Privacy Policy

Last updated: September 11, 2026 Website: www.bigtravelhub.com

This Privacy Policy explains how Big Travel processes personal data when you use this website, request travel-related services, contact us, use a personal account, publish content, or communicate with support.

Using the website does not by itself mean that you consent to optional cookies, analytics, advertising, or support-chat storage. Optional technologies are used only after you choose them in the cookie banner.

1. Controller

The controller responsible for this website is:

Individual entrepreneur Big Travel Hub Tax identification number: 000811650778 Address: Building 59, Zheleznodorozhnik gardening society, Zhanatalap village, Atyrau Rural District, Atyrau City Administration, Atyrau Region, Kazakhstan Phone: +77023224115 Privacy contact: bigtravelchat@gmail.com Telegram: @Dima_BigTravelChat

If another Big Travel company or partner provides a booked service, that party may act as an independent controller for the data it needs to provide that service.

2. Data We Process

Depending on how you use the website, we may process:

Contact details: name, phone number, email, messenger handle, preferred contact channel.
Booking and request details: destination, route, dates, time, number of travelers, citizenship or country of residence, preferences, comments, and service requirements.
Documents and sensitive request details: passport or identity-document details, accessibility, insurance, health, or other special requirements, only when you provide them or they are necessary for a requested service.
Account and profile data: login identifiers, profile information, saved requests, reviews, uploaded photos, posts, and other content you submit.
Support data: chat messages, uploaded files, voice messages, handoff tokens, and the context needed to continue a conversation in Telegram, WhatsApp, MAX, or another channel you choose.
Technical data: IP address, browser and device information, approximate location from the request, page URLs, referrer, security logs, and server logs.
Analytics and advertising data, after consent where required: cookie or local-storage identifiers, page events, outbound contact-link clicks, UTM tags, gclid, yclid, fbclid, _fbp, _fbc, and similar campaign identifiers.
Payment and administration data: invoices, payment status, refunds, correspondence, and records needed for accounting, fraud prevention, dispute handling, and legal compliance.

We receive data from you, from your device and browser, from the messengers or platforms you use to contact us, from service partners, and from analytics or advertising providers after the relevant consent.

3. Purposes and Legal Bases

We process personal data for these purposes:

To answer requests, prepare offers, arrange bookings, provide support, and connect you with guides, drivers, accommodation providers, insurers, or other travel-service partners. The legal basis is contract or pre-contractual steps, and legitimate interests in operating the service.
To operate accounts, authentication, security, fraud prevention, abuse prevention, and website reliability. The legal basis is contract, legitimate interests, and legal obligations.
To process payments, refunds, accounting records, tax records, complaints, and legal claims. The legal basis is contract, legal obligations, and legitimate interests.
To communicate about requested services through email, phone, Telegram, WhatsApp, MAX, or similar channels. The legal basis is contract or legitimate interests; marketing messages are sent only where we have the required consent or other lawful permission.
To remember essential interface settings such as language, theme, currency, login state, security state, and your cookie choice. The legal basis is legitimate interests and, where applicable, the storage/access exception for technologies that are strictly necessary or requested by you.
To measure website performance, understand demand, debug errors, and improve pages using tools such as Rybbit and Yandex Metrica. These tools are loaded only after analytics consent where consent is required.
To measure advertising performance, preserve campaign attribution, and use tools such as Google Tag Manager, Meta Pixel, Yandex advertising identifiers, and contact-link attribution. These tools are loaded only after marketing consent where consent is required.
To run the support chat widget, remember the chat on this browser, and attach request context. This storage is used only after support-chat consent unless you contact us directly through an external messenger link.

If GDPR or UK GDPR applies to you, the legal bases include Article 6(1)(a), 6(1)(b), 6(1)(c), and 6(1)(f), depending on the purpose. Where we rely on consent, you can withdraw it at any time without affecting processing that happened before withdrawal.

4. Cookies and Similar Technologies

We use cookies, local storage, session storage, pixels, scripts, and similar browser technologies.

Essential technologies may be used without optional consent when they are needed for the website or for a choice you request:

language cookie "lng";
theme storage and cookie "theme";
currency preference cookie "currency";
authentication, session, CSRF, and security cookies;
sidebar or dashboard interface state on protected pages;
cookie-consent storage "bt_privacy_consent_v1".

Optional technologies are off until you allow them:

Analytics: Rybbit and Yandex Metrica, including page events, error events, visitor identifiers, and Yandex Metrica cookies such as "_ym_uid".
Advertising attribution: Google Tag Manager, Meta Pixel, campaign parameters, ad-click identifiers, "_fbp", "_fbc", "_gcl_au", and similar identifiers.
Support chat: browser storage for the web chat ID, widget token, contact details, anonymous visitor ID, and request attribution used to continue a support conversation.

You can change your choices from the cookie settings button on the website. Rejecting optional technologies does not prevent you from browsing the website or contacting us through ordinary links.

5. Recipients

We share personal data only as needed for the purposes above:

employees, contractors, and support operators who help process requests;
travel-service partners such as guides, drivers, accommodation providers, insurance providers, transport providers, or other suppliers needed for your request;
payment, accounting, hosting, database, CDN, email, security, and IT-service providers;
messenger and communication providers such as Telegram, WhatsApp, MAX, phone networks, and email providers when you use those channels;
analytics and advertising providers, only after the relevant consent where consent is required;
public authorities, courts, banks, professional advisers, or counterparties where required by law or needed to protect rights.

We do not sell personal data. If an advertising tool is legally treated as "sharing" or targeted-advertising processing in a location that applies to you, we use it only after marketing consent and honor opt-out requests sent to the privacy contact.

6. International Transfers

Big Travel serves international travelers and may use providers, partners, messengers, hosting, and support teams located in different countries, including countries outside your country, the EEA, or the UK. When transfer rules apply, we use the appropriate safeguards available for the transfer, such as contracts, standard contractual clauses, adequacy mechanisms, user-requested transfer necessity, or your explicit consent where required.

7. Retention

We keep personal data only for as long as needed for the relevant purpose:

request and booking correspondence: while the request is active and for the period needed to handle follow-up questions, disputes, accounting, and legal claims;
account data: until the account is deleted or no longer needed, unless we must keep limited records by law;
payment, accounting, tax, refund, and legal records: for the period required by applicable law;
support-chat records and uploaded files: while needed to provide support and maintain conversation history;
analytics and advertising identifiers: according to your consent choices, provider settings, and applicable retention limits;
consent records: until replaced, withdrawn, expired, or reset by a new policy version.

When data is no longer needed, we delete it, anonymize it, or restrict it where deletion is not immediately possible.

8. Your Rights

Depending on your location and the law that applies, you may have rights to access, correct, delete, restrict, object to, or transfer your personal data; withdraw consent; opt out of marketing; object to legitimate-interest processing; limit certain sensitive-data uses; or complain to a supervisory authority.

To exercise rights, contact bigtravelchat@gmail.com. We may need to verify your identity before responding.

If you are in the EEA, you may complain to your local data protection authority. If you are in the UK, you may complain to the Information Commissioner's Office. If you are in Russia, you may contact Roskomnadzor where applicable. If you are in another country, you may contact your local privacy authority.

9. Children

The website is not directed to children. If a minor uses a travel service, a parent, guardian, or responsible adult should make the request and provide only the data needed for the service.

10. Automated Decisions

We do not use personal data to make decisions based solely on automated processing that produce legal or similarly significant effects for you.

11. Updates

We may update this Privacy Policy when the website, providers, services, or legal requirements change. The current version is published on this page with the update date above.