Privacy policy
This policy explains how RideKZ handles your personal data when you use ridekz.com, contact us or book a trip. Version of 13 October 2026.
1. Who is responsible
The data controller is GG Services Limited, Hong Kong, which operates RideKZ. Our operations team processes booking data to dispatch drivers and support you on the road. For any privacy question or request, write to hello@ridekz.com with "Privacy" in the subject line.
2. What we collect
- Booking data: your name, phone or WhatsApp number, email, pickup and drop-off addresses, dates and times, flight or train number, number of guests, children's ages for child seats, luggage and special requests.
- Payment data: the payment status, amount, currency and the last four digits and brand of your card. Full card details are collected and stored by Stripe, not by us.
- Communications: messages you send us by WhatsApp, email or the website form, and our replies.
- Website data: pages visited, device and browser type, approximate location from your IP address and how you arrived at the site, collected through Google Analytics if you consent to analytics cookies.
We do not ask for passport numbers unless a border or park requires them for a specific trip, and we do not collect special categories of data. If you tell us about a medical need or mobility requirement so we can help, we use it only for that trip.
3. Why we use it, and on what legal basis
| Purpose | Legal basis |
|---|---|
| Taking, confirming and performing your booking, sharing details with the driver | Performance of a contract |
| Taking payments, refunds and handling chargebacks | Performance of a contract; legal obligation |
| Sending confirmations, driver details and trip updates | Performance of a contract |
| Accounting and tax records | Legal obligation |
| Handling complaints, preventing fraud, improving our service | Legitimate interests |
| Website analytics | Consent (cookie banner) |
| Cross-border transfer of data of Kazakhstan citizens | Consent given in the booking form |
We do not send marketing emails unless you opt in, and we never sell your data.
4. Who we share it with
- Your driver and the transport provider performing your ride receive only what they need: your name, phone number, pickup details, flight number, number of guests and special requests. For cross-border routes, the second driver on the other side receives the same.
- Stripe (payments), Resend (sending booking emails) and Google Analytics (website statistics), acting as our processors under data-processing terms.
- WhatsApp (Meta), if you choose to contact us that way; its own privacy policy applies to the platform.
- Authorities, where we are legally required to, or to protect the safety of a guest or driver.
5. International transfers
We are based in Hong Kong, rides take place in Kazakhstan, Kyrgyzstan and Uzbekistan, and our service providers may process data in the United States, the EU and elsewhere. Your data is therefore transferred outside your home country. Where the GDPR or UK GDPR applies, we rely on the European Commission's standard contractual clauses or equivalent safeguards offered by our providers, and on the necessity of the transfer to perform the contract you asked for. If you are a citizen of Kazakhstan, the booking form asks for your consent to the cross-border transfer of your personal data, as Kazakh law requires; without it we cannot take an online booking, but you can still book by WhatsApp with minimal data.
6. How long we keep it
- Booking and payment records: 3 years after the trip, for accounting and to handle claims.
- Enquiries that did not become bookings: up to 12 months.
- Analytics data: according to the Google Analytics retention setting, no longer than 14 months.
After these periods we delete or anonymise the data.
7. Your rights
Depending on where you live, you may have the right to: access the data we hold about you; correct it; ask us to delete it; restrict or object to its use; receive it in a portable format; and withdraw consent at any time, without affecting earlier processing. On request we delete your data, except what we must keep by law, for example accounting records. To use any of these rights, email hello@ridekz.com. We reply within 30 days and may ask you to confirm your identity. If you are in the EU or UK, you may also complain to your local data-protection authority; in Hong Kong, to the Office of the Privacy Commissioner for Personal Data.
8. Cookies
We use strictly necessary cookies to make the site and booking form work. Analytics cookies (Google Analytics) are set only if you accept them in the cookie banner, and you can change your choice at any time. We do not use advertising or tracking cookies from social networks.
9. Security
The website runs over HTTPS. Card payments are handled entirely by Stripe. Access to booking data is limited to the staff and drivers who need it, and drivers receive trip details only shortly before the ride. No system is perfectly secure; if a breach affects your data, we will inform you and the relevant authorities as the law requires.
10. Children
We do not knowingly collect data from children except their ages for child seats, provided by the adult making the booking.
11. Changes
We may update this policy. The date at the top shows the current version; significant changes will be announced on this page. See also our booking terms and company details.