01General provisions
This policy describes what personal data the Saparga service (saparga.kz) collects, why, and how it is stored and protected. The personal data operator is “One Day Labs” LLP. Data is processed in accordance with the legislation of the Republic of Kazakhstan on personal data and its protection.
This is a short summary. The full terms are in the Personal Data Privacy Policy (saparga.kz/personal-data).
02What data we collect
- each passenger’s surname and first name;
- each passenger’s IIN; for foreign citizens without an IIN — passport number and citizenship;
- each passenger’s sex — read from the IIN (for a passport, chosen by the buyer); used for the driver’s passenger list and seating;
- the buyer’s email and phone number;
- trip data: route, date, seat, booking code, boarding mark;
- payment data: amount, status, payment number in the payment system. Bank card details are entered on the bank’s page and are not passed to Saparga;
- technical data: the chosen site language (cookie); for staff — IP address and browser when signing in.
03Why we use it
- to issue and send the e-ticket;
- boarding: the driver checks the ticket and sees the passenger’s name and seat;
- refunds and notices about trip changes or cancellations;
- sales records and compliance with the law;
- protection against fraud and fake tickets.
04Consent
When booking, the buyer ticks a box consenting to the collection and processing of personal data. We store the date of consent and the policy version it was given for.
By entering other passengers’ details, the buyer confirms that they have obtained those persons’ consent to the transfer and processing of their data for issuing tickets.
05Where and how data is stored
- Data is stored on servers located in the Republic of Kazakhstan (hosting provider Hoster.kz).
- IINs and passport numbers are stored encrypted; staff see only the last 4 characters.
- Only staff with personal accounts can access data, and only within their role (a driver sees only the passengers of their own trips).
- The site uses a secure connection (HTTPS). Important staff actions are logged.
06Who receives the data
- The carrier — data needed for boarding and the trip: passenger’s name, sex, seat, booking code and the last 4 characters of the document.
- The bank / payment system — amount and order number, and the buyer’s email and phone — for payment and refunds.
- The email service of the hosting provider Hoster.kz — to deliver ticket emails.
- State authorities — only in cases provided by law.
We do not sell personal data or share it for advertising.
07Retention periods
Personal data is kept for as long as needed for the purposes of processing and as required by the legislation of the Republic of Kazakhstan.
08Your rights
You may find out what data we hold about you, ask for it to be corrected, withdraw your consent and ask for the data to be deleted — within the limits set by the legislation of the Republic of Kazakhstan. To do so, contact us using the details below.
09Cookies
The site uses only necessary cookies: the chosen language and staff sign-in. There are no advertising or analytics cookies.
10Changes to this policy
A new version is published on this page. For each order we keep the policy version the buyer agreed to.