1. Data controller
The personal data controller is Asgard Express (the “Company”). Privacy enquiries: asgard-express@proton.me.
2. Data we collect
Name, phone number, preferred contact channel, route cities and points, fare, date and time, booking type, airport selection, request content and technical data required for site operation and security.
3. Processing purposes
Data is used to process requests, contact Users, find a Driver, share necessary trip details, prevent abuse, support Users, protect rights and comply with law. Marketing requires separate consent.
4. Legal basis and consent
Processing is based on recorded User consent, steps requested by the User and applicable Kazakhstan law. Consent is recorded when the form is submitted.
5. Data sharing
Necessary contact and route data may be shared with potential Drivers, communications, hosting and IT providers, advisers and authorities where required by law. Recipients receive only data needed for the stated purpose.
6. Retention and protection
Data is kept only as long as needed for the request, claims and mandatory retention. The Platform applies organizational and technical safeguards. Exact periods must be approved internally before CRM launch.
7. Google Ads API use
The Asgard Express Ads API application is intended to access only advertising data from Google Ads accounts that an authorized Asgard Express administrator explicitly connects through Google OAuth. The integration is used to manage Asgard Express advertising campaigns, obtain performance reports and plan keywords. It does not request travel-service customer data through Google OAuth.
Google Ads data is not sold and is not used to create, distribute or detect non-consensual intimate imagery, including AI-generated imagery. Access can be revoked in the connected Google Account settings. Questions about Google API use can be sent to asgard-express@proton.me.
8. User rights
Users may request access, correction, restriction or deletion, withdraw consent and challenge unlawful processing by contacting asgard-express@proton.me. Identity verification may be required.
9. Cross-border transfer and changes
Depending on the conditions of the selected trip, data may be transferred to a Driver located outside the Republic of Kazakhstan only with an appropriate legal basis and safeguards. Material policy changes are published with a new version date.