Privacy Policy

Last updated: 03/04/2025

Please read these Terms carefully before using the Website.

The Website is provided to You by TOO “CHILLBASE KZ” incorporated under the laws of Republic of Kazakhstan, registered on September 09, 2022. Registered address: Republic of Kazakhstan, Almaty city, Almaly district, Zhambyla street, building 100, postal code 050012.

The Company acts as the controller of personal data processed in connection with Your use of this Website, except for situations noted in this Privacy Policy.

If You have any questions or unclarities, You may contact Us at: [email protected]. You can also contact Us via postal mail: Republic of Kazakhstan, Almaty city, Almaly district, Zhambyla street, building 100, postal code 050012.

The information presented in this Privacy Policy will help You understand how We process data, for what purposes, what specific data We collect, how We use it, as well as Your rights regarding the processing of personal data.

1. Interpretation

The words of which the initial letter is capitalized have meanings defined under the following conditions. The definitions set forth in the section 2 below shall have the same meaning regardless of whether they appear in singular or in plural.

2.Definitions

“Company”, “Our”, “Us”, or “We” means TOO “CHILLBASE KZ”.

“Contract” means the Website Terms of Use, accessible from https://leancats.net/terms-of-use.

“Device” means any device that can access the Website such as a computer, a cellphone, digital tablet or any other hardware facilitating the access to the Website.

“Service” refers to certain services of maintaining and making the Website available to You.

“Service Provider” means any natural person or legal entity who processes the data on behalf of the Company. It refers to third-party companies or individuals employed by the Company to facilitate the Service, to perform services related to the Service or to assist the Company in analyzing how the Website is used.

“Usage Data” refers to data collected automatically, either generated by the use of the Website or from the Website infrastructure itself, for example.

“Website” refers to the Leancats.net website accessible through https://leancats.net/.

“You”, “Your”, “User” means the individual accessing or using the Website, or the company, or other legal entity on behalf of which such individual is accessing or using the Website, as applicable.

3. Scope of this Privacy Policy

This Privacy Policy applies solely to the Website.

4. How do We use Your Personal Data

This section provides more detail on the types of personal information We collect from You, why We collect it and how We use it.

Purpose for use: to provide You the Service.
The data processed for this Purpose:To provide You with access to the Website, We may collect Usage Data, which is automatically gathered when You use the Website.

Usage Data may include information such as Your Device's IP address (or proxy server), Device (hardware model Internet service provider and/or mobile carrier), browser type, operating system version, type and system configuration information etc. We may also collect information that Your browser sends whenever You visit Our Website or when You access the Website by or through a mobile Device.
Sensitive Data processedNone
Legal Basis for processing: • To fulfill the Contract with You;
• To comply with legal obligations;
• Based on Our legitimate interest;
Retention period:Stored personal data will be deleted as soon as the purpose of processing has been achieved and there are no legitimate reasons for further storage of the data in such a way that the data can no longer be used to identify You and/or for a period of 30 days from the date of receipt of the request (inquiry) from User for the deletion of their personal data, whichever occurs first.

We can also retain and use Your Personal Data to the extent necessary to comply with Our legal obligations (for example, if We are required to retain Your data to comply with applicable laws), resolve disputes, and enforce Our legal agreements and policies.
Purpose for use: Processing Your requests (inquiries) submitted through the Website
Details regarding the purpose:• To manage Your requests: To attend and manage Your requests to Us.
• To contact You: To contact You by email.
• To provide You with feedback regarding Your inquiry, if You sent it on Our Website.
The data processed for this Purpose:• E-mail address
• Full name
• Information contained in the request submitted through the Website
Sensitive Data processedNone
Legal Basis for processing:• To fulfill the Contract with You;
• To comply with legal obligations;
• Based on Our legitimate interest; or
• Based on Your consent, when required.
Retention period:Stored personal data will be deleted as soon as the purpose of processing has been achieved and there are no legitimate reasons for further storage of the data depending on the nature of the User’s request in such a way that the data can no longer be used to identify You and/or for a period of 30 days from the date of receipt of the request (inquiry) from User for the deletion of their personal data, whichever occurs first. We can also retain and use Your Personal Data to the extent necessary to comply with Our legal obligations (for example, if We are required to retain Your data to comply with applicable laws), resolve disputes, and enforce Our legal agreements and policies.

5. How We Store and Share Your Personal Information

In order to provide You certain Website functionalities, We seek assistance from different Service Providers with whom We can share some information about You.

