Awe CheckPrivacy policy for a website in Kazakhstan: what to include
Which sections a privacy policy needs under Kazakh law, where to place it, and how to make one in 3 minutes with a free generator.
Checked against sources: 1 October 2026
- 7 sectionsrequired minimum
- 3 placespage, footer, forms
- 3 minutesin the Awe Check generator
Why it is needed
Article 25 of the Law on Personal Data requires the database owner and operator to adopt documents on how data is collected, processed and protected. For a website, that is the privacy policy.
People must know who collects their data and why. Without a policy, consent in a form means little.
What the policy must contain
- Who the operator is: company or sole trader name, BIN/IIN, address, contacts.
- What data is collected: name, phone, email, address, cookies and IP.
- Why: requests, orders and delivery, newsletters, analytics.
- Who receives it: couriers, payment services, CRM, analytics, with countries.
- Where it is stored (in Kazakhstan) and for how long.
- How people can see, change or delete their data and withdraw consent.
- How the data is protected.
Where to place it
- As a separate page, e.g. /privacy.
- Linked in the footer of every page.
- Linked next to every form and in the consent text.
How to make it fast
The Awe Check policy generator builds a text under Kazakh law from your answers in 3 minutes, free, with nothing sent to a server. If the site already has an Awe Check report, it pre-fills the forms and services found.
Frequently asked
Can I copy another site’s policy?
Someone else’s policy has their details, purposes and services, it does not describe your site. It is both copyright infringement and useless in an inspection.
Which language?
For a site serving people in Kazakhstan, keeping the policy in Kazakh and Russian is safer.
