Legal

Privacy Policy & Personal Data Processing

By registering, you consent to the collection and processing of the personal data transmitted and received while using the Dextra service.

Published: 30 April 2026 · dextratms.kz

This Privacy Policy for personal data (hereinafter — the “Policy”) applies to all information that the Site Administration may obtain about a User while they use the Site provided by the Site Administration, as well as in the course of the Site Administration fulfilling any agreements and contracts with the User.

01 General Provisions

1.1. The Site Administration processes personal data on a lawful and fair basis to perform the functions, powers, and obligations imposed on the Site Administration by law, and to exercise the rights and legitimate interests of the Site Administration and Users.

1.2. Use of the Site, as well as its individual features, constitutes the User’s unconditional consent to this Policy and the conditions for processing their personal data stated herein. If the User disagrees with these conditions, they must refrain from using the Site.

02 Processing & Confidentiality of User Personal Data

2.1. This Policy establishes the Site Administration’s obligations regarding non-disclosure and ensuring a confidentiality protection regime for the personal data the User provides when using the Site.

2.2. Categories of personal data the Site Administration may collect from Users to provide access to Site features: name, email address, phone number, and — optionally — company details.

2.3. This Policy applies only to information processed during the use of the Site. The Site Administration does not control and is not responsible for the processing of information by third-party sites and resources that the User may access via links available within the Site.

2.4. The Site Administration does not verify the accuracy of the personal data provided by the User and has no ability to assess their legal capacity. However, the Site Administration assumes that the User provides accurate and sufficient personal data and keeps it up to date. The consequences of providing false or insufficient information are defined in the Site’s User Agreement.

03 Purposes of Collecting User Personal Data

3.1. The Site Administration collects and stores only the personal data necessary to provide full or partial Site functionality or to fulfill agreements and contracts with the User, except where the law requires mandatory storage of personal data for a legally defined period.

3.2. The Site Administration processes the User’s personal data for the following purposes: providing our service, identifying the user, billing for services rendered, improving the service, and communicating with the user.

04 Conditions for Processing User Personal Data

4.1. Processing of the User’s personal data is carried out without time limitation, by any lawful means, including in personal data information systems with or without the use of automation tools.

4.2. Confidentiality of the User’s personal data is maintained, except in cases where the User voluntarily provides information about themselves for general access to an unlimited number of persons. When using certain Site features, the User agrees that a defined portion of their personal information becomes publicly available.

4.3. The Site Administration undertakes not to transfer information received from the client to third parties under any circumstances.

05 Changing & Deleting Personal Data. Mandatory Storage

5.1. The User may at any time change (update, supplement, delete) the personal data they have provided, or part of it, by using the personal data editing feature in the personal section of the Site, or by sending a corresponding request to the email address specified in Section 10 of this Policy.

06 Measures Applied to Protect User Personal Data

6.1. The Site Administration takes the necessary and sufficient organizational and technical measures to protect the User’s personal data from unlawful or accidental access, destruction, alteration, blocking, copying, distribution, and other unlawful actions by third parties.

07 Dispute Resolution

These provisions of the Policy govern the procedure for resolving disputes between the Site Administration and the User through pre-trial and judicial procedures, and also determine the venue for dispute resolution and the applicable law.

08 Changes to the Privacy Policy

The Site Administration has the right to make changes to this Privacy Policy. When changes are made, the current version indicates the date of the last update. The new version of the Policy takes effect from the moment of its publication, unless otherwise provided by the new version.

09 Dextra TMS Mobile Application

This section supplements the general provisions of this Policy and applies to users of the Dextra TMS mobile application (the “Application”), available on the Apple App Store and Google Play. In the event of any conflict between the general part of the Policy and this section, the provisions of this section apply to matters relating to the Application.

9.1. Purpose of the Application

The Application is a corporate Transport Management System (TMS) for couriers and dispatchers. Access is granted exclusively to employees of client organizations that have entered into a contract with the Operator. Self-registration is not available; sign-in is performed using corporate credentials.

9.2. What Data the Application Collects

9.2.1. Account data:

9.2.2. Precise geolocation (GPS): While the Application is in use, the following device location data is collected:

Geolocation is collected in the background, including when the Application is minimized or the device screen is off. This is necessary for continuous route-execution tracking by the dispatcher. On iOS, the system shows a blue indicator at the top of the screen during background location use. On Android, a persistent “Location tracking active” notification is displayed in the system status bar.

9.2.3. Technical device data:

9.2.4. What the Application does NOT collect:

9.3. Processing Purposes

The data collected by the Application is used exclusively for:

The data is not used for:

9.4. To Whom Data Is Transferred

9.4.1. Within the organization: to dispatchers and operators of the employer organization who have access to the control panel, for real-time location tracking of their organization’s couriers and route history.

9.4.2. To service providers (sub-processors): to a cloud hosting provider located in the Republic of Kazakhstan for hosting server infrastructure and databases. Subcontractors are obligated to process data only per our instructions and to maintain confidentiality.

9.4.3. To government authorities — upon lawful request from authorized bodies in cases provided for by the legislation of the Republic of Kazakhstan.

9.4.4. The Operator does not sell data and does not transfer it to advertising networks, analytics brokers, or other third parties for commercial purposes.

9.5. Where & How Long Data Is Stored

Storage location: servers are located in the Republic of Kazakhstan. No cross-border data transfer is performed.

Retention periods:

9.6. Security

9.7. User Control Over Data

A User of the Application may at any time:

9.8. Age Restrictions

The Application is not intended for use by persons under 18 years of age and is not provided to such persons. The Operator does not knowingly collect personal data of minors.

9.9. Legal Grounds for Processing

Data processing in the Application is carried out on the basis of:

10 Feedback. Questions & Suggestions

Contact us

All suggestions or questions regarding this Policy may be sent to the User Support Service of the Site Administration by email, or by post to the address below.

⌖ 050000, Republic of Kazakhstan, Almaty, Abylai Khan Avenue, 58a/1, office 7