LUNIQPRIVACY POLICY
LUNIQ · Menu, Flow, Event, Reserved and the website luniq.net
Edition No. 1 dated 22 October 2026. Effective from the moment of publication at https://luniq.net.
This Policy describes what personal data LUNIQ processes, for what purposes, for how long and to whom it is transferred, and what rights people whose data is processed have. This Policy applies to the website luniq.net and all LUNIQ products.
1. Who we are and in what capacity
1.1. The sole proprietor ASTRO IT IP, BIN/IIN 980512350459, Republic of Kazakhstan, Astana (LUNIQ, "we"). This Policy is adopted in accordance with the Law of the Republic of Kazakhstan No. 94-V dated 21 May 2013 "On Personal Data and Its Protection" (the Law).
1.2. Our role depends on whose data it is:
| Whose data | LUNIQ's role | Who is responsible to you |
|---|---|---|
| Visitors to luniq.net, applicants, clients' representatives | owner and operator | LUNIQ |
| LUNIQ Event customers and guests | owner and operator | LUNIQ |
| Restaurant guests (Menu) and bathhouse guests (Reserved) | operator: passes the data to the venue and does not store it | the venue — owner of the data; LUNIQ — for the transfer |
| Flower buyers (Flow) | data is not received: the order is sent from the buyer's WhatsApp | the shop |
2. What data, for what purpose and for how long
2.1. We collect only the data needed for a specific purpose, and no more than is necessary for it (Article 7 of the Law). We do not collect identity documents, individuals' IIN or biometric data.
| Data | Purpose | Legal basis | Retention period |
|---|---|---|---|
| Name, phone, e-mail, name of the applicant's venue | respond to the application, show a demo | consent | not stored in LUNIQ's database: passed on to Telegram or WhatsApp to reply |
| Full name and contacts of the client's representative, details, payment history | perform the contract, keep records | consent; contract; tax legislation | duration of the contract; accounting documents — for the periods set by tax legislation |
| Venue guests (Menu, Reserved): name, phone, delivery address, order, booking, review | pass the order or booking to the venue | guest's consent given in the form | not stored: passed on at the moment of sending; delivery log without content — up to 30 days |
| Event: names and photos of the customer; name, photo and video of a guest | create the gallery and show files to participants | consent; Article 145 of the Civil Code | 7 calendar days from the event date; then the archive is handed to the organiser, and files are deleted immediately, within 24 hours |
| Technical data: IP address, browser, device, access time | operation and security of the service | consent | logs — 6 months |
| Analytics: cookie identifiers, page views, clicks and scrolling (Google Analytics, Microsoft Clarity) | understand how the website is used and improve it | consent given in the cookie banner | in line with the service rules, not more than 14 months |
2.2. Once the retention period expires, data is deleted or anonymised as provided by the Law.
3. Consent
3.1. Consent is given electronically: by ticking the form or by a message in a messenger after reading the consent text (Article 8 of the Law). We keep the date, time and version of the text you agreed to.
3.2. Consent remains valid for the retention period set out in Section 2, unless withdrawn earlier.
3.3. We do not knowingly collect data of persons under 18. If a child appears in a photo in an Event gallery, their legal representative may request deletion of the file.
4. To whom we transfer data
4.1. We do not sell personal data and do not transfer it for third-party advertising. Recipients:
| Recipient | What it receives | Location |
|---|---|---|
| The venue where you place an order or booking | order or booking data | Republic of Kazakhstan |
| Hosting provider (servers in Frankfurt, Germany) | Event galleries and technical website data | outside the Republic of Kazakhstan |
| Telegram, WhatsApp (Meta) | order and booking notifications, correspondence with you | outside the Republic of Kazakhstan |
| Google (Google Analytics), Microsoft (Clarity) | visit analytics; text entered in forms is masked and not transmitted | outside the Republic of Kazakhstan |
| Kaspi, Halyk | nothing: payment takes place in their apps | Republic of Kazakhstan |
| State authorities of the Republic of Kazakhstan | upon a lawful request | Republic of Kazakhstan |
4.2. Transfers via Telegram, WhatsApp, Google Analytics and Clarity are cross-border (Article 16 of the Law). They take place only with your consent: in the form (for messengers) or in the cookie banner (for analytics). The website and Event gallery servers are located in Frankfurt (Germany); the transfer there takes place on the basis of consent under Article 16 of the Law.
5. Your rights
5.1. In accordance with Article 24 of the Law, you have the right to:
– find out whether we hold your data and receive a free copy of its contents;
– require correction, blocking or deletion — we act on such a request within 1 business day where there is a ground under the Law (Article 25);
– withdraw consent — we stop processing no later than 15 business days later (Article 8), except for data that the law requires us to keep;
– request removal of your image from an Event gallery — we hide the file immediately and delete it within 3 business days;
– challenge our actions before the competent personal data authority or in court, and claim compensation for harm.
