Consent to the Collection and Processing of Personal Data

Version dated 7 October 2026 (revision 3)

The Russian text is the authoritative version of this document. This English translation is provided for convenience only; in case of any discrepancy the Russian text prevails.

By ticking the “I accept” box in the registration form and confirming my phone number with an SMS code, I, acting freely, of my own will and in my own interest, in accordance with Articles 7 and 8 of the Law of the Republic of Kazakhstan “On Personal Data and Their Protection”, give BiccomTech LLP (BIN [BIN], address: [registered address]; hereinafter, the “Operator”) my consent to the collection and processing of my personal data on the following terms.

1. List of Data

first name and last name;
mobile phone number;
mailbox address and password (as a hash);
IP addresses, sign-in times, information about the browser or email client application;
the profile photo and the email signature, if I add them in the settings;
the content and technical information of the messages stored in my mailbox;
if I connect to the Service my mailbox held with another email service — the address of that mailbox, the names of its mail servers, the login name, the app password (in encrypted form), copies of the messages of that mailbox and technical information about their copying.

2. Purposes of Processing

registering and maintaining the mailbox;
receiving, storing and delivering messages;
confirming the phone number and restoring access;
ensuring security and protection against spam and fraud;
on my separate instruction — connecting to my mailboxes held with other email services, copying their messages to my mailbox and sending my messages from the addresses of those mailboxes;
complying with the requirements of the legislation of the Republic of Kazakhstan.

3. Operations on the Data

Collection, recording, systematization, storage, rectification, use, blocking, anonymization and destruction — using automated means.

4. Transfer to Third Parties

I consent to the transfer of my phone number and the text of the SMS containing the confirmation code to the SMS provider SMS-Centre LLP (Republic of Kazakhstan).

My messages are transferred to the recipients I specify and to the mail servers involved in delivery, including those located outside the Republic of Kazakhstan, where I myself send a message to such a recipient.

If I connect to the Service my mailbox held with another email service, I instruct the Operator to connect to that mailbox on my behalf, transmitting the login name and the app password to the email service for sign-in, to copy its messages to my mailbox and to send my messages from the address of that mailbox through the servers of that email service, including those located outside the Republic of Kazakhstan (cross-border transfer). The instruction is given separately when each mailbox is connected, is recorded by the Operator and terminates when the mailbox is disconnected.

The Operator does not disseminate my personal data in publicly available sources.

5. Storage

The data is stored in a database located in the territory of the Republic of Kazakhstan.

The data of a connected mailbox held with another email service is stored for as long as the mailbox is connected and is deleted when it is disconnected or together with my mailbox; on disconnection, the copies of messages are deleted or remain in my mailbox, as I choose.

6. Term and Withdrawal

The consent is in effect from the moment of registration until the mailbox is deleted.

I may withdraw my consent by sending a request to privacy@hatmail.kz from the address of my mailbox. I am aware that after withdrawal the mailbox will be deleted and the data destroyed, except for the data that the Operator is required by law to retain.

7. Confirmation

I confirm that I have read the Privacy Policy and the User Agreement, and that the data I have provided belongs to me.

The date and the version of the consent are recorded by the Operator at the time of registration.