Privacy Policy

This policy describes what personal data we collect, for what purpose we use it and how we ensure its protection. The policy applies to all clients who have purchased travel services through MUSA Travel LLC.

1. General Provisions

1.1. We adhere to the requirements of the Law of the Republic of Kazakhstan "On Personal Data and Their Protection" dated May 21, 2013 No. 94-V. The processing of personal data is carried out on the basis of a concluded agreement and the voluntary consent of the data subject.

1.2. By accepting the terms of the agreement, the client agrees to this privacy policy.

2. Composition of personal data

2.1. We process the following information: last name, first name, middle name, IIN, date of birth, gender, identity card or passport details, citizenship, registration and actual residence address, telephone number, email address, passport expiration date and spelling of name in Latin characters, as well as other information necessary for visa processing, booking, insurance and provision of tourist services.

2.2. When using the site, technical data such as IP address, browser information, cookies and site interaction history may be automatically collected.

3. Data Processing Purposes

3.1. Personal data is used to conclude and execute an agreement, issue a tourist product, book hotels and tickets, issue insurance, obtain visa support, interact with tour operators, carriers, hotels, consulates and other partners.

4. Legal Grounds

4.1. The grounds for data processing are: a concluded agreement with the client, voluntary consent to processing, as well as the requirements of the legislation of the Republic of Kazakhstan.

5. Client rights

5.1. The user has the right to receive information about the purposes and methods of processing their personal data, request access to their data and receive a copy of it, request its correction, updating or deletion, and also revoke consent to processing at any time. If there are grounds provided for by law, the user also has the right to limit the processing of personal data or object to such processing. To exercise these rights, you must send a written request to the contact information specified in this policy.

6. Transfer of data to third parties

6.1. We transfer personal data only to those organizations that participate in the execution of the contract: tour operators, airlines, insurance companies, hotels, host parties and consular offices.

7. Data protection

7.1. We take all reasonable legal, organizational and technical measures to protect personal data from unauthorized access, modification, distribution, deletion or loss.

7.2. Only authorized employees of the company and trusted partners acting within the framework of contractual obligations have access to data.

8. Storage period

8.1. Personal data is stored until the processing purposes are achieved, or until consent is revoked, unless otherwise provided by law. Upon completion of processing, the data is deleted or anonymized.

9. Use of cookies

9.1. Our website and application may use cookies for correct operation, analytics and improving the user experience.

10. Policy update

10.1. We have the right to make changes to this Policy. The current version is always available upon request or on the website. Using our services after changing the terms means agreeing to the new version.

11. Storage and Security of Personal Data

11.1 Personal data is stored on secure servers located on the territory of the Republic of Kazakhstan, in compliance with the requirements of the law. The data is stored for the entire duration of the contractual relationship with the client or until the processing purposes are achieved, after which it is subject to deletion or depersonalization, except in cases where longer storage is required by law (e.g. for accounting or tax purposes, security and fraud prevention).

11.2 The Company is not liable for the actions of third parties to whom the Client independently transfers their personal data (including, but not limited to, data transfer in instant messengers, social networks, etc.), as well as for damage caused as a result of threats to information and cybersecurity beyond the control of the company.

12. Contact details

12.1. MUSA Travel LLP BIN: 250340008511 Legal address: Almaty, Tausamaly microdistrict, Drozda street, bldg. 61 E-mail: travel@musa.kz