Privacy policy

Personal data is processed by ИП «ORGA», Сергиенко Александр Юрьевич, IIN 020925551545 (the Seller), the owner of the orga.kz website, under the Law of the Republic of Kazakhstan of 21 May 2013 No. 94-V «On Personal Data and Their Protection». The policy applies to the orga.kz website and its pages. By using the site and placing an order you agree to this policy; you give consent to data processing by ticking the box at checkout, its text is on the Consent page.

• name, phone number, email if you gave one;
• city and delivery address;
• the drawer or desk sizes and the organizer layout you enter in the builder;
• photos of your items or drawer, if you uploaded them yourself in the builder to get a layout suggestion: we do not store them, see section 5;
• the contents and history of your orders, payment method and status;
• Telegram ID, if you connected notifications through our bot;
• the network address of your device (IP): it is needed to limit the number of orders and login attempts and to find faults;
• cookies and analytics data, only with your consent: which ones is said in the Cookie policy.

You enter bank card details (number, expiry date, CVV/CVC code) on the secure page of the Freedom Pay payment service (the payment partner). We do not receive or store them.

• to place, make and deliver your order to your sizes;
• to suggest a layout from your photos, if you uploaded them;
• to accept payment and refund money on a return;
• to tell you the status of your order and answer your questions;
• to tell you when the site opens, if you left an address for the notice;
• to meet legal requirements: fiscal receipts, bookkeeping;
• to protect the site from abuse.

We do not use your name, phone, email or address for advertising, and we send mailings only if you subscribed to a notice yourself. If you pressed "Accept all" in the cookie banner, site visit data (section 5) is used for analytics and ORGA advertising: to see where buyers come from, to check which ads work and to show them to people who have already visited the site.

Databases with personal data are stored on servers located in the Republic of Kazakhstan. Copies of some data that we pass to the recipients listed in section 5 may be kept on their servers outside Kazakhstan.

Only as much as needed to fulfil the order:

• delivery services (Kazpost, CDEK, Yandex Delivery): name, phone and delivery address;
• the payment partner Freedom Pay, for card payment: the order number and amount and, if needed, phone or email;
• the online cash register operator (Webkassa) and the fiscal data operator: purchase details for the fiscal receipt and, if the receipt is sent electronically, phone or email;
• the Google mail service that sends order emails: your email address and the text of the email;
• the print contractor, if printing is outsourced: only the order number, the "Ready by" date and the print files (the sizes and layout you entered in the builder, the plastic and color you chose, and the labels embossed on the containers). We do not pass your name, phone number, email, address or order amount to the contractor. This data is sent via the Telegram messenger, whose servers are located outside Kazakhstan;
• the Telegram messenger: through it the ORGA team receives details of new orders (number, contents, sizes, delivery method and city, dates, payment method and amount, without your name, phone number, email or address) and the order's print files, and you, if you connected the bot, receive order status notifications (number, status, the tracking number once shipped and a link to the fiscal receipt). Telegram's servers are located outside Kazakhstan;
• state bodies of the Republic of Kazakhstan, when the law requires it.

Only if you turn to the assistant in the builder yourself (send a text request or upload photos with the "Match by photo" button) does the request text or photo go to Anthropic, PBC (USA): an artificial intelligence service that recognises items and suggests a container layout. It receives only the request text or the photos (one to three, reduced in size, without location or device data) and the inner drawer sizes. Your name, phone, email, address and order number are not passed. The request text and photos are not stored on our server: they are deleted after the service replies or an error occurs. What remains is the suggested layout with labels showing what goes where (for example, "cables"). Until you save it, it exists only in your browser. If you save the project or place an order, the layout with its labels is stored by us as a project or as part of the order (section 6). You can change or delete the labels in the builder before saving. Anthropic does not use the data it receives to train its models and, under its terms, keeps it for no longer than 30 days; it may keep requests longer, for up to 2 years, if they are flagged by its automated safety checks as a breach of its usage rules or if the law requires it. Anthropic's servers are outside Kazakhstan, in the USA. By sending a request or pressing "Match by photo" you consent to this transfer, including transfer outside Kazakhstan. Do not put names, phone numbers or addresses in the request; faces and documents that end up in the frame by accident go to the service too, so keep them out of the frame before you take the photo. If you are under 18, ask a parent or other legal representative to upload the photos or send the request with you.

Only if you pressed "Accept all" in the cookie banner do analytics and advertising services receive site visit data:

• Yandex Metrica and Google Analytics: visit statistics. Yandex Metrica can record actions on pages (Webvisor): scrolling, clicks, cursor movement and how the page looked. What you type in fields on the site and the data on the order page are not included in the recording;
• Meta Pixel (Instagram and Facebook) and TikTok Pixel: measuring and showing ORGA ads.

These services receive the addresses of the pages you open, actions on the site, device and browser data, the network address of your device (IP), cookie identifiers, sizes from the builder and the cart price, the order number (it is in the order page address) and, after payment, the order amount. We do not pass them your name, phone, email or delivery address. The data is processed on these companies' servers outside Kazakhstan, under their own rules. By pressing "Accept all" you consent to this transfer, including transfer outside Kazakhstan. To refuse, press "Necessary only"; you can change your choice later as described in the Cookie policy.

We do not sell data. For advertising, the services receive only site visit data and only with your consent, as described above.

As long as needed for the purposes of processing and within the periods set by the law of the Republic of Kazakhstan. After that the data is deleted or anonymized.

The text of requests to the assistant and photos for the layout suggestion are not stored on our server and are deleted after the service replies or an error occurs (section 5). A saved project or order with the layout and labels is kept in the same way as other projects and orders. The fact that the assistant was used is written to the consent log: the time to the minute, the document version, the kind (text or photo), the language, the number of photos, the outcome (reply or error), the service model, a random request number and Anthropic's service request number. IP address, cookies and other identifiers are not logged, and the log does not show who you are. The log is kept for 12 months; after deletion a record stays in database backups for up to 30 more days, until they are replaced by new ones.

You can find out what data of yours we hold, correct it, withdraw consent and demand deletion, unless that contradicts the law. Write to hello@orga.kz or to the seller's address given below on this page. We reply within the time set by law.

Only employees who need it for their work have access to the data. The connection to the site is encrypted. Actions in the management system are logged. Card payment goes through the payment partner's page, protected under the PCI DSS payment card security standard.

The Seller may change the policy. The current version and its number are always published on this page. Sites linked from orga.kz work by their own rules.