Privacy Policy

1. Who we are

Tripvanto Tech Ltd. (“Tripvanto”, “we”, “us”) is a Private Company registered in the Astana International Financial Centre (AIFC). For personal data processed through tripvanto.com and communications sent to tripvanto@gmail.com, Tripvanto Tech Ltd. acts as the Data Controller, meaning that Tripvanto determines the purposes and means of processing such personal data.

2. Scope

This Privacy Policy applies to visitors of tripvanto.com and to people who choose to contact Tripvanto by email about the company, product, a demo, cooperation or other business matters. Client deployments and visitor-facing product experiences may be governed by separate contracts and privacy notices.

3. Legal framework

We process personal data in accordance with the AIFC Data Protection Regulations and applicable Rules, and, where relevant, mandatory laws of the Republic of Kazakhstan and other applicable jurisdictions.

4. Personal data we may process

When you visit the website, technical information may be processed, such as IP address, browser and device information, language, timestamps, referral information and security logs. Cookies and analytics data are processed only as described in the Cookie Policy and according to your choices where consent is required. If you contact us by email, we may process your name, email address, organisation details, the content of your message, attachments and subsequent business correspondence that you voluntarily provide.

5. Purposes and legal bases

We use personal data to operate and secure the website; respond to emails and arrange requested business discussions or demonstrations; maintain relevant business correspondence; measure website performance where analytics is enabled and valid consent is required; comply with legal obligations; and establish, exercise or defend legal rights. Depending on the activity, processing may be based on steps requested by you, legitimate interests, consent or a legal obligation.

6. Recipients and service providers

Personal data may be accessible to authorised Tripvanto personnel and to service providers necessary to operate the website and business communications, including website hosting and security providers and Google as the provider of the current Gmail mailbox. Service providers are permitted to process data only for relevant purposes and subject to applicable legal and security requirements.

7. International processing and transfers

Some service providers may process personal data in jurisdictions outside Kazakhstan or outside the AIFC. Where applicable, Tripvanto applies the transfer requirements and safeguards required by the AIFC Data Protection Regulations and other mandatory applicable law.

8. Retention

We keep personal data only for as long as reasonably necessary for the purpose for which it was processed, including responding to correspondence, maintaining relevant business records, complying with legal obligations, resolving disputes and protecting the website. Data is deleted or anonymised when it is no longer required, subject to lawful retention requirements.

9. Security

We use proportionate technical and organisational measures designed to protect personal data against unauthorised access, loss, alteration, disclosure and unlawful processing. No internet service can guarantee absolute security.

10. Your rights

Subject to applicable law, you may request information about the processing of your personal data, access to your data, correction, erasure or blocking where applicable, and you may object to certain processing. Where processing is based on consent, you may withdraw that consent. You may also object to direct marketing. You can submit a privacy request using the contact details below and may lodge a complaint with the AIFC Commissioner of Data Protection or another competent authority where applicable.

11. Cookies

We use cookies and similar technologies as described in the Cookie Policy. Optional analytics technologies, if enabled, are used only according to the applicable consent choices. Cookie preferences can be changed through Cookie Settings on the website.

12. Children

The public Tripvanto website is a business website and is not directed to children. Visitor-facing products used by museums or attractions may require separate age-appropriate privacy arrangements.

13. Changes and contact

We may update this Privacy Policy when legal requirements, technology or the website change. The current effective date and last-updated date will be shown on this page.

Privacy contact: tripvanto@gmail.com

Registered office: 010000, Republic of Kazakhstan, Astana, Esil District, 8/2 Turkistan Street.