Service ProviderLocationNotes:Privacy Documents
Digital Ocean Inc. 1101 Avenue of the Americas, 10th Floor, New York, United States.GermanyThis Website is hosted by an external service provider (host). User’s data collected on this Website are stored on the servers of the host provider. The host is used to allow You to connect to Our Website and ensure the security, safety, and access to Our Website. It is necessary to perform the Contract. Our host will only process Your data to the extent necessary to fulfill its performance obligations and to follow Our instructions with respect to such data.• Privacy Policy - https://www.digitalocean.com/legal/privacy-policy
• Data Processing Agreement - https://www.digitalocean.com/legal/data-processing-agreement
• GDPR information - https://www.digitalocean.com/legal/gdpr
Cloudflare, Inc.

101 Townsend St. San Francisco, CA 94107
To ensure maximum efficiency and minimize latency, Your data may be transmitted to a Cloudflare, Inc. server physically located closest to Your geographical location. To optimize the performance and security of the Website, We use Proxy servers. These serversо act as intermediaries between User Devices and Our main server, assisting in tasks such as load balancing, traffic filtering, and enhancing overall user experience. The use of proxy servers helps ensure a secure and efficient service. • Privacy Policy - https://www.cloudflare.com/privacypolicy/
• Data Processing Agreement (DPA) - https://www.cloudflare.com/cloudflare-customer-dpa/
СHILLBASE LTD

Elenis Loizidou 14, Off 201c, Nicosia 2042, Cyprus
Republic of CyprusTo ensure the availability of Services, and process requests submitted through the Website.To obtain a DPA instance, please contact us via email: [email protected]

6. Cookies

Cookies are small files that are placed on Your computer, mobile Device or any other Device by the Website. Below are the cookies We use and their usage details.

Essential cookies. Essential cookies are necessary for the functionality of Our Website and/or for security. We don’t need any additional consent to use it, but We want to give You the relevant information. These cookies will always be active as they are a condition for using Our Website.

Site/domain/hostCookie NamePurpose of cookieExpirationProvider
.leancats.netcf_clearanceClearance Cookie stores the proof that a Javascript or Captcha challenge has been passed in Cloudflare. This cookie is needed to ensure that these challenges are no longer issued if it has already been passed. It is required in order to reach the origin server.1 yearCloudflare Inc.

https://developers.cloudflare.com/fundamentals/reference/policies-compliances/cloudflare-cookies/

7. Transfer of Your Personal Data

Your information, including Personal Data, is processed at the Company's operating offices and in any other places where the parties involved in the processing are located. It means that this information may be transferred to - and maintained on - computers located outside of Your state, province, country or other governmental jurisdiction where the data protection laws may differ from those of Your jurisdiction. Your consent to this Privacy Policy followed by Your submission of such information represents Your сonsent to such transfer.

The Company will take all steps reasonably necessary to ensure that Your Personal Data is treated securely and in accordance with this Privacy Policy and no transfer of Your Personal Data will take place to an organization or a country unless there are adequate controls in place including the security of Your Personal Data.

In some cases We share Your personal data with Our affiliates and partners in the EU/EEA and outside the EU/EEA. We rely on safeguards referred to in Article 46 GDPR where the data transfer outside of EU/EEA is not covered by an EU Commission adequacy decision. Therefore, We use EU Commission-approved Standard Contractual Clauses, including supplementary measures as necessary. You can access Standard Contractual Clauses here. If We transfer personal data to the United States We are guided by the Data Processing Agreement (DPA) concluded with Our Service Providers, which certified its compliance with the EU-U.S. Data Privacy Framework (“EU-U.S. DPF”).

8. Automated individual decision-making

We do not make any automated decisions that could lead to legal or other similarly significant consequences for You.

9. Disclosure of Your Personal Data

7.1. Law enforcement

7.1.1. Under certain circumstances, the Company may be required to disclose Your Personal Data if required to do so by law or in response to valid requests by public authorities (e.g. a court or a government agency).

7.2. Other legal requirements. The Company may disclose Your Personal Data in the good faith belief that such action is necessary to:

10. Your privacy rights

We aim to ensure that You are fully informed about all Your data protection rights and the methods available to exercise them. Please note that these rights may vary depending on Your location.

If You are a resident of the EEA-based User You have the following data protection rights:

Some of the rights described below may be subject to some exceptions or limitations. You can exercise these rights at any time by following the instructions below or sending Us relevant requests to mail: [email protected].

Your rights include:

To exercise Your rights, please contact Us via: [email protected]

Please note, in order to avoid unauthorized disclosures we shall proceed only in case of verifiable requests. We may ask for additional information to compare with existing data and confirm Your identity. The details of this information depend on the nature of the request and the category of the sought-after data

Once We confirm Your identity We will respond to Your request. It will be completed in 30 days. That period may be extended by two further months where necessary, taking into account the complexity and number of the requests. We shall notify You immediately in that case. You may send Us an email at: [email protected]. If We are unable to fulfill Your request, We will inform You of the reasons for such non-compliance in accordance with applicable laws.

11. Security of Your Personal Data

Ensuring the security of Your data is a top priority for Us. We employ robust technical and organizational measures to safeguard the personal information entrusted to Us. We have instituted reasonable administrative, technical, and physical security measures to protect Your personal data from unauthorized access, alteration, or destruction.

