Privacy policy
Last updated: 12 October 2026
We collect the minimum data we need to pick you up, drive you and keep in touch. Here is what, why and who we share it with.
1. Who processes your data
The controller (operator) is Ala-Too Digital LLC (TIN 02509202610160), Alamudun District, Chuy Region, Kyrgyz Republic. Data questions: hello@arashantransfer.com.
2. What data
- name;
- phone / WhatsApp;
- email;
- trip date, trip type, number of seats;
- hotel or place of stay (if given), pickup address for a private car, and comment;
- which partner hotel referred you, if you came through a hotel's QR code or link;
- payment status and payment reference.
When you press “Go to payment”, we save the details you entered, even if the payment is not completed, so that we can help you finish the booking.
We never receive or store your card number or CVC — the payment processor handles them.
3. Why
- to make and confirm your booking;
- to contact you before and on the day of the trip (changes, weather, meeting point); we send service emails only: the ticket, one reminder if a payment was not completed, the message the evening before, a cancellation notice if needed and one email after the trip asking how it went. No newsletters;
- to take payment and make refunds;
- accounting and tax records;
- to improve the service (feedback, aggregated statistics).
4. Legal basis
We process data on the basis of your consent and to perform the contract (your booking), under the legislation of the Kyrgyz Republic on personal data. By sending a booking you consent to processing under this policy.
5. Who we share it with
- The driver-carrier assigned to your departure — name and phone, to find and contact you.
- The payment processor — GG Services Limited (Hong Kong), our payment agent, and the Stripe platform — for online payments and refunds.
- Resend (USA) — the service that delivers our emails: your email address, name and booking details in the message.
- Our hosting provider, whose servers run the site and the booking database.
- Google Analytics — aggregated visit statistics, no advertising or ad profiling.
- WhatsApp (Meta) — if you chat with us there.
- The partner hotel that referred you — only what is needed to calculate its commission: dates and number of seats of trips that took place. We do not give the hotel your phone or email.
We do not sell data or share it for advertising. We may disclose data to public authorities where the law requires it.
6. Cross-border transfer
Some services (hosting, payment processor, email delivery, analytics, WhatsApp) run on servers outside the Kyrgyz Republic. By booking you consent to this transfer. We choose providers that protect data.
7. Retention
Booking data, including unfinished bookings, is kept for up to 3 years after the trip date (for accounting and handling claims), then deleted or anonymised. WhatsApp chats are kept under that service's rules.
8. Your rights
You can ask to access, correct or delete your data, or withdraw consent, by writing to hello@arashantransfer.com. We reply within 10 business days. Withdrawal does not affect processing already done; data we must keep by law (accounting) is deleted when the retention period ends.
Visitors from the EU/EEA. Under the GDPR you have the right of access, rectification, erasure and objection, and the right to lodge a complaint with a data protection supervisory authority in your country.
9. Cookies
We use only necessary cookies and local storage (for example, to remember for 30 days which hotel referred you) and Google Analytics cookies. No advertising cookies. You can disable them in your browser — the site will still work.
10. Children
The site is not intended for use by people under 16 on their own. Bookings for children are made by adults.
11. Security
Only the agent's staff and the assigned driver can access booking data. The site runs over HTTPS.
12. Changes
We may update this policy. The current version is always on this page, with its date at the top. The Russian version prevails in case of discrepancy.