OKEY privacy policy

What the site does and does not do

The site tells you about the OKEY product. It has no registration, no personal account, and no online card payment. The only form is the order form: you leave the details needed for delivery, and you pay with a remote Kaspi invoice that we send to your phone number (see “Ordering on the site”). You can also buy OKEY on Kaspi.kz, and you can contact us via WhatsApp or email.

What data we receive

• Technical data when you visit: IP address, device and browser type, language, pages you open, referral source, date and time. Server logs and analytics services record this.
• Behaviour on the pages: scrolling, clicks, and cursor movement. Yandex Metrica Webvisor records this in de-identified form so we can see where a page is inconvenient.
• Cookies and similar identifiers set by Google Analytics and Yandex Metrica.
• Information you share when you message us on WhatsApp or by email: your name, phone number or email address, the message itself, and, for a return, the order number and purchase date.

Why we use it

• To keep the site running and protected from failures and abuse.
• To understand which sections are useful and to improve texts, images, and navigation.
• To answer questions, advise on use, and arrange bottle returns.
• We do not sell personal data and do not use it for mailings without your separate consent.

Third-party services

Some data is processed by services we use. They follow their own rules, and their servers may be located outside Kazakhstan.

• Google Analytics (Google LLC) — visit statistics.
• Yandex Metrica with Webvisor (Yandex LLC) — visit statistics and click maps.
• Instagram (Meta Platforms) — photos in the reviews section load from Instagram servers, so Meta receives your IP address.
• WhatsApp (Meta Platforms) — messages, if you write to us.
• Kaspi.kz — ordering, payment, and delivery. Kaspi processes purchase data under its own rules. As the seller, we receive only what Kaspi shares to fulfil the order.

Ordering on the site

If you place an order directly on the site, we receive the data you enter in the order form. By pressing the “Place order” button, you allow us to process it on the terms of this section.

• What data: your first and last name, phone number, the Flip pickup point you choose, the number of bottles, and your comment if you leave one. The server also records the IP address and browser type the order was sent from, to protect against fake orders.
• Why: to process the order, take payment, deliver the order, contact you about it, and arrange a return if needed.
• Who receives it: the delivery service Flip.kz — only what is needed to deliver to the chosen pickup point; the bank or payment service that processes the payment. We do not share this data with any other third parties and do not sell it.
• Where we keep it: on the shop’s secure server. A notification of each new order with this data is sent to us in the Telegram messenger. Access to order data is limited to the people who process orders.
• How long we keep it: as long as needed to fulfil the order and handle returns, and for the periods required by law, including for accounting. After that, the data is deleted.
• Your rights: you can ask what order data we hold about you, have it corrected or deleted, and withdraw your consent. Write to us using the contacts in the “Who processes the data” section.

How long we keep data

• Server logs — for a limited period needed to run and secure the site.
• Analytics statistics — within the retention periods set in Google Analytics and Yandex Metrica.
• Messages — for as long as needed to answer your question and meet our obligations, including returns.

How to opt out of cookies and analytics

• On your first visit the site asks for your consent. Google Analytics and Yandex Metrica start only after you click “Accept” and do not load if you decline.
• Block or delete cookies in your browser settings. The site will keep working.
• Install Google’s official opt-out add-on for Google Analytics: tools.google.com/dlpage/gaoptout.
• Disable Yandex Metrica following Yandex’s instructions: yandex.ru/support/metrica/general/opt-out.html.

Your rights

You can ask what data we hold about you, request correction or deletion, and withdraw your consent to processing. Write to us and we will reply within a reasonable time. If the data is needed to meet obligations or legal requirements, we will explain why we cannot delete it immediately.

Children

The site is not intended to collect data from children. If you believe a child has shared their data with us, write to us and we will delete it.

Changes to this policy

We update the policy when the way the site works or the services we use change. The date of the current version is shown at the top of the page.