1. General Provisions
1.1. This Personal Data Privacy Policy (hereinafter referred to as the Policy) applies to all personal data that the Hi Sky Airline (hereinafter referred to as the Airline) has received or will receive in the future from clients as a result of the performance of the Public Offer Agreement on the Airline's website www.hisky.kz
1.2. The client's consent includes consent to the collection, processing, storage and use by the Airline of any data about the client obtained by the Airline.
2. Scope of the Client's Personal Data
2.1. For the purposes of this Policy, the client's personal data means the personal data that the client (user) provides about himself or herself independently when making a booking on the website or in the course of using the services provided by the Airline.
2.2. Personal data relating to orders are stored in encrypted form.
2.3. The Airline is not liable for the accuracy of the personal data provided.
3. Purposes of this Policy
3.1. The Airline undertakes to process only the personal data that are necessary for the provision of services.
3.2. The Airline may use the client's personal information for the following purposes:
3.2.1. Identification of the client in the course of the provision of services;
3.2.2 To resolve technical problems (for example, a booking error caused by an invalid format or an excessively long entry)
3.2.3. Distribution of the Airline's advertising and/or marketing materials;
3.2.4. Conducting statistical and other research on the basis of anonymised data.
4. Transfer of the Client's Personal Data to Third Parties
4.1. With respect to the client's personal data, the Airline undertakes to maintain their confidentiality, except where access to such information has been granted to a certain group of persons by the client or at the client's request, and except in the cases provided for by the applicable legislation of the Republic of Kazakhstan.
4.2. The client gives his or her consent to the transfer, processing and storage of his or her personal data without the right to transfer them to third parties, except where such transfer is necessary for the purposes of the performance of the Agreement, and except in the cases provided for by the applicable legislation of the Republic of Kazakhstan.
4.3. The Airline undertakes to take all necessary and possible measures to protect the client's personal data from unlawful or accidental access, destruction, alteration, blocking, copying and dissemination, as well as from other unlawful actions with respect to personal data on the part of third parties.
4.4 The Airline does not receive or store bank card details. All payments are processed through reliable and certified systems of banks or payment gateways.
5. Do we use bot protection?
In Short: Yes, we use Cloudflare Turnstile to tell human visitors apart from automated traffic.
To protect our booking system against automated abuse, we use Cloudflare Turnstile, a service provided by Cloudflare, Inc. When you make a booking, Turnstile collects information about your device and browser and analyses it to distinguish human visitors from automated traffic. We rely on our legitimate interests in preventing fraud and securing our Services as the legal basis for this processing. Cloudflare processes this information as our processor and does not use it to profile you or to serve advertising. Cloudflare may process this information outside the country in which you are located, under the safeguards set out in its data processing terms. See Cloudflare's Turnstile Privacy Addendum: https://www.cloudflare.com/turnstile-privacy-policy/.