Aul Resort

Privacy Policy

Aul Resort

This Privacy Policy sets out how the personal data of guests and users of the Aul Resort website is processed and protected. By using the website and making a booking, you agree to the terms of this Policy.

1. General provisions

The personal data operators are: IE “Tungushbayeva Nina Mukhamadievna” (BIN 430527400010) — for the hotel complex services, address: Republic of Kazakhstan, Almaty region, Karasai district, Zhandosov rural district, 36 km of the Upper Kaskelen highway; and LLP “Mustang-Tur” (BIN 080540019230) — for the aquapark services, address: Republic of Kazakhstan, Almaty region, Karasai district, Zhandosov rural district, Zhandosov village, “Zhandosovo” farm, building 170.

For any questions regarding the processing of personal data, please contact: support@aulresort.kz.

2. What data we collect

When you make a booking and use the website, we may process the following data:

  • guest name;
  • phone number;
  • email address;
  • check-in and check-out dates, number of guests;
  • selected services and order details;
  • payment method and status;
  • technical data: cookies, device and browser information.
  • We do not store bank card data — payment details are processed directly by the payment systems.

3. Purposes of processing

  • placing, confirming and fulfilling bookings;
  • contacting you regarding your booking and the services;
  • processing payments;
  • responding to support requests;
  • improving the quality of our service and the website.

4. Legal basis

Personal data is processed on the basis of your consent and for the performance of the service contract concluded upon booking, in accordance with the Law of the Republic of Kazakhstan “On Personal Data and Its Protection”.

5. Disclosure to third parties

To provide our services we use trusted providers, to whom part of the data may be transferred solely to the extent necessary to perform their functions:

  • cloud storage and database (Supabase);
  • request management system — CRM (Bitrix24);
  • email delivery service (Resend);
  • Kaspi and Halyk Bank payment systems — for online payment;
  • authentication services (Google, Yandex, Telegram) — when you sign in via the relevant account.
  • We do not sell or transfer your data to third parties for any other purposes.

6. Storage and protection

Data is stored for the period necessary to provide the services and to comply with legal requirements. We apply organisational and technical protection measures, including data transfer over the secure HTTPS protocol and restricted access to data.

7. Your rights

You have the right to:

  • obtain information about the processing of your data;
  • request correction of inaccurate data;
  • request deletion of data;
  • withdraw your consent to processing.
  • To exercise your rights, send a request to support@aulresort.kz.

8. Cookies

The website uses cookies for proper operation, saving settings and analysing traffic. You can disable cookies in your browser settings, but this may limit the website's functionality.

9. Changes to the policy

We may amend this Policy. The current version is always available on this page. The date of the last update is shown at the bottom.

10. Contacts

IE “Tungushbayeva Nina Mukhamadievna” (hotel complex services). E-mail: support@aulresort.kz. Phones: +7 702 000 1843, +7 777 270 8990.

LLP “Mustang-Tur” (aquapark services). E-mail: buh@aulresort.kz. Phone: +7 771 071 7605.

Last updated: 7 June 2026