Privacy policy

2. What data we collect

2.1 When you book (website and app)

Your name, phone number and the email address you confirm with a code from our message. This data is stored with the booking and in a guest record that lets us recognise you in future bookings made with the same phone number; the guest record cannot be accessed with a password. We also store the dates and contents of the booking, messages in the booking chat with the property and your review, if you leave one. A booking is placed only after you tick the consent to personal data processing (section 9).

2.2 When a property owner registers (website only)

Name, phone number, a hashed password and the property details you provide. Registration also requires consent to personal data processing.

2.3 Cookies and web analytics — anar.kz website

Google Tag Manager, Google Analytics and Yandex.Metrica run on the website. They collect which pages are visited, where visitors come from and behavioural metrics; Yandex.Metrica uses Session Replay (recording of on-page actions) and a click map. To do so, these services set cookies and receive your IP address and information about your browser and device.

These services are on by default and load when you open the site. You can turn them off at any time with the button at the bottom of any page: Disable analytics. Once turned off, the website stops contacting them and their cookies are removed. Fields with your name, phone and email, as well as the “My booking” page, are always hidden from Session Replay, whatever your choice.

The website itself stores only technical settings in your browser: the colour theme, the site language, your analytics choice and, for property owners, login data.

2.4 Photos and maps

When you open the website or the app, your device loads some content directly from third-party servers. We do not pass booking personal data to them, but they see your IP address and browser information, like any server an image is loaded from:

• photos and videos of properties are stored in Cloudflare R2 cloud storage (Cloudflare, Inc., USA); the storage and delivery servers are located outside Kazakhstan. The storage holds only photos and videos of properties and services — no users' personal data;
• some photos that have not yet been moved to our storage load from their original sources — property websites, 2GIS and Yandex Maps;
• the property map — map tiles load from OpenStreetMap Foundation servers, and the map markers on the website load from the unpkg.com CDN;
• the “Get a consultation” (WhatsApp) and “Get directions” (Yandex Maps) buttons open external services only when you tap them.

2.5 Mobile app

The app contains no analytics or advertising SDKs. Everything in it goes through our server api.anar.kz; photos and maps load as described in section 2.4.

3. Why we use the data

To place and confirm bookings, to let the property contact you about your booking, to send booking status emails, to run the “My booking” feature (search, cancellation, chat, review), to run the property dashboard and — with your consent — for website analytics, to understand what works and what doesn't. We do not use the data for targeted advertising and do not sell it to third parties.

4. Where the data is stored

The database with personal data (bookings, guest records, property accounts, messages) and the mail server that sends booking emails are hosted on a server in the Republic of Kazakhstan (Almaty, hosting provider Hoster.KZ).

5. Who we share data with

With the property you book — your name, phone, email, dates, booking contents and booking chat messages — so that the property can confirm the booking and contact you. With the hosting provider in Kazakhstan whose server runs anar.kz. We do not pass booking data to advertising networks.

6. Cross-border transfer

Booking and account data is not transferred outside Kazakhstan. Only technical data about your device and browser — IP address, cookies, browser information, on-page actions — goes abroad:

• to Yandex.Metrica (Russia), Google Tag Manager and Google Analytics (Google LLC, USA) — unless you have turned analytics off with the button at the bottom of the page (section 2.3);
• to Cloudflare (USA), the OpenStreetMap Foundation (UK), unpkg.com and photo sources — when photos and the map load (section 2.4).

7. Retention

Booking data is kept for as long as needed for the “My booking” feature and for resolving disputes and refunds. On request, we will delete the personal data of a booking unless this conflicts with obligations to the property or legal requirements.

8. Your rights

You can find out what data we hold about you, ask us to correct, block or delete it, and withdraw your consent to processing — via the contacts in section 1. Consent to analytics can be withdrawn immediately with the “Cookie settings” button at the bottom of any page.

10. Children

The service is not intended for children under 16 and does not knowingly collect their data.

11. Changes to this policy

We may update this document as the service changes; the date of the current version is shown at the top of the document.