Legal
Privacy Policy
1. Who We Are
Bond Stone Law Firm ("Bond Stone", "we", "us") is a law firm registered in the Republic of Kazakhstan, operating internationally as Bond Stone International Law Firm. In Uzbekistan we operate through Bond Stone Legal Group LLC. We are responsible for the personal data described in this policy.
This policy explains how we collect, use, disclose, store and protect personal data when you visit bondstonelaw.com (the "Site"), contact us, or become a client, counterparty, job applicant or business contact.
It is designed to comply, where they apply, with the Law of the Republic of Kazakhstan No. 94-V of 21 May 2013 on Personal Data and Their Protection, the data protection rules of the Astana International Financial Centre, and the EU General Data Protection Regulation (GDPR).
2. Personal Data We Process
When you use the Site
The Site has no contact form and no user accounts, and we do not run analytics on it. Our hosting provider records standard technical data when pages are served, such as IP address, browser type, the page requested and the time of the request. See our Cookie Policy.
When you contact us
If you write or call, we receive your name, contact details and whatever you tell us about your matter. Please do not send confidential details until we have confirmed that we can act for you.
When you become a client or counterparty
- Identification data: name, passport details, identification numbers
- Contact information: address, email, phone number
- Professional and business information, including ownership and control of companies
- Financial and billing data
- Information about your legal matter or transaction
When you apply to work with us
We process your CV and the information you send to [email protected] for recruitment.
We do not knowingly collect personal data from anyone under 18 through the Site.
3. Why We Use Personal Data and Our Legal Basis
| Purpose | Legal basis |
|---|---|
| Providing legal services and client support | Performance of a contract or engagement |
| Conflict checks, client identification, KYC and anti-money laundering procedures | Legal and regulatory obligations |
| Replying to enquiries and managing client relationships | Legitimate interests, or steps before an engagement |
| Billing, accounting and audit | Performance of a contract; legal obligations |
| Recruitment and internal HR management | Steps before a contract; legitimate interests |
| Operating and securing the Site | Legitimate interests |
| Sending legal updates or marketing | Your consent, which you may withdraw at any time |
Where Kazakhstan law requires your consent to collect and process personal data, we ask for it.
4. Confidentiality and Legal Privilege
Personal data we receive in the course of providing legal services is subject to strict confidentiality obligations and, where applicable, attorney-client privilege. We do not disclose it except as the law permits or with the client's authorisation. An enquiry alone does not create an attorney-client relationship: see our Legal Disclaimer.
5. Who We Share Data With
We never sell personal data. We share it only where necessary and lawful, with:
- Courts, regulators and public authorities, where the law requires it or the matter calls for it
- Banks, notaries, auditors, translators, co-counsel and other professional advisers
- IT, email and cloud hosting providers bound by confidentiality obligations
- Our offices and affiliates within the Bond Stone group
6. International Transfers
We operate in several countries, and our service providers may process data outside Kazakhstan or the AIFC. Where personal data is transferred across borders, we apply appropriate safeguards, including contractual protections, and comply with the data protection law that applies.
7. How Long We Keep Data
| Data | Period |
|---|---|
| Enquiries that do not lead to an engagement | 12 months from receipt |
| Client matter files | 7 years from closure of the matter, or longer where the law requires |
| Recruitment data | Until the process ends, or longer with your consent |
After that, personal data is securely deleted or anonymised.
8. Security
We use technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration and accidental or unlawful destruction. Access is limited to authorised personnel on a need-to-know basis. No method of transmission over the internet is completely secure.
9. Your Rights
Subject to the law that applies to you, you may:
- Access your personal data
- Ask us to correct or update inaccurate data
- Ask us to delete data or restrict its processing
- Object to certain processing
- Receive your data in a portable format, where the GDPR applies
- Withdraw consent, without affecting earlier processing
To exercise a right, write to [email protected]. We reply within 30 days, or sooner where the law requires. Professional secrecy and legal retention duties may limit some requests.
10. Complaints
Please contact us first. You may also complain to the authority in your country. In Kazakhstan this is the authorised personal data body, currently the Ministry of Artificial Intelligence and Digital Development. In the EEA or UK it is your national data protection authority.
11. Third-Party Websites
The Site links to third-party websites such as government portals, courts, legal directories and maps. We are not responsible for their privacy practices.
12. Changes to This Policy
We may update this policy to reflect legal, regulatory or operational changes. The date at the top shows the latest version.
13. Contact
Bond Stone Law Firm
8th Floor, 77/7 Al-Farabi Avenue, Almaty, Kazakhstan, 050040
Email: [email protected]
Tel: +7 701 729 76 72