Privacy policy

1. Scope

This policy applies to the goodlabs.kz website and to software published by Goodlabs, including browser extensions and other applications. Each product is listed in the Products section together with the disclosures specific to it. Software not listed there is not covered by this policy.

Goodlabs is operated by Dilshat Rakhimov in Almaty, Kazakhstan, who determines the purposes for which the personal information described here is processed and is the point of contact for any question concerning it.

Where a product entry states something different from this Overview, the product entry governs for that product.

This policy is effective from 7 September 2026 and replaces any earlier version.

2. Information collected

What is collected depends on which Goodlabs service is used.

• Website. Server access logs and website analytics, described in the goodlabs.kz section.
• Software products. Each product states what it processes and where that data is held. Several Goodlabs products, Pulsecheck among them, process data solely on the user's own device and transmit nothing to Goodlabs.
• Correspondence. The contact details and message content a person sends to Goodlabs by email or messaging.

Goodlabs does not operate user accounts on this website, does not require registration to read it, and does not collect payment card information through it.

3. How information is used

Information is used to:

• operate, maintain and secure the website and the products;
• respond to enquiries and provide consulting services that are requested;
• measure aggregate website traffic in order to decide what to publish;
• comply with legal obligations.

Information is not used for advertising, for building profiles of individuals, or for automated decision-making producing legal effects.

4. Bases for processing

Personal information is processed on the following bases, as applicable under the law of the Republic of Kazakhstan and, where it applies to the person concerned, the General Data Protection Regulation:

• Legitimate interests, for server logging, site security and aggregate measurement of website traffic. That interest is weighed against the visitor's by loading analytics only after a first interaction and by operating no advertising or cross-site tag.
• Performance of a contract, or steps taken at a person's request, for correspondence and the provision of consulting services.
• Compliance with a legal obligation, where disclosure is required by law.

Goodlabs does not operate a cookie consent banner and does not rely on consent as a basis for website analytics. A visitor who does not wish to be measured may block googletagmanager.com, and every page functions normally without it.

5. Disclosure

Goodlabs does not sell personal information and does not disclose it to data brokers.

Personal information is disclosed only in the following circumstances:

• to the service providers that operate parts of the website, identified in the goodlabs.kz section, and only to the extent required for their function;
• where disclosure is required by applicable law or by lawful request from a competent authority;
• to a successor in the event of a transfer of the business, subject to the terms of this policy.

Products that process data solely on a user's own device transmit nothing to Goodlabs. Goodlabs therefore holds nothing from them that could be disclosed to anyone.

The service providers identified in this policy are established outside Kazakhstan. Use of the website accordingly involves transfer of the information described to those providers in the jurisdictions in which they operate.

6. Retention

• Server access logs are retained for operational and security diagnostics and are rotated thereafter.
• Website analytics data is held by Google and retained for the period configured in Google Analytics.
• Correspondence is retained while an enquiry or engagement is open, and afterwards for as long as records are required, and is deleted on request.
• Data held by a product on a user's own device is retained and deleted by that user. Goodlabs has no access to it and cannot delete it.

7. Security

The website is served over HTTPS and requests made over HTTP are redirected to it. Access to the systems on which the information described here is held is restricted to Goodlabs.

No method of transmission or storage is entirely secure, and Goodlabs does not represent that it is.

8. Children

Goodlabs services are not directed to children, and Goodlabs does not knowingly collect personal information from them. Where such information has been provided, it will be deleted on notice to the contact address below.

9. Changes to this policy

Goodlabs may amend this policy. The effective date stated in section 1 records the most recent amendment. Where an amendment concerns a particular product, it is recorded in that product's entry, which also states the version of the product to which the entry applies.