Privacy Policy

1. General Principle

Lab of Cyber Solutions follows a simple rule: collect only the data that is genuinely needed for the website to operate, for us to respond to a request, perform technical diagnostics, support a project or fulfil contractual obligations. We do not build a data collection machine around the website, we do not use forms to harvest a database and we do not collect information “just in case”.

2. What the Website Itself May Process

• technical data typically recorded in web server logs, content delivery network (CDN) logs and security systems: IP address, browser type, request time, page address, response codes, referral source and similar service parameters;
• anonymous first-party events related to website usage and key actions: page loads, scroll depth, FAQ opens, document navigation, contact button clicks and language switching; these events are used only for internal measurement of section demand and website conversion, are not sent to external advertising networks and are not used for cross-site profiling;
• technical cookie files or similar mechanisms that may be used by security and content delivery infrastructure where necessary for the safety and stability of the website;
• the website does not contain contact forms, registration, comments, newsletter sign-ups or file uploads, so it does not ask for or directly collect your name, phone number, email address or other contact data via a web form.

3. What Happens If You Reach Out via Telegram, WhatsApp, Email or Phone

The website contains direct links to external communication channels. If you click one of those links, any further interaction takes place inside the relevant service or communication app under its own rules and data processing policy.

Once you send a message yourself, we may process only the information that you voluntarily provide in order to handle the request: your name, company, position, phone number, email address, description of the task, attachments, links, access credentials and project-related correspondence.

4. Why This Data May Be Needed

• to respond to your request and understand the context of the task;
• to assess the scope of work and prepare a proposal, invoice, contract or confidentiality agreement;
• to perform technical audits, diagnostics, support or service recovery;
• to keep the website safe, reduce abuse and diagnose failures at a basic level;
• to fulfil contractual obligations and comply with applicable laws of the Republic of Kazakhstan.

5. What We Do Not Do

• we do not sell or lease your data to third parties;
• we do not use personal data for advertising profiling;
• we do not publish details of your infrastructure or project work without explicit agreement.

6. Where Data May Be Stored and Who May Access It

Technical website data may be processed within hosting systems, content delivery networks (CDN), network security tools and backup infrastructure. Data that you send yourself after moving into an external communication channel may be processed within that communication service and the working tools used to deliver the project.

If a project requires a stricter confidentiality regime, a confidentiality agreement can be signed before any sensitive materials or access credentials are shared.

7. Cookie Files and Technical Mechanisms

The website is not designed for marketing profiling and does not use advertising trackers by default. At the same time, security infrastructure, the content delivery network (CDN) and anti-bot mechanisms may use technical cookie files or similar tools where necessary for the safe and stable operation of the website.

Website analytics records clicks on contact links and contact copying (without the contents), without cookies.

In addition, the website may use browser local storage and session storage: local storage is used to remember the selected language, while session storage may hold an anonymous technical identifier for the current visit used only for aggregated internal statistics on page views and clicks; by itself, that identifier does not reveal the visitor’s identity.

8. Retention Period

Web server logs are retained for up to 90 days and then deleted automatically.

Technical logs and internal records are kept for as long as reasonably necessary for security, diagnostics, support and the fulfilment of obligations. Where data is needed for contracts, accounting, acceptance certificates, project correspondence or protection of the parties’ interests, the retention period may be defined by business necessity and legal requirements.

9. Your Requests Regarding Data

If you want to clarify what data is involved, update it, restrict its use or request deletion to the extent permitted, you can write to [email protected] or message us on Telegram at @lcskz. We will review the request on its merits and respond in a reasonable working manner.