Privacy Policy

1. Operator and Contact Details

Owner and operator of personal data: Limited Liability Partnership “ICBP” (LLP “ICBP”), BIN 260840025274, Republic of Kazakhstan. Public legal address: Republic of Kazakhstan, Almaty, Auezov District, 11V Utegen Batyr St., Apt. 738.

Contact for personal data matters: info@bslimousine.kz. Support phone: +7 702 910 1628. Telegram: @bslimousine. Support is available 24/⁠7.

This Policy applies to the website https://bslimousine.kz/, forms, checkout, communications, orders accessed through a secure link and related ICBP systems.

2. Personal Data We Process

ICBP may process:

• the name and contact details of a customer, passenger or representative of an organisation;
• route, addresses, date, time, flight, vehicle class, passenger details, luggage and special requests;
• the minimum information required regarding assistance, child seats and other safety-related conditions;
• price, currency, payment status, order number and payment transaction identifiers; full card details are not received by ICBP systems;
• enquiries, feedback, complaints and information relating to cancellations, refunds and incidents;
• IP address, device, browser, language, session, security logs and cookies within the relevant technical systems;
• the fact that separate consents were accepted and user actions at checkout recorded when the form was submitted.

ICBP does not collect excessive information, copies of documents or special categories of personal data without an objective need and a lawful basis.

3. Purposes and Legal Bases

Personal data is required to calculate prices, create and perform bookings, appoint a carrier, communicate with customers, process payments, provide fiscal and other mandatory documents, issue refunds, provide support, maintain safety, prevent fraud, handle claims and comply with mandatory record-keeping requirements.

The legal bases include entering into and performing a contract, compliance with legal requirements, protection of life and health where provided by law, and verifiable consent of the data subject where consent is required.

Marketing is carried out only with separate voluntary consent. Refusing marketing or optional cookies does not prevent the basic booking process.

4. Consent and Data Relating to Another Passenger

Where processing requires consent, it is provided under the separate Consent to the Collection and Processing of Personal Data. The consent checkbox is separate from acceptance of the Public Offer, is not pre-selected and does not include marketing consent.

The system links the fact of consent to the name of the data subject entered in the form and to the order, and stores the value of the separate checkbox with the order. The order also contains the applicable locale and timestamps, while technical logs may contain request information. The text and details of the current versions of the documents are available on the website.

A customer who provides data relating to another passenger confirms a lawful basis for doing so and must provide that passenger with this Policy. Where the passenger must provide consent directly, the customer must obtain it before transferring the data.

5. Recipients, Cross-Border Transfers and Localisation

To the extent necessary, personal data may be received by the appointed carrier and driver, the bank and payment provider, Visa, Mastercard, American Express, UnionPay, Apple Pay, Google Pay, providers of hosting, maps, communications, support, analytics, security and electronic receipts, and public authorities acting under a lawful request.

ICBP does not sell personal data. Each recipient receives only the information necessary for its function. Full card details are processed by the bank, PSP or wallet and are not received by ICBP systems.

For a cross-border transfer, the data subject is informed of the purpose, categories of data and recipients, and of the relevant countries or groups of countries; consent or another lawful basis provided by law is used. The primary database containing personal data of citizens of Kazakhstan is located in Kazakhstan to the extent required by law.

6. Retention and Security

Personal data is retained no longer than necessary for the booking, mandatory record keeping, resolution of disputes and protection of lawful claims. After the applicable retention period ends, the data is deleted, anonymised or placed in a protected archive where archival retention is legally required.

ICBP applies access controls, secure data transmission, logging, backups, supplier controls and incident response; multi-factor authentication is used where applicable. Payment details are entered in the external payment environment of the bank or provider, and the security standards applicable to those details are determined by that environment.

7. Cookies

The website may use cookies necessary for security, sessions, language and checkout. A user may restrict or delete cookies through browser settings; some website functions may then operate incorrectly.

Analytics services may be connected in accordance with the technical configuration of the website and the terms of the applicable service. The providers used and the parameters transferred to them depend on the page and the relevant technical access conditions.

8. Rights, Requests and Updates

To the extent provided by law, a data subject has the right to obtain information about processing and access to personal data, request correction, blocking or destruction of unlawfully processed data, withdraw consent, opt out of marketing and challenge actions of ICBP.

Requests should be sent to info@bslimousine.kz; assistance with a request is available by phone at +7 702 910 1628 or through Telegram @bslimousine. ICBP may verify the identity of the requester and the authority of a representative. After receiving a withdrawal of consent, ICBP ceases processing within fifteen business days unless continued retention or processing is required by law, or provides a reasoned refusal. Withdrawal does not affect prior lawful processing; certain data may be retained where required by law or where an obligation remains outstanding.

A booking is made by an adult customer. Personal data relating to a minor passenger is processed only to the minimum extent necessary for a safe trip and on an appropriate legal basis.

A new version is published with its date. The fact of accepting separate consents and order-related information is retained in the order record. The data subject may also apply to the competent authority or a court.