5.2. We pass requests about venue guests' data to the venue within 1 business day and help it fulfil them.
5.3. How to contact us: hiastroit@gmail.com, subject "Personal data", or WhatsApp +7 706 639 07 37. Please state your name, phone, product and the nature of the request.
5.4. The person responsible for organising the processing of personal data is Absamat Abylaikhan Asylkhanuly, phone +7 747 353 26 12.
6. Storage and protection
6.1. The website and Event galleries are hosted on servers in Frankfurt (Germany). Applications, orders and bookings are not stored in LUNIQ's database: they are passed on to the venue or to Telegram and WhatsApp.
6.2. Protection measures (Article 22 of the Law): connection encryption (HTTPS/TLS), role-based access control, two-factor authentication for administrators, backups, access logging, masking of phone numbers in interfaces where the full number is not needed.
6.3. In case of a security breach, we notify the competent authority in accordance with Article 25 of the Law, affected venues within 24 hours, and affected individuals by phone or e-mail where required.
7. Cookies
7.1. The website and service pages use necessary cookies and browser local storage (language, basket, guest name in the gallery); the service does not work without them. The analytics cookies of Google Analytics and Microsoft Clarity are enabled only after you click "Accept" in the banner. Clarity records clicks and page scrolling; text you enter is masked. You may withdraw consent by clearing cookies in your browser or by choosing "Necessary only".
8. Amendments to this Policy
8.1. A new edition is published on the website with its number and date; previous editions remain in the archive. If the purposes of processing or the scope of data change, we request new consent.
9. Contacts
ASTRO IT IP
BIN/IIN 980512350459
Republic of Kazakhstan, Astana, Rakymzhan Koshkarbayev Avenue, building 15, office 128
tel. +7 747 353 26 12
WhatsApp +7 706 639 07 37
Telegram @horeca_tech
ANNEX 1. CONSENT TEXTS FOR FORMS AND THE COOKIE BANNER
Each text is shown next to an unticked consent box above the submit button; without a tick the button is inactive. The server stores the date, time and version of the text. Square brackets are filled in with the data of the specific venue or shop.
1.1. Application on luniq.net and demo
☐ I accept the terms of the offer and consent to the processing by ASTRO IT IP (LUNIQ, BIN/IIN 980512350459) of my name, phone, e-mail and venue name, so that I can be contacted and a demo prepared, until the application is answered, including correspondence in WhatsApp and Telegram (cross-border transfer). Privacy Policy: https://luniq.net.
1.2. Menu — ordering, delivery, table booking, review
☐ I agree that "[Venue name]" and its operator LUNIQ (ASTRO IT IP, BIN/IIN 980512350459) may process my name, phone [, delivery address] and order data for its fulfilment, including passing them to the venue via Telegram or WhatsApp (cross-border transfer). LUNIQ does not store this data after it is passed on. Policy: https://luniq.net.
For a review, an additional separate box: ☐ My review and name may be published on the venue's page. This box is needed only where reviews are published publicly (Article 7 of the Law).
1.3. Flow — flower order (notice, no tick)
The order will be sent from your WhatsApp to the shop "[Shop name]". LUNIQ does not receive or store your data; the seller and recipient of the data is the shop. Policy: https://luniq.net.
1.4. Reserved — booking
☐ I have read the booking and deposit refund rules of "[Complex name]" and agree that the complex and its operator LUNIQ (ASTRO IT IP, BIN/IIN 980512350459) may process my name, phone and booking data, including passing them to the administrators in Telegram and sending me a confirmation in WhatsApp (cross-border transfer). LUNIQ does not store this data after it is passed on. Policy: https://luniq.net.
1.5. Event — guest entry to the gallery (before the first upload)
☐ I agree to the gallery rules (https://luniq.net) and to the processing by ASTRO IT IP (LUNIQ, BIN/IIN 980512350459) of my name, photos and videos that I upload. They will be visible to the organiser and to guests who have the album link for 7 calendar days from the event date; then the archive is handed to the organiser and the files are deleted from LUNIQ's servers in Frankfurt (Germany). I upload only photos from this event, and the people in them do not object. Any file can be removed on request.
Text on the Event QR card (small print): "Photos and videos will go into the private event album. Do not want to be in the album? Press "Delete my photo" or write to hiastroit@gmail.com."
1.6. Cookie banner
We use necessary cookies to operate the website. With your consent we will also enable Google Analytics and Microsoft Clarity to improve the website; these services are located outside Kazakhstan. More: https://luniq.net. Buttons: "Accept" · "Necessary only".