Privacy policy

General provisions

This policy has been prepared in accordance with the Law of the Republic of Kazakhstan “On Personal Data and Its Protection” and applies to everyone who uses the Joldar platform (the joldar.com website and the mobile app).

The owner and operator of the personal data is JoldarCom LLP, BIN 261140002202, 280 Baizakov St, Almaty. For any questions about personal data: privacy@joldar.com.

By registering on the platform you consent to the collection and processing of your personal data for the purposes set out in this policy. Consent is given electronically and confirmed with an SMS code.

What data we collect

Contact details

Phone number, email (if you provide it).

Identity verification data

Full name, date of birth, IIN (individual identification number), the details and photos of your ID card and driver’s license, driving experience, license category, selfie and the face-match result.

Vehicle data (for hosts)

License plate number, VIN, registration certificate, OGPO VTS policy (compulsory motor third-party liability insurance), power of attorney, car photos.

Payment data

The card token issued by the payment provider, the last 4 digits of the card, payment history, the host’s account details. Joldar never sees or stores the full card number or the CVV code.

Trip data

Bookings, check-in and check-out photos and their metadata (date, time, geolocation), odometer and fuel readings, chat messages, reviews, claims, fines.

Geolocation

Only when you take photo report pictures and during a trip, if you allow it in the app. Geolocation is not collected outside of trips.

Technical data

Device type, operating system, IP address, app version, cookies and similar technologies, error logs.

How we use your data

• Registration, signing in to your account and protecting it.
• Identity verification, checking age and driving experience, preventing fraud.
• Processing bookings, concluding rental contracts, accepting payments and transferring them to hosts, holding the deposit.
• Documenting trips and resolving disputes about damage, fines and extra charges.
• Arranging insurance compensation and working with the insurer.
• Providing support and sending you trip-related notifications.
• Complying with the law: accounting, lawful requests from government authorities.
• Improving the platform and keeping anonymized statistics.
• Only with your separate consent: sending marketing messages. You can withdraw this consent at any time.

Legal basis for processing

The grounds for processing your data are: your consent; concluding and performing a contract to which you are a party (the Terms of use, the rental contract); fulfilling obligations imposed on Joldar by law; protecting the life, health and property of you and other users.

If you refuse to provide the data required for booking (KYC, payment data), you will not be able to rent or rent out a car.

Who we share data with

Host or renter

The minimum needed for the trip: name, photo, rating and, during the trip, phone number and in-app chat. Document details and IIN are not shared with the other party.

Payment provider

To process payments, hold the deposit and pay out to the host.

SMS provider

To send confirmation codes and trip notifications (phone number and message text only).

KYC provider

For document recognition, liveness checks and face matching.

Insurance company

To issue policies and pay compensation for incidents.

Government authorities

In the cases and manner provided by law (courts, law enforcement, administration of fines).

Technical partners

Hosting, maps, push notifications: under contract, only on Joldar’s instructions and with a duty of confidentiality.

Joldar does not sell personal data.

Where and how long data is stored

As required by law, personal data is stored on servers located in the Republic of Kazakhstan. If data needs to be transferred abroad (for example, to a foreign KYC provider), this happens only in the cases provided by law and with an adequate level of protection.

Account data

While the account is active. When the account is closed, the name, e-mail, photo and saved cards are anonymized at once; booking, payment and contract records are kept for the period the law requires.

KYC documents and selfie

While the account is active and for 3 years after it is closed (the limitation period under Article 178 of the Civil Code of Kazakhstan), then deleted.

Trip photos and chat

3 years after the trip ends; if there is a dispute, until it is resolved.

Payment and accounting documents

For the period set by accounting legislation.

Data protection

• Data is encrypted in transit and at rest.
• Only staff who handle KYC checks and disputes can access document photos; every access is logged.
• Card data is processed only by a licensed payment provider.
• If a data breach is detected, Joldar notifies the authorized body and the affected users in the manner established by law.

Your rights

• To know what data Joldar processes about you and to get a copy of it.
• To demand that inaccurate or outdated data be corrected.
• To demand that data be deleted, except for data that the law or a contract requires us to keep.
• To withdraw consent. This does not affect the lawfulness of processing before the withdrawal, but it may make it impossible to use the platform.
• To opt out of marketing messages.
• To file a complaint with the authorized personal data protection body or with a court.

Send your request to privacy@joldar.com. You can close your account in the app (Profile → Account → Close account) or on the website; the steps are on the /delete-account page. We will reply within the period set by law.

Cookies and similar technologies

The website uses cookies to remember your language, maintain your session and run anonymized analytics. The full list and how to manage them are on the Cookie settings page.

Changes to this policy and contact

A new version of the policy is published on this page with its update date. We notify you of significant changes in advance through the app; if processing for new purposes requires it, we ask for your consent again.

Contact: privacy@joldar.com, JoldarCom LLP, 280 Baizakov St, Almaty.