Almaty Nomads Group LLP | Website: almatynomads.com | Version dated 2 July 2026




1. General Provisions
Almaty Nomads Group LLP (“Almaty Nomads”, the “Company”, “we”, “us” or “our”) respects the privacy of website visitors, clients and users and is committed to protecting personal data.
This Privacy Policy explains what personal data we may collect, why we use it, when it may be shared, how we protect it and what rights users have in relation to their personal data.
This Policy applies to the website almatynomads.com, website contact forms, communications through messengers and social media, e-mail correspondence, and any processing of personal data connected with booking or providing tourism services.
By submitting a request through the website, messengers, social media or e-mail, confirming a tour booking, or making a prepayment to reserve a tour, the user confirms that they have read this Privacy Policy and agree to the processing of their personal data to the extent necessary for the organization and provision of tourism services.

2. Key Terms
For the purposes of this Policy, the following terms are used:

• Personal data means any information relating to an identified or identifiable individual.
• User means any person visiting the website, submitting a request, contacting the Company or using Almaty Nomads services.
• Client means a user who requests, books or receives a tour, transfer, guided experience or other travel-related service.
• Processing means any action performed with personal data, including collection, recording, storage, updating, use, transfer, anonymization, blocking and deletion.
• Website means the Almaty Nomads website located at almatynomads.com, including its pages, request forms and related functions.

3. Personal Data We Collect
We collect only the data reasonably required to communicate with the user, process requests, reserve tours and provide tourism services.
Depending on the nature of the request or booking, we may process the following data:

• first name and last name;
• phone number;
• e-mail address;
• citizenship or country of residence, when required for organizing a service;
• planned tour or travel date and time;
• number of travelers and group composition;
• preferred language and tour preferences;
• meeting point, hotel name or transfer address, if provided by the client;
• special requests, including dietary restrictions, physical activity limitations or other information voluntarily provided by the client for safe and high-quality tour organization;
• messages and correspondence sent through the website, e-mail, WhatsApp, Telegram, Instagram, Facebook Messenger or other communication channels;
• technical data automatically collected when visiting the website.

We do not request excessive personal data. Passport details, date of birth, identification numbers or other sensitive information may be requested only where objectively necessary for a specific service, legal requirement, permit, access to a restricted area, insurance or another travel-related procedure.

4. Technical Data and Cookies
When a user visits the website, technical information may be collected automatically, including IP address, browser type, operating system, date and time of visit, viewed pages, referral source and other standard web analytics data.
This information is used in an aggregated form to analyze website performance, improve the website structure and user experience, ensure security and prevent improper use.
The website may use cookies and similar technologies. Cookies help the website function properly, remember user preferences, analyze traffic and improve the overall user experience.
Users may restrict or disable cookies through their browser settings. Some website functions may not work properly if cookies are disabled.

5. Purposes of Processing Personal Data
We process personal data for the following purposes:

• receiving and processing requests for tours, transfers, excursions and other tourism services;
• contacting the user to clarify travel dates, itinerary details, number of travelers, timing and other booking conditions;
• preparing individual offers, itineraries or tour programs;
• confirming bookings and organizing the provision of tourism services;
• performing contractual and pre-contractual obligations toward the client;
• coordinating guides, drivers, transport providers, accommodation providers and other partners involved in service delivery;
• ensuring the client’s safety during the tour, including consideration of the route, weather conditions, physical activity level and road conditions;
• providing customer support before, during and after the tour;
• informing clients about important changes related to booking, itinerary, weather, safety or organizational details;
• improving service quality, analyzing feedback and developing new tourism products;
• maintaining internal records and complying with applicable legal, tax, accounting and reporting obligations under the laws of the Republic of Kazakhstan.

6. Legal Basis for Processing
Personal data is processed on the basis of the user’s consent, expressed by submitting a request, sending a message, contacting the Company, confirming a booking or making a prepayment to reserve a tour.
Processing may also be carried out to perform a contract or pre-contractual steps requested by the user, to comply with legal obligations, and to protect the legitimate interests of the Company, the client or third parties.
If a user provides personal data of other tour participants, the user confirms that they are authorized to provide such data and that the relevant individuals have been informed that their data will be used for organizing tourism services.

