Privacy Policy

Polis Re respects the right to privacy and takes measures to protect information in accordance with the legislation of the Republic of Kazakhstan, including the Law of the Republic of Kazakhstan “On Personal Data and Their Protection”. This policy applies to the website, feedback forms, email correspondence, telephone enquiries and other channels of interaction, unless otherwise stated.

1. General provisions

The data operator under this policy is Polis Re LLP, BIN 121140000426. The website is located at https://polisre.kz/.

Using the open pages of the website does not in itself mean consent to the processing of any personal data. Consent is requested when required by law and must be linked to specific purposes and the scope of processing. In certain cases, processing may be carried out without consent where the law expressly permits it.

2. What data may be collected

• identification data: full name, IIN or BIN, date of birth — when necessary for arranging or supporting a policy;
• contact details: telephone, email, address and preferred method of contact;
• data on the insured object: vehicle, property, cargo, the organization’s activities and other risk characteristics;
• information for the insurance contract: the chosen programme, term, sum insured, beneficiary and history of enquiries;
• documents relating to an event: applications, photographs, reports, medical and other information, if necessary for consultation or for transfer to the insurer;
• business correspondence: messages, records of requests, replies, claims and documents submitted by the user;
• technical data: IP address, device and browser type, date of visit, pages viewed, cookies and security logs;
• marketing preferences: consent to or refusal of informational messages.

3. Purposes of processing

Data may be used only to the extent necessary and sufficient for the stated purpose:

• responding to an enquiry and providing a consultation;
• selecting, calculating and comparing insurance offers;
• preparing and supporting the arrangement of a policy;
• passing an application to the chosen insurance company with consent or on another lawful basis;
• making amendments and supporting an existing contract;
• helping with the list of documents in the event of an insured event;
• handling complaints, claims and requests from the data subject;
• performing contractual and statutory obligations;
• preventing fraud and ensuring the security of the website;
• analyzing service quality using anonymized or aggregated data;
• sending marketing messages where the necessary consent has been obtained.

4. Consent to collection and processing

Consent may be given in writing, in the form of an electronic document or in another way using security measures that do not contradict the law. Depending on the channel, this may be a tick in a form, a one-time code, an electronic signature, a message or another verifiable action.

Consent must make it possible to identify the operator, the subject, the term or period of validity, and the possibility of transfer to third parties, cross-border transfer and dissemination in publicly available sources — in cases where such information is required.

The user may withdraw consent by submitting a request, except where withdrawal contradicts the law or there is an unfulfilled obligation. Withdrawal does not make unlawful any processing carried out before its receipt on a valid basis.

5. Transfer to insurance companies and other persons

To calculate or arrange a policy, data may be transferred to the chosen insurance company, a service organization, an assistance provider, an appraiser or another participant, if this is necessary for the service and permitted by law. The recipient processes the data within the limits of its role and obligations.

Polis Re does not sell personal data as a commodity in its own right. Transfer is also possible:

• upon a lawful request from a court, law enforcement or other authorized body;
• to protect rights and legitimate interests, in compliance with legal requirements;
• to technical service providers who ensure the operation of the website, email, communications or storage and are obliged to maintain confidentiality;
• in the course of a reorganization or transfer of the business, subject to the applicable data protection requirements.

Compulsory types of insurance are provided only by insurance companies holding a valid licence. Polis Re may help with arranging a policy, but the insurance organization named in the contract is independently responsible for data processing in its part.

6. Special categories and medical information

Medical documents, health information and other restricted-access data require increased care. They are requested only when necessary for a specific insurance task and are transferred via an agreed channel.

The user must not send documents of other persons without authority or a lawful basis. If an application is submitted by a representative, a power of attorney or another document confirming the right to act on behalf of the subject may be required.

7. Rights of the personal data subject

Within the limits established by law, the data subject has the right to:

• know whether Polis Re holds their personal data;
• receive information on the purposes, sources, methods of processing and recipients;
• require the amendment and supplementing of inaccurate or incomplete data;
• require the blocking or destruction of information collected or processed in violation of the law;
• withdraw consent where the law permits;
• object to advertising messages and opt out of mailings;
• protect their rights by the means provided by law.

To consider a request, proof of identity may be required so that data is not disclosed to an unauthorized person. We ask you to word your request specifically: which information, operation or purpose needs to be reviewed.

8. Cookies and technical logs

Cookies are small files or records that help the website remember settings, keep pages working, measure traffic and prevent abuse. Technical logs may contain the IP address, time of access, page address, browser information and errors.

Cookies may be:

• necessary — for the basic operation and security of the website;
• functional — to save selected settings;
• analytical — to understand page usage in aggregated form;
• marketing — if such tools are used and the required consent has been obtained.

The user can restrict cookies in the browser settings. If they are disabled entirely, some website functions may not work correctly. Clearing cookies does not delete information already included in contracts, applications or mandatory business documentation.

9. Third-party websites and services

The website may contain links to insurance companies, maps, social networks, video hosting services and other resources. Their owners apply their own privacy policies. Following an external link means interacting with a separate operator whose actions Polis Re does not control.

Before sending data through a third-party service, check the website address, the secure connection and the recipient’s policy. Do not use a link from a suspicious message to make payments or transfer documents.

10. Storage and destruction

Data is stored no longer than necessary for the purposes of processing, performance of the contract, protection of legitimate interests and compliance with mandatory retention periods. The period depends on the type of document, the nature of the service and legal requirements.

Once the purpose has been achieved, the information is deleted, destroyed or anonymized, unless further storage is required by law or for the reasoned protection of rights. Backup copies may be deleted according to the established technical cycle.

11. Security

Polis Re applies organizational and technical measures aimed at preventing unlawful access to, alteration, dissemination and destruction of data. Access is limited to the persons who need the information for their work.

No method of transmission over the internet guarantees absolute security. The user also takes part in protection: checks the recipient’s address, uses strong passwords, does not disclose confirmation codes and promptly reports suspicious activity.

12. Data of minors

The website is not intended for minors to conclude contracts independently. If processing a child’s data is necessary for an insurance programme, it is carried out with the participation of a legal representative and where the required grounds exist.

If you believe that a minor’s data was provided without a proper basis, please report it so that it can be reviewed and action taken.

13. Marketing messages

Information about products, events and offers is sent where the necessary consent or another lawful basis exists. You can opt out of advertising messages using the method indicated in the message or by contacting Polis Re.

Service messages relating to an application, a contract, security or a mandatory notification may differ from advertising and may be sent when necessary for the performance of the service.

14. Changes to the policy

The policy may be updated when legislation, website functions or processing procedures change. The new version is published on this page with an indication of its effective date. If a change requires fresh consent, it is requested separately; continuing to browse the website does not replace such consent.

We recommend checking the page periodically, especially before providing new categories of data.

15. How to submit a request

For questions about personal data processing, you can write to info@polisre.kz or use the official contacts on the Contacts page.

In your enquiry, state your name, a contact for the reply, the substance of the request and details that allow the relevant record to be found. Do not send more identifying information than is required to verify your identity.

This version of the policy was updated in 2026. The text is for information purposes and applies subject to the current legislation of the Republic of Kazakhstan.