PRIVACY POLICY
AND PAYMENT & REFUND TERMS

Date of last update: 15.12.2025

1. PAYMENTS

1.1. Online payment by bank card

The BusinessFly service provides the ability to pay for Services using bank cards of international payment systems via internet acquiring.

After confirmation of the selected fare, the User is redirected to a secure payment page of the processing center of JSC “Alatau City Bank”, where the payment details are entered.

BusinessFly does not accept, process, or store Users’ bank card data. All payment transactions are carried out directly by the payment provider.

For additional authentication of the cardholder, the 3-D Secure protocol is used.

If this technology is supported by the issuing bank, the User undergoes additional identification on the side of their bank.

1.2. Payment security

Payment data processing is carried out by JSC “Alatau City Bank” in accordance with the international security standard PCI DSS 4.0.

Information transmission is performed using secure communication channels and encryption technologies (SSL/TLS).

BusinessFly receives from the payment provider only confirmation of the fact of payment, without access to the bank card details.

1.3. Storage of payment data

• bank card data is not stored on BusinessFly servers;
• entry of payment details is carried out exclusively on the side of the payment provider;
• BusinessFly has no technical capability to access Users’ full payment data.

1.4. Confirmation of the terms of service provision

By paying for the selected Service on the website businessfly.org, the User confirms their consent to the Terms of Service published at:

https://businessfly.org/terms-of-service

1.5. Refunds

Refunds are carried out exclusively in accordance with the fare rules of the respective airlines, the terms of service provision, as well as the provisions of the BusinessFly Terms of Service.

BusinessFly acts as a licensed online travel agency (OTA) and processes refund requests within the scope of its agency authority.

In cases provided for by the requirements of the payment provider, airlines, or applicable law, the User may be asked to provide additional data or documents for refund processing.

Refunds are made using the same payment method that was used for payment, within the time limits established by the payment provider and the issuing bank.

1.6. Possible reasons for payment refusal

A payment may be declined for reasons beyond the control of BusinessFly, including:

• restrictions of the issuing bank on online payments;
• insufficient funds on the card;
• incorrect entry of payment data;
• expiration of the card validity period.

For issues related to payments, the User may contact: support@businessfly.org

2. PRIVACY

2.1. General provisions

This Privacy Policy defines the procedure for the collection, processing, and protection of personal data of Users of the BusinessFly service.

Use of the website businessfly.org, making bookings and/or payment for Services signifies the User’s full and unconditional consent to this Policy.

2.2. Processing of personal data

BusinessFly processes Users’ personal data exclusively for the purposes of:

• making bookings;
• providing Services;
• processing payments and refunds;
• complying with legal requirements;
• ensuring customer support.

Data processing is carried out in accordance with the applicable legislation of the Republic of Kazakhstan and generally accepted international principles of personal data protection, including principles analogous to the requirements of the GDPR (where applicable).

2.3. Transfer of data to third parties

Personal data may be transferred to third parties only to the extent necessary for:

• making bookings with airlines;
• processing payments by payment providers;
• complying with legal requirements of government authorities.

All such third parties are obliged to ensure the confidentiality and security of the data received.

2.4. User rights

The User has the right to:

• request information about their personal data;
• require correction or updating of such data;
• submit a request for data deletion — within the limits permitted by law.

2.5. Cookies and technical data

The website businessfly.org may use cookies and technical data (IP address, browser parameters) exclusively for analytical and technical purposes to improve the operation of the service.

2.6. Limitation of liability

BusinessFly takes reasonable measures to protect personal data; however, it cannot guarantee absolute security of information in the event of factors beyond the Company’s control.

2.7. Dispute resolution

All disputes are subject to preliminary out-of-court settlement.

The applicable law is the legislation of the Republic of Kazakhstan.

2.8. Contacts

For questions regarding payments, privacy, and data processing:

support@businessfly.org