Privacy Policy
Last Updated: November 14, 2025
1. Introduction
Visit Mongolia ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website visitmongolia.org and use our services.
2. Information We Collect
2.1 Information You Provide
When you submit an inquiry through our contact form, we collect the following information:
- Name
- Email address
- Company name (optional)
- Service interest (optional)
- Message content
2.2 Automatically Collected Information
We use Cloudflare Turnstile to protect our website from bots and spam. This service may collect certain technical information, including IP addresses, browser type, device information, and interaction patterns, to verify legitimate users. Please refer to Cloudflare's Privacy Policy for more information.
Important: We do not use tracking cookies, analytics cookies, or advertising cookies. Our website does not employ third-party tracking technologies. We only use security-focused services (Cloudflare Turnstile) to protect against bots and spam.
3. How We Use Your Information
We use the information we collect for the following purposes:
- Service Delivery: To respond to your inquiries and provide our B2B travel concierge services
- Partner Connections: To connect you with our curated network of travel partners in Mongolia who can assist with your travel needs
- Communication: To send you confirmation emails regarding your inquiry and facilitate communication between you and travel partners
- Service Improvement: To analyze inquiries and improve our services and website functionality
- Legal Compliance: To comply with applicable laws, regulations, and legal processes
- Security: To protect our website and services from fraud, abuse, and security threats
Legal Basis for Processing (GDPR): We process your personal information based on (1) your consent when you submit an inquiry, (2) our legitimate interest in providing B2B travel concierge services, and (3) our legal obligations to maintain records and comply with applicable laws.
4. Information Sharing and Disclosure
We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:
- With Travel Partners: To fulfill our service, we share your inquiry details with our curated network of travel partners in Mongolia who can assist with your travel needs.
- Service Providers: We use third-party services (Zoho Mail for email delivery, Cloudflare for security) that may process your information on our behalf.
- Legal Requirements: We may disclose information if required by law or to protect our rights and safety.
5. Data Retention
We retain your personal information for the following periods:
- Active Inquiries: We retain your information while your inquiry is active and for up to 3 years after our last communication to facilitate follow-up and maintain service records
- Legal Requirements: We may retain certain information for longer periods if required by applicable laws, regulations, or legal processes
- Deletion Requests: Upon your request, we will delete your personal information within 30 days, except where retention is required by law
After the retention period expires, we will securely delete or anonymize your personal information in accordance with our data deletion procedures.
6. Your Rights
Depending on your location, you may have the following rights regarding your personal information:
- Right to Access: Request a copy of the personal information we hold about you
- Right to Rectification: Request correction of inaccurate or incomplete information
- Right to Erasure: Request deletion of your personal information (subject to legal requirements)
- Right to Restrict Processing: Request limitation of how we process your information
- Right to Data Portability: Request transfer of your data to another service provider
- Right to Object: Object to processing of your information for certain purposes
- Right to Withdraw Consent: Withdraw consent where processing is based on consent
California Privacy Rights (CCPA): If you are a California resident, you have additional rights including the right to know what personal information we collect, the right to delete personal information, the right to opt-out of the sale of personal information (we do not sell personal information), and the right to non-discrimination for exercising your privacy rights.
To exercise these rights, please contact us at hi@visitmongolia.org. We will respond to your request within 30 days (or as required by applicable law). We may need to verify your identity before processing your request.
7. Security
We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet is 100% secure.
8. Children's Privacy
Our services are directed to businesses and are not intended for individuals under the age of 18. We do not knowingly collect personal information from children.
9. International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence, including Mongolia and countries where our service providers operate. We ensure that appropriate safeguards are in place to protect your information in accordance with this Privacy Policy and applicable data protection laws.
For transfers from the European Economic Area (EEA) to countries outside the EEA, we rely on appropriate safeguards such as Standard Contractual Clauses approved by the European Commission or other legally recognized transfer mechanisms.
By using our services, you consent to the transfer of your information to these countries for the purposes described in this Privacy Policy.
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.
11. Third-Party Links
Our website may contain links to third-party websites, including our travel partners. We are not responsible for the privacy practices or content of these third-party websites. We encourage you to review the privacy policies of any third-party websites you visit.
12. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:
For privacy-related requests, please include "Privacy Request" in your subject line to help us process your request more efficiently.
EU Residents: If you are located in the European Union and have concerns about our data processing, you have the right to lodge a complaint with your local data protection authority.