Privacy Policy

1. General Provisions

The personal data operator is Rent-Trip (hereinafter — the 'Operator', 'we'), engaged in car rental activities in Almaty. This Privacy Policy (hereinafter — the 'Policy') defines the procedure for processing and protecting personal data of individuals (hereinafter — 'Users') who interact with the Operator's website and use its services.

The Policy is developed in accordance with the Law of the Republic of Kazakhstan 'On Personal Data and Their Protection' and other regulatory legal acts of the Republic of Kazakhstan in the field of personal data protection.

By using the Operator's website and/or contacting us through the specified communication channels, the User confirms that they have read the terms of this Policy and express consent to the processing of their personal data under the conditions set forth herein. If the User does not agree with the terms of the Policy, they should refrain from using the website and contacting the Operator.

2. Terms and Definitions

The following basic concepts are used in this Policy:

• Personal Data — information relating to a specific or identifiable personal data subject, recorded on electronic, paper, and/or other tangible media.
• Processing of personal data — actions aimed at the collection, recording, systematization, accumulation, storage, modification, use, transfer, anonymization, and destruction of personal data.
• Operator — Rent-Trip, which collects, processes, and protects Users' personal data.
• User — an individual (personal data subject) visiting the Operator's website and/or requesting car rental services.
• Cookie — a small piece of data stored by a website in the User's browser to ensure the site's operation and collect technical information.

3. What Data We Collect

Important: the Operator's website does not contain any forms for entering personal data (name, phone number, email are not requested on the website). Personal data is received by the Operator only when the User voluntarily contacts them via available communication channels.

3.1. Voluntarily provided data

When contacting us via WhatsApp, by phone, or by email, the User may provide:

• a name or how they wish to be addressed;
• a contact phone number;
• other information that the User voluntarily shares during communication (desired car, rental terms and duration).

3.2. Technical data

When visiting the website, anonymized technical data may be automatically collected:

• IP address of the device;
• browser type and version, operating system;
• cookies and data about actions on the site (pages viewed, time and date of visit);
• referral source to the site.

The specified technical data is used exclusively in anonymized form to ensure the operation of the site and its analytics.

4. Purposes of Data Processing

The Operator processes Users' personal data for the following purposes:

• processing and supporting the car rental service;
• feedback with the User, responding to inquiries, consultations, and coordination of rental terms;
• improving the quality of service and support;
• collecting anonymized statistics and analytics of website traffic;
• ensuring the functionality and security of the website.

The Operator does not use Users' personal data for purposes incompatible with those listed above.

5. Legal Grounds for Processing

Personal data processing is carried out on the following legal grounds:

• consent of the personal data subject, expressed by voluntarily contacting the Operator and using the website;
• necessity to perform a contract (actual car rental relationship) to which the User is a party, or to take actions at the User's request prior to entering into a contract;
• fulfillment of obligations imposed on the Operator by the legislation of the Republic of Kazakhstan.

Processing is carried out to the extent necessary and sufficient to achieve the stated purposes.

6. Cookies and Analytics

The Operator's website uses cookies cookie — small text files that are stored in the User's browser. Cookies help ensure the website functions correctly, remember the User's preferences, and collect anonymized visit statistics.

To analyze traffic and improve the website, third-party web analytics services may be used, which process anonymized data about Users' actions.

6.1. How to disable cookies

The User has the right to refuse the use of cookies at any time by changing their browser settings:

• in most browsers, cookie management is available in the 'Settings' → 'Privacy and Security' section;
• you can completely block cookies, delete already saved files, or set up a permission request for each site.

Please note that disabling cookies may affect the proper functioning of certain website features.

7. Transfer of Data to Third Parties

Operator does not sell or transfer Users' personal data to third parties for marketing purposes.

Transfer of personal data to third parties is possible only in the following cases:

• when necessary to fulfill the rental service — for example, issuing an insurance policy (to insurance companies) to the extent required to provide the service;
• upon request from state authorities of the Republic of Kazakhstan in cases and in the manner prescribed by law;
• with the direct consent of the User for such transfer.

In all cases, transfer is carried out in compliance with personal data protection requirements.

8. Data Retention Periods

The Operator stores Users' personal data for the period necessary to achieve the processing purposes specified in this Policy, namely:

• for the duration of the rental service and the period of related relationships;
• for the period established by the legislation of the Republic of Kazakhstan for storing relevant information;
• until the User withdraws consent to the processing of personal data, unless otherwise provided by law.

Upon achievement of the processing purposes or expiration of storage periods, personal data shall be destroyed or anonymized.

9. Rights of the Personal Data Subject

In accordance with the legislation of the Republic of Kazakhstan, the User as a personal data subject has the right to:

• receive information about the fact, purposes and conditions of processing their personal data;
• request changes and additions to their personal data if it is incomplete or inaccurate;
• request deletion (blocking) of their personal data if it is processed in violation of legal requirements;
• withdraw consent to the processing of personal data at any time;
• appeal the actions or inaction of the Operator to the authorized body or in court.

To exercise their rights, the User may send a request to the Operator by email info@rent-trip.kz or by phone +7 (702) 383 68 57. The Operator reviews the request within the timeframes established by the legislation of the Republic of Kazakhstan.

10. Data Protection

The Operator takes necessary legal, organizational and technical measures to protect Users' personal data from unlawful or accidental access, destruction, alteration, blocking, copying, distribution, as well as from other unlawful actions.

Among the measures applied:

• limiting the circle of persons having access to personal data and defining their powers;
• use of secure communication channels and information security tools;
• monitoring compliance with data processing and storage requirements;
• timely detection and prevention of unauthorized access incidents.

Despite the measures taken, the Operator cannot guarantee absolute security of data transmission over the Internet; the User is advised to exercise caution when transmitting confidential information.

11. Policy Changes and Contacts

The Operator has the right to make changes to this Policy. The current version of the Policy is always posted on this page of the website with the effective date indicated. Continued use of the website after changes are made constitutes the User's acceptance of the updated version.

For all questions related to the processing of personal data and this Policy, you can contact the Operator:

• Operator: Rent-Trip, Almaty, Republic of Kazakhstan;
• Email: info@rent-trip.kz;
• Phone: +7 (702) 383 68 57;
• WhatsApp: write to WhatsApp.

Effective date of this Policy — January 1, 2026.