QazBus · Legal
Privacy Policy
This page explains what data the qazbus.kz website and the QazBus apps for passengers and for drivers collect, why we need it, who receives it, and how to erase it. We describe what we actually do — and we rewrite this text whenever the product changes.
What we collect
Everything listed below serves one job: getting a person to their destination and settling payment for the trip. We do not collect data «for later».
Fellow passengers' data
When buying seats for other people, the purchaser enters their names and phone numbers. We assume they asked those people first — and we mean it: this is other people's data. We use it only for boarding and for contact about that trip, and at the request of any passenger we will remove their data from the booking.
What we do not collect
We hold none, in any form. Card payment is not connected yet; when it is, the card number will be entered on the payment provider's side and will never reach us. Currently, trips are paid by transfer to Kaspi — the person makes the transfer themselves, and their account details do not reach us.
Neither the passenger app nor the website asks where you are. The pickup point is chosen by the person on the map — that point is what we store, not «where the phone was».
They are not needed for travel within Kazakhstan, and we do not ask for them.
There is not a single one on the site: no Google Analytics, no Yandex Metrica, no advertising pixels. Nobody follows you here.
Who receives data
Nobody except those without whom the trip cannot happen. We do not sell data and do not pass it to advertisers, data brokers or «marketing partners» — we have no such arrangement with anyone.
Phone number and the code text — otherwise the SMS cannot arrive.
Phone number: the code arrives as a call when the operator does not pass SMS through.
Device address and notification text — only for push in the app. Google's servers are located outside Kazakhstan.
The device's network address: when the app or the website shows a map (on the website, when choosing the pickup point), the device contacts the map server directly. No name, phone number or trip details are sent there.
The passenger list with names and phone numbers — to board people and reach them in case of delay.
Only upon a lawful written demand and only to the extent demanded.
Transfer abroad. Push notifications in the app run through Google Firebase, whose servers are located outside Kazakhstan. By installing the app and enabling notifications you consent to that transfer. Without it, «the bus has departed» simply will not reach you; everything else works without notifications. When a map is shown, the device's network address is also seen by the OpenStreetMap map service, whose servers are likewise located outside Kazakhstan.
How long we keep it
As long as the account exists. Delete it and we delete them.
Five years: that is how long accounting law in the Republic of Kazakhstan requires source documents to be kept. It is the only thing that remains after an account is deleted.
Minutes. A used or expired code is erased.
Not for long — new records push them out. We do not build a profile of a person from them.
Your rights
The Law of the Republic of Kazakhstan «On Personal Data and Its Protection» (No. 94-V of 21 May 2013) grants you rights we are obliged to honour. Write to info@qazbus.kz or call +7 707 432 22 42; we answer within ten working days.
We will send a statement for your account.
Name and company details can be edited in the app; anything else on request.
After withdrawal we stop processing, except where the law directly requires otherwise.
In the app or on request — see below for how.
To us first — we answer every request; then to the authorised body for personal data protection of the Republic of Kazakhstan.
How to delete your account
In the QazBus app: profile → «Delete account». You confirm with a word, because the action cannot be undone. Deletion happens immediately — no need to wait for support.
If the app is not at hand, write from the phone number on the account to info@qazbus.kz or call +7 707 432 22 42. We will verify the request comes from the number's owner and delete the account within ten working days.
What is deleted: phone number, name, password, company details, notification device addresses, and any bookings and orders without an issued invoice — together with their passenger lists.
What remains, and why: a booking covered by an issued invoice: accounting source documents must be kept for five years. Everything personal is stripped from it — pickup address, coordinates, fellow passengers' names and phones; the date, destination and amount remain. A driver's record in the carrier's fleet stays, but anonymised — the trips assigned to the driver still refer to it.
How we protect data
The website and the app talk to the server only over an encrypted connection. Passwords are stored as irreversible hashes. Passenger data is accessible to the dispatcher and to the driver of the trip the seat was bought for — and to nobody else. Every staff action on another person's data is written to an audit log.
Children
We do not create separate accounts for children: an adult places the order. If the passenger list includes children, their names are entered by the adult purchaser, and parental consent is that adult's responsibility. School trips are ordered by the school or the parents' committee, and the contract is with them.
Changes
When the product changes, so does this text: the date at the top shows the version. We will announce material changes — a new recipient of data, for instance — in the app in advance.
Contact us
For any question about your data:
- QAZAQINVEST LLP, БИН/BIN 170540022913
- Email: info@qazbus.kz
- Phone and WhatsApp: +7 707 432 22 42