cross-border data transfer

The services listed in Section 6 store and process data on servers outside Kazakhstan: Tilda, Telegram, WhatsApp and WeChat on their own servers in various countries, the AI consultant's server in Finland, Google and Meta mainly in the USA and EU countries, Yandex in Russia.

In addition, your service is almost always connected with another country. To submit documents for a residence permit in Spain or to register a company in the UAE, the data must be transferred to the authorities, banks and contractors of that country.

Not all countries protect personal data in the same way as Kazakhstan. We transfer data abroad on the basis of your consent and only to the extent needed for the purpose.

9. How we protect data

• Only employees who need it for their work have access to requests, correspondence and documents.
• Service accounts are protected by passwords; we enable two-factor authentication where the service supports it.
• Access keys to bots and services are not stored in plain text.
• Employees and contractors are obliged to maintain confidentiality.
• If a data leak occurs, we will report it to the authorized body within one business day of discovering it, and will warn you if the leak may harm you.

Risks on the internet cannot be fully ruled out. If someone writes to you on our behalf and it seems suspicious, let us know.

10. Your rights

Under the law of the Republic of Kazakhstan, you have the right to:

• find out whether we hold your personal data and access them free of charge: what data, where they were obtained, why and for how long we process them;
• demand that the data be corrected or supplemented if they are inaccurate or incomplete;
• demand that the data be blocked or destroyed if we process them in breach of the law;
• withdraw consent to processing, except where withdrawal contradicts the law or you have an unfulfilled obligation to us;
• object to decisions made solely by automated processing;
• claim compensation for harm if your rights have been violated;
• challenge our actions before the authorized body or in court. The authorized body for personal data protection is the Ministry of Artificial Intelligence and Digital Development of the Republic of Kazakhstan (Information Security Committee).

How to submit a request

• by email: info@integroworld.com;
• by letter to: 46/1 Turan Avenue, office 613, Astana, Republic of Kazakhstan;
• by message to your manager, if you are already in contact with one.

State how we should address you and which contact you gave in your request, so that we can find your data faster. We may ask you to confirm that the request was sent by you: this protects your data from outsiders.

Our response times:

Time limits run from the day we receive the request.

If you withdraw consent

Within 15 business days, we stop processing and delete the data or tell you why we cannot do so. The exception is data that the law obliges us to keep, for example accounting documents for a paid contract. If the service cannot be provided without the data, we will not be able to continue work under the contract after you withdraw consent.

11. AI consultant

• The AI consultant is a program, not a person. Under the Law of the Republic of Kazakhstan "On Artificial Intelligence", we inform you that this service is provided using AI. The AI consultant says so at the start of the conversation and shows a link to this Policy.
• It answers based on our knowledge base and can make mistakes. Its answers are for reference only: they are not legal advice and not a promise of a result, price or timeframe. The final terms are stated by a manager.
• To generate an answer, the AI consultant transfers the conversation text to the AI model provider (Section 6.1). We use paid access to the Gemini API: under Google's terms, data from such requests are not used to train its models.
• Do not send the AI consultant scans of your passport or other documents. When they are needed, a manager will take over.
• The AI consultant passes a short summary of the request and your contacts to a manager, so that you do not have to explain everything again.
• You have the right not to communicate with the AI consultant: at any time you can ask to be connected with a person, or write to a manager directly through the request form.

12. Children's data

The website is intended for adults. We receive data of minors, for example for a family residence permit program, only from their parents or legal representatives.

If you provide us with data of other people (a spouse, children, business partners), confirm that you have their consent or a legal right to act on their behalf.

13. Clients from other countries

People contact us from Kazakhstan, Russia, Belarus, Armenia, Kyrgyzstan, Uzbekistan and other countries. We process data under the legislation of the Republic of Kazakhstan. If the law of your country gives you additional rights regarding your data, write to us: we will consider your request with that law in mind.

14. Changes to this Policy

We update this Policy when our services, processes or the law change. A new version takes effect when it is published on this page; its date is shown at the top. We notify clients with active contracts of material changes using the contact details in the contract.

15. Contacts

Integro Law Agency LLP

46/1 Turan Avenue, office 613, Astana, Republic of Kazakhstan

Email: info@integroworld.com

Website: integroworld.com