Consent to Personal Data Collection and Processing

1. Recipient of the consent

I give ИП «SMM DRUG», entrepreneur Маликов Олег Михайлович, IIN 000527501224, address: Республика Казахстан, г. Алматы, мкр. Алмагуль, 27, my consent to collect and process my personal data on the terms below.

2. Data subject and data categories

The data subject is the person whose name, surname and phone number are entered in the form. The user confirms that they are entering their own data or have a lawful basis to provide the data of the person they represent.

• name and surname;
• phone number or WhatsApp number;
• an optional task description;
• the selected service, parameters and result of the preliminary calculation, the page and source of the enquiry;
• advertising labels and the external referrer, plus limited current-visit context: the channel and platform, supplied campaign, ad group, ad and advertising keyword, the source-identification method, landing path without parameters, referring hostname and browser-reported start time; where available, one previous advertising touch with a separate date;
• the enquiry number, version of this consent, date and server time of acceptance;
• the IP address and limited technical request data for protecting the form and preventing spam.

3. Purposes

• to process the enquiry and contact me;
• to clarify the task and prepare a proposal, calculation and draft contract;
• to organise performance of a concluded contract and mandatory document flow;
• to secure the form and prevent spam and abuse.

4. Permitted processing operations

I permit the collection, receipt, recording, organisation, storage, updating, use, transfer to the stated recipients, blocking, anonymisation and destruction of data by automated and non-automated means to the extent necessary for the stated purposes.

5. Third parties and cross-border transfer

I expressly agree that the content of my enquiry may be transferred to a closed Telegram workspace for a prompt response. Such processing may involve a cross-border transfer and storage of a copy of the message on the infrastructure of a foreign service.

The source context described above may be attached to an enquiry. An advertising keyword supplied in a label does not verify a person's search query; inferred and unknown sources are identified separately. This checkbox applies to submitting the form and is not treated as consent obtained by a separate phone or WhatsApp click. Technical click notifications are described in the data policy and do not confirm a message, call or received enquiry.

Measurement through Google Tag Manager, the single Google Analytics 4 property, Google Ads conversion tags, Yandex Metrica and Meta Pixel runs on production pages and is not required to submit an enquiry. Google receives only a server-accepted enquiry event and WhatsApp or phone click events; Google remarketing and enhanced conversions are not used. Meta Pixel uses the accepted-enquiry fact and a technical event ID for measurement and Instagram retargeting, but does not receive the name, phone number, enquiry text or calculation from the form. Meta Conversions API is not used. Clearing browser data removes the _ga*, _ym*, _gcl_*, _fbp and _fbc cookies accessible to the website. If I follow a link to an external platform, I also interact directly with that service.

6. Publication and dissemination

This consent does not authorise publication of my data in publicly available sources, use of my image in a case study or disclosure of my data to an indefinite group of persons. Such publication requires a separate legal basis or separate consent.

7. Term and withdrawal

For an enquiry that does not result in a contract, consent remains effective until the purposes are achieved, but for no longer than 12 months after the last meaningful contact. If a contract is concluded, data may be retained longer within the contract term and mandatory statutory periods.

Consent may be withdrawn by writing to smmdrug@gmail.com. State the name and surname, the contact detail used in the enquiry and the substance of the request. After reasonable identity verification, the controller will stop processing and delete the data unless continued retention is required by contract or law.

8. Confirmation

By selecting the checkbox, I confirm that I have read this text and the Personal Data Processing Policy and understand the purposes, data categories, term, transfer to a third party and possible cross-border nature of the processing. The form cannot be submitted without selecting the checkbox.

9. OpenAI: a separate optional choice

The form checkbox confirms only the enquiry-processing consent above. It does not permit sending an event to OpenAI. For ChatGPT advertising measurement, the website separately offers acceptance or refusal of that transfer; refusal does not prevent a form submission, call or WhatsApp visit and does not switch other analytics systems on or off.

The separate choice version is 2026-10-24-openai-v1. If accepted, the server may send the foreign recipient OpenAI the saved-form or WhatsApp/phone click type, time, a random event ID, the domain https://smmdrug.kz and oppref, if present. These are pseudonymous data with possible cross-border processing, not anonymous statistics. Clicks do not confirm messages, calls or sales. The visitor's name, phone, email, enquiry and their hashes, IP/user-agent and browser profile are not sent; opt_out=true restricts future user-level personalization.

The website uses no OpenAI Pixel/SDK or cookies. The choice and permitted oppref are retained in the browser for up to 30 days. “OpenAI settings” lets you stop recording new actions and delete the saved oppref. Actions before permission are not replayed; an event already queued may finish delivery within 7 days. Refusal does not automatically delete data already sent to OpenAI. The data and local-storage policies explain retention and the recipient in more detail.