К содержанию
Master's Kit

На сайт

Data Processing Consent

Operator: GetScale LLP
Address: 010017, Astana, Turkistan street, 14A, Kazakhstan
Registration details: BIN 230940007660
Contact: [email protected]

1. Subject of consent

1.1. The user consents to the Operator processing the user's personal data on the terms set out below.

1.2. Consent is given separately from accepting the Licence Agreement and the Privacy Policy — by a dedicated checkbox, button or other explicit action in the interface, as required by applicable law.

1.3. Consent is used where applicable law requires consent as the basis for processing. For other operations the basis is performance of the contract, compliance with law or legitimate interests (clause 8.2).

1.4. Consent covers the user's own data. Personal data of the business's clients (salon, studio or professional customers) that the user enters into the CRM is processed on the instructions of the relevant business as the data controller, and not on the basis of this consent. The user confirms that they are entitled to enter such data and have obtained the necessary permissions.

1.5. For the Republic of Kazakhstan consent is executed in accordance with the Law of the Republic of Kazakhstan "On Personal Data and its Protection". Consent may be given electronically where the user is identified through the account (login and a confirming action in the interface).

1.6. By giving consent, the user confirms that they are at least 18 years old and act on their own behalf.

2. Data covered

Consent covers data the user provides directly or that arises while using the service:

Business client data entered into the CRM is not covered by this consent and is processed as described in clause 1.4 and in the DPA.

3. Purposes

3.1. Processing based on consent:

  1. informational and marketing messages about the product, updates and offers — such messages can be turned off at any time;
  2. responding to a request submitted on the website or in chat;
  3. voluntary participation in testing of new features and surveys;
  4. non-essential cookies and analytics to the extent consent is required for them.

3.2. Processing that does not require separate consent, because the basis is the contract, law or legitimate interests:

  1. registration, sign-in and account administration;
  2. provision of service functionality, support and diagnostics;
  3. payment processing and billing;
  4. information security and abuse prevention;
  5. service notifications about the operation of the service;
  6. compliance with legal requirements.

3.3. The Operator does not use the data for automated decision-making that produces legal effects or significantly affects the user, and does not build profiles for such decisions.

4. Operations

Collection, recording, systematisation, accumulation, storage, clarification (updating, amendment), extraction, use, transfer (provision, access), anonymisation, blocking, deletion and destruction — both automated and without automation tools.

5. Transfers to third parties

5.1. Data may be processed by subprocessors to the extent required to operate the service: cloud infrastructure, backup, payments, communications, monitoring and analytics.

5.2. Transfers outside the user's country take place only on a lawful basis and with safeguards required by law. Where applicable law requires separate consent for a cross-border transfer, such consent is deemed given to the extent necessary to provide the service; refusal may make certain features unavailable.

5.3. The Operator does not sell salon or professional customer databases as a standalone product and does not transfer them for third-party advertising.

5.4. The current list of subprocessors is available on request to [email protected].

6. Duration and withdrawal

6.1. Consent remains in force until withdrawn or until the purposes of processing are achieved. Marketing processing stops after withdrawal or unsubscribe.

6.2. Consent may be withdrawn through the account interface or by writing to [email protected].

6.3. Withdrawal does not affect the lawfulness of processing carried out before it was received and does not stop processing for which law or the contract provides a separate basis.

6.4. After withdrawal the Operator stops processing on that basis and deletes the data within the period required by law. A response to a data-subject request is provided within the period set by law or, where none is set, without undue delay and normally within 30 calendar days.

6.5. Where processing is necessary to operate the service and no other basis applies, withdrawal of consent may lead to restricted access to the relevant feature or to termination of the service.

7. Rights of the data subject

7.1. A data subject may request access, correction, deletion, restriction and portability, withdraw consent and lodge a complaint with a competent authority.

7.2. Where the data belongs to the customer base of a business using the service, a request may be directed to that business. The Operator provides technical assistance where required by law or the DPA.

7.3. Use of the service is not conditional on the user agreeing to marketing messages or non-essential analytics.

8. Final provisions

8.1. This consent is read together with the Privacy Policy and the DPA, which form part of the service legal package.

8.2. For the EU/EEA, the United States and other jurisdictions, the mandatory requirements of the applicable law apply. Where consent is not a required basis, processing relies on contract performance, compliance with law or legitimate interests.

8.3. The Operator records the fact of consent — date, time, document version and account identifier — as evidence of its receipt.

8.4. Data protection contact: [email protected].