PRIVACY POLICY
Last updated: May 12, 2026
1. Introduction
BOND STONE International Law Firm (“BOND STONE,” “we,” “us,” or “our”), registered and operating in the Republic of Kazakhstan with offices at Esentai Tower, 77/7 Al-Farabi Avenue, Almaty, Kazakhstan, is committed to protecting your personal information and your right to privacy.
This Privacy Policy explains how we collect, use, store, and protect personal information when you visit our website bondstonelaw.com (the “Site”) or contact us in connection with our legal services. It also explains your rights in relation to your personal data and how to exercise them.
If you have any questions about this Privacy Policy or our data practices, please contact us at:
BOND STONE Law Firm Esentai Tower, 77/7 Al-Farabi Avenue, Almaty, Kazakhstan
Email: info@bondstonelaw.com Tel: +7 701 729 76 72
2. What Data We Collect
We collect personal data in the following ways:
Data you provide directly When you submit our contact form or contact us by email, we collect:
-
Full name
-
Email address
-
Phone number
-
Details of your legal enquiry
We do not collect payment information, sensitive personal data, or data from minors through our website.
Data collected automatically When you visit the Site, we automatically collect certain technical information including:
-
IP address
-
Browser type and version
-
Operating system
-
Pages visited and time spent
-
Referring URL
-
Geographic location (country/city level)
This information is collected through cookies and analytics tools. For full details see our Cookie Policy.
3. Legal Basis for Processing
We process your personal data on the following legal bases under the General Data Protection Regulation (GDPR) and the Law of the Republic of Kazakhstan “On Personal Data and Its Protection”:
Data |
Legal Basis |
|---|---|
Contact form submissions |
Legitimate interest — to respond to enquiries about our legal services |
Analytics and usage data |
Legitimate interest — to improve our website and understand visitor behaviour |
Cookie data (non-essential) |
Consent — obtained via our cookie consent banner |
4. How We Use Your Data
We use the personal data we collect to:
-
Respond to your legal enquiries and contact form submissions
-
Assess whether we can assist with your legal matter
-
Communicate with you regarding your enquiry or ongoing matter
-
Improve the performance and content of our website
-
Comply with our legal and regulatory obligations
We do not use your personal data for marketing purposes without your explicit consent. We do not sell, rent, or share your personal data with third parties for commercial purposes.
5. How Long We Keep Your Data
Data Type |
Retention Period |
|---|---|
Contact form enquiries (no engagement) |
12 months from date of submission |
Client matter files |
7 years from closure of matter, in accordance with professional obligations |
Website analytics data |
26 months (Google Analytics default) |
Cookie consent records |
12 months |
After the applicable retention period, personal data is securely deleted or anonymised.
6. Who We Share Your Data With
We do not sell or trade your personal data. We may share your data with the following categories of third parties only where necessary:
-
Google LLC — website analytics (Google Analytics). Data may be transferred to the United States under Google’s Standard Contractual Clauses.
-
WordPress/Automattic — website hosting and infrastructure.
-
Email service providers — for delivery of responses to your enquiries.
-
Our professional advisers — where required for legal, regulatory, or insurance purposes.
-
Courts and regulatory authorities — where required by applicable law or court order.
All third-party processors are required to handle your data securely and in accordance with applicable data protection law.
7. International Data Transfers
Your personal data may be transferred to and processed in countries outside Kazakhstan and the European Economic Area (EEA), including the United States (Google Analytics). Where such transfers occur, we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission.
8. Your Rights
If you are located in the European Economic Area, United Kingdom, or another jurisdiction with applicable data protection legislation, you have the following rights in relation to your personal data:
-
Right of access — to obtain a copy of the personal data we hold about you (Article 15 GDPR)
-
Right to rectification — to correct inaccurate or incomplete personal data (Article 16 GDPR)
-
Right to erasure — to request deletion of your personal data in certain circumstances (Article 17 GDPR)
-
Right to restriction — to restrict processing of your personal data in certain circumstances (Article 18 GDPR)
-
Right to data portability — to receive your personal data in a structured, machine-readable format (Article 20 GDPR)
-
Right to object — to object to processing based on legitimate interests (Article 21 GDPR)
-
Right to withdraw consent — where processing is based on consent, to withdraw it at any time without affecting prior processing
Under the Law of the Republic of Kazakhstan “On Personal Data and Its Protection,” Kazakhstani residents have equivalent rights to access, correct, and request deletion of their personal data.
To exercise any of these rights, please contact us at info@bondstonelaw.com. We will respond within 30 days.
9. Right to Complain
If you are located in the EEA or UK and believe we have processed your personal data unlawfully, you have the right to lodge a complaint with your local data protection supervisory authority:
-
Ireland: Data Protection Commission — www.dataprotection.ie
-
United Kingdom: Information Commissioner’s Office — www.ico.org.uk
-
European Union: Your national data protection authority