12. Children's Privacy

Our Website is not intended to process the personal data of children under the age of 18 (or the appropriate age in Your jurisdiction where You are considered a minor). We also do not collect or process information about the age of visitors to the Website. If You are under 18 years of age (or the appropriate age in Your jurisdiction where You are considered a minor), Your parent or guardian must review this Privacy Policy and make an informed decision about the possibility of Your use of the Website based on the information contained herein. Your parent or guardian should also make an informed decision about giving (or not giving) Us any consent as may be requested when using the Website. If You are a parent and You believe that We unintentionally collected Your children’s personal data, You may request the deletion of the information by contacting Us on [email protected].

13. Links to Other websites

This Privacy Policy does not cover third-party websites, online platforms, or systems linked to or used to access Our products. By using them, You acknowledge that the Company isn't accountable for the security or privacy practices of these third-party websites, platforms, or systems.

We may sometimes direct You to a site operated by a vendor or partner, which has a different privacy policy governing that information collection and usage by Our vendor or partner. If You click on a third party link, You will be directed to that third party's website. We strongly advise You to review the Privacy Policy of every site You visit.

14. No responsibility

We have no control over and assume no responsibility for the content, privacy policies or practices of any third party sites or services.

15. Changes to this Privacy Policy

We may update Our Privacy Policy from time to time. We will notify You of any changes by posting the new Privacy Policy on this page.

We will update the "Last updated" date at the top of this Privacy Policy.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

16. Privacy Notice for California Residents, US

California laws provides residents of California specific rights such as:

Please note, in order to avoid unauthorized disclosures We shall proceed only in case of verifiable requests. We may ask for additional information to compare with existing data and confirm Your identity. The details of this information depend on the nature of the request and the category of the sought-after data.

Once We confirm Your identity We will respond to Your request. It will be completed in 45 days, but in case of necessity We can extend this period by an additional 45 days. We shall notify You immediately in that case. You may send Us an email at: [email protected]. If We are unable to fulfill Your request, We will inform You of the reasons for such non-compliance in accordance with applicable laws.

Sale or Sharing of Personal Information. The Company does not Sell or Share Your personal information by the business to a third party, including for the purposes of cross-context behavioral advertising, whether or not for monetary or other valuable consideration, including transactions between a business and a third party for cross-context behavioral advertising.

Categories of personal information that We have disclosed for business purpose in the preceding 12 month:

To understand the purposes for which We use and disclose personal data, as well as instances of potential disclosure, please refer to the Section 4-6 of this Privacy policy.

We determine the retention period for personal information for each of the categories listed above based on:

Automated decision-making technologies: We do not make any automated decisions that could lead to legal or other similarly significant consequences for You.

California Residents’ Rights: residents of California have the right to request, once a year, disclosure regarding any personal information shared with third parties for their separate direct marketing purposes. Even though We do not share information with third parties for marketing, You can reach out to Us. Please ensure the subject line reads “California Privacy Rights Request,” and include relevant details such as Your name, street address, city, state, and ZIP code.

All mentions of “personal data” in this policy include “sensitive/personal information” as defined by California laws.

17. Privacy Notice for Virginia, Connecticut, Colorado, Utah, And Nevada, US

We include this section for residents of other US states with privacy laws that may impact them. These privacy laws include the Virginia Consumer Data Privacy Act (“VCDPA”), the Connecticut Data Privacy Act (“CTDPA”), the Utah Consumer Privacy Act (“UCPA”), the Colorado Privacy Act (“CPA”), and the Nevada Privacy Law (“NPL”). This section is intended to comply with these laws by supplementing the information provided elsewhere in the Privacy Policy.

Collection of personal information. We may collect the personal information as described and categorized above. The personal information We may collect depending on how You use Our Website.

Use of personal information. We may collect, use, or disclose personal information about US state residents for the purposes described above.

Disclosure of personal information. We may disclose Your personal information to the categories of Service Providers and third parties identified and described in this Privacy Policy.

Your privacy rights. We generally provide the privacy rights to You regardless of Your location. Your state may afford You additional privacy rights as noted below. To exercise Your rights, please contact Us via [email protected]. We will respond to Your verifiable request within the time limit afforded under applicable law.

Residents of Colorado, Connecticut, Virginia, and Utah have the right to opt out of targeted advertising and sales. Please know that We do not trigger this requirement because We do not sell Your personal information for payment.

For Users in Colorado, Connecticut, and Virginia, You may opt out of profiling in furtherance of decisions that produce legal or similarly significant effects. While You may still make this request, We do not currently use profiling in this manner.

Nevada provides its residents a limited right to opt out of the sale of personal information. Please know that We do not trigger this requirement because We do not sell Your personal information for payment.