7. Sharing Personal Data with Third Parties
We do not sell users’ personal data to third parties.
Personal data may be shared with third parties only to the extent necessary for the purposes described in this Policy and only where such sharing is connected with the organization or provision of tourism services.
Such third parties may include:

• licensed or contracted guides;
• drivers and transport companies;
• hotels, guest houses, yurt camps and other accommodation providers;
• national parks, protected area administrations, visitor sites and partners enabling route access;
• partners providing meals, activities, instructors, horse-riding support or other tourism services;
• insurance companies, only if such service is ordered or requested by the client;
• government authorities, courts, law enforcement or regulatory bodies, where required by the laws of the Republic of Kazakhstan;
• technical service providers supporting website operation, communication, hosting, analytics and information systems.

Data is shared only in the necessary scope and only for purposes connected with the user’s request, booking or service provision.

8. International Data Transfers
Because Almaty Nomads works with international travelers and may use international communication and technology services, certain data may be transferred to or accessed from outside the Republic of Kazakhstan when necessary for communication, booking, tour organization or use of relevant services.
We take reasonable steps to ensure that such transfers are carried out in accordance with the laws of the Republic of Kazakhstan and accepted privacy principles.

9. Data Retention
We retain personal data for as long as necessary to achieve the purposes for which it was collected, including request processing, tour organization, customer support, performance of contractual obligations, and legal, tax, accounting or reporting requirements.
After the purposes of processing have been achieved, personal data may be deleted, anonymized or retained only to the extent required by applicable law, protection of the Company’s rights and legitimate interests, or handling of possible claims.

10. Data Protection
We take reasonable organizational and technical measures to protect personal data against unauthorized access, loss, alteration, disclosure or destruction.
Access to personal data is limited to employees, contractors or partners who need such information to perform their duties and provide the relevant service to the client.
Despite the measures we take, data transmission over the internet cannot be guaranteed to be absolutely secure. Users are responsible for protecting their own devices, accounts, messengers and e-mail.

11. User Rights
Users have the right to:

• request information about what personal data is processed by the Company;
• request correction, update or supplementation of personal data;
• withdraw consent to personal data processing, unless further processing is required by law or contractual obligations;
• request deletion of personal data where continued retention is no longer required for processing purposes or legal compliance;
• opt out of marketing and informational messages;
• submit questions, requests or complaints regarding personal data processing.

To exercise these rights, users may contact us by e-mail at: almatynomadss@gmail.com.

12. Communications and Informational Messages
We may use contact details provided by the user to communicate about requests, bookings, tours, itinerary changes, safety matters, organizational details and feedback.
With the user’s consent, we may also send information about new tours, seasonal routes, special offers and Almaty Nomads news. The user may opt out of such messages by sending a request to us.
The Company may communicate with users via email, telephone, WhatsApp, Instagram, Telegram and other communication channels provided by the user for booking or enquiries. Such channels are used solely for fulfilling bookings, organizing tours, providing service information and other purposes described in this Privacy Policy.

13.Photo and Video Recording
During tours and excursions the Company may take photographs and videos for documenting the experience, improving services and preparing promotional materials. Images or videos identifying a user will only be used with the user’s consent or another lawful basis under applicable law. Users who do not wish to appear may notify the Company before or during the tour.

14. Personal Data of Minors
Our services may be booked for family trips and travel with children. Personal data of minors is processed only to the extent necessary for organizing and safely providing tourism services, and such data is provided by parents, legal representatives or the responsible person of the group.
If we become aware that personal data of a minor has been provided without appropriate consent, we will take reasonable steps to delete such data, unless retention is required by law or necessary to protect the interests of the tour participant.

15. Third-Party Websites and Social Media
The website may contain links to Almaty Nomads pages on social media, messengers, map services, review platforms or partner websites. We do not control the privacy practices of third-party websites or services.
Users should review the privacy rules of the relevant platforms, including social networks, messengers, search engines, map services and other third-party resources.

16. Changes to This Policy
We may update this Privacy Policy from time to time. A new version becomes effective once published on the website, unless otherwise stated in the Policy.
Users are responsible for reviewing the current version of this Policy. Continued use of the website, submission of a request, confirmation of a booking or making a prepayment after an updated version is published means that the user agrees to the changes.

17. Contacts
For any questions related to this Policy, personal data processing, user rights or complaints, users may contact Almaty Nomads:

• Company: Almaty Nomads Group LLP
• Website: almatynomads.com
• E-mail: almatynomadss@gmail.com
• Location: Almaty, Republic of Kazakhstan.

We will review the request within a reasonable time and respond in accordance with the applicable laws of the Republic of Kazakhstan.