Privacy Policy
of the qonaq.travel website
Effective date: 01 June 2026.
1. General provisions
This Privacy Policy (the “Policy”) governs the collection, processing, storage and protection of personal data of users of the qonaq.travel online resource (the “Platform”).
Personal data controller: Qaz Nomad Digital LLP, BIN 260240029522, 5 Mustai Karim Street, Taugul neighbourhood, Auezov District, Almaty, postal code 050052, Republic of Kazakhstan (the “Company”, “we”).
This Policy has been prepared in accordance with the Law of the Republic of Kazakhstan No. 94-V of 21 May 2013 “On Personal Data and Their Protection” and other regulatory legal acts of Kazakhstan.
By using the Platform, you confirm your agreement to this Policy. If you do not agree to its terms, please refrain from using the Platform.
2. What data we collect
- Data you provide directly: first and last name; mobile phone number; email address; payment details (processed exclusively by the payment gateway; the Company does not store bank card details); check-in/check-out dates and other booking parameters.
- Data collected automatically: IP address and device type; browser and operating system data; cookies and data about website activity (pages, session duration, referral source); geolocation (only with the user's explicit permission).
- Data from third parties: when signing in through social networks or third-party authentication services, to the extent you have authorised with the relevant provider.
3. Purposes of personal data processing
The Company processes your personal data exclusively for the following purposes:
- Performance of the booking agreement: creating and confirming bookings, sending vouchers and notifications.
- Communication: responding to enquiries and complaints, providing support.
- Sharing data with the partner hotel: to the extent necessary for your check-in (full name and contact phone number).
- Service improvement: analysing Platform use and fixing technical errors.
- Compliance with Kazakhstan's legislation: tax and accounting records, responding to requests from authorised bodies.
- Marketing communications: sending special offers and news only with your separate consent, which you may withdraw at any time.
4. Legal grounds for processing
The Company does not use personal data for purposes not specified in this Policy without obtaining additional consent.
Personal data is processed on the following grounds:
- Performance of a contract to which the user is a party.
- User consent (for marketing communications and optional features).
- Fulfilment of obligations imposed by Kazakhstan's legislation (tax, accounting and other legislation).
5. Sharing data with third parties
The Company does not sell or share your personal data with third parties for commercial purposes. Data may be shared only in the following cases:
- Partner accommodation providers: the guest's full name and contact phone number are shared with the hotel or other accommodation provider solely to arrange your check-in.
- Payment gateway: payment processing data is sent to the payment operator (FreedomPay / Freedom Bank Kazakhstan) in encrypted form. The Company does not store bank card details.
- Government bodies: upon an official request in cases provided for by Kazakhstan's legislation.
- Technical providers: cloud services, hosting and analytics, only to the extent necessary for the Platform to operate and subject to the provider's confidentiality obligations.
6. Data storage and protection
Personal data is stored on servers located in accordance with Kazakhstan's legal requirements. The Company applies technical and organisational safeguards, including:
- Encryption of data in transit (HTTPS/TLS protocol).
- Restricting employees' access rights to personal data.
- Regular backups.
- Monitoring unauthorised access.
- Retention period: data is retained for the lifetime of your account and for 5 years after its deletion, to the extent necessary to meet tax and other legal obligations. After this period, the data is destroyed.
7. Cookies
The Platform uses cookies for proper website operation, analytics and improvement of the user experience. You can disable cookies in your browser settings, but this may affect the Platform's functionality. By using the Platform, you agree to the use of cookies in accordance with this Policy.
8. Your rights
Under Kazakhstan's Law “On Personal Data and Their Protection”, you have the right to:
- Obtain information about which of your data is stored and how it is processed.
- Request correction of inaccurate or incomplete data.
- Request deletion of data (the “right to be forgotten”) if there are no legal grounds for its continued retention.
- Withdraw consent to data processing for marketing purposes at any time.
- Lodge a complaint with Kazakhstan's authorised personal data protection body.
- To exercise your rights, send a request to privacy@qonaq.travel. Requests are reviewed within 15 business days.
9. Children's data
The Platform is not intended for persons under 18. The Company does not collect minors' personal data. If you become aware that a child has provided us with their data, please notify us immediately at privacy@qonaq.travel.
10. Changes to the Policy
The Company may amend this Policy. The current version is always published at qonaq.travel/privacy. We will notify you of material changes by email or a website notice before they take effect.
11. Contact information
For all questions concerning personal data processing, please contact:
Qaz Nomad Digital LLP
Email: privacy@qonaq.travel
Website: qonaq.travel
Last updated: 01 June 2026.