Information We Collect

When you sign up for our courses or browse our website, we gather certain information to provide you with a better learning experience. Here's what we collect and why it matters.

Personal Information You Provide

When you create an account or enroll in our programs, we ask for basic details like your name, email address, and phone number. If you're paying for a course, we'll also need billing information, though we don't store your full credit card details ourselves – that's handled securely by our payment processors.

• Name and contact details (email, phone number)
• Account credentials (username, encrypted password)
• Educational background and skill level information
• Billing address and payment information
• Profile photo and bio (optional)

Technical and Usage Data

Like most websites, we automatically collect some technical information when you visit. This includes your IP address, browser type, and how you navigate through our site. We use this data to improve our platform and understand what content works best for our students.

• Device information (operating system, browser version)
• IP address and approximate location
• Pages visited and time spent on each section
• Course progress and completion rates
• Assignment submissions and quiz results

Learning Activity Data

As you work through our courses, we track your progress and performance. This helps us personalize your learning path and gives you insights into your own development. We monitor which lessons you've completed, how long you spend on exercises, and your scores on assessments.

How We Use Your Information

We're not in the business of selling your data. Everything we collect serves a specific purpose related to your education and our ability to run the platform effectively.

• Delivering course materials and tracking your progress through programs
• Sending important notifications about courses, deadlines, and platform updates
• Processing payments and managing your subscription status
• Providing technical support when you encounter issues
• Improving our curriculum based on student engagement and feedback
• Preventing fraud and maintaining platform security
• Complying with legal obligations in Mongolia and internationally

Sometimes we'll send you emails about new courses or features, but you can opt out of marketing communications anytime. We'll still need to send you essential information about courses you're enrolled in, though.

Data Sharing and Third Parties

We work with a few trusted partners to operate our platform, but we don't hand over your data carelessly. Here's who might see your information and why.

Service Providers

We use external services for things like payment processing, email delivery, and cloud hosting. These companies only get access to the data they need to do their job, and they're bound by strict confidentiality agreements.

Legal Requirements

In rare cases, we might need to share your information with authorities if required by Mongolian law or to protect our legal rights. This could happen if there's a court order, investigation, or legitimate security concern. We'll only share what's legally necessary.

Business Transfers

If Xomario Prandivo is ever acquired or merges with another company, your data would be transferred as part of that transaction. We'd notify you before this happens and explain any changes to how your information is handled.

Your Rights and Control

You have significant control over your personal information. Under both Mongolian law and international data protection standards, you can exercise several rights regarding your data.

Access and Correction

You can view and update most of your information directly through your account settings. If something looks wrong or outdated, just log in and make the changes. For data you can't access yourself, contact us and we'll help within 14 days.

Data Deletion

Want to delete your account? You can do that anytime from your profile settings. Keep in mind that we might need to keep some records for legal or administrative purposes (like transaction history for tax compliance), but we'll remove everything else within 30 days.

• Access all personal data we hold about you
• Correct inaccurate or incomplete information
• Delete your account and associated data
• Export your data in a portable format
• Restrict how we process your information
• Object to certain types of data processing
• Withdraw consent for marketing communications

Data Security and Protection

Keeping your information secure isn't just important to us – it's essential. We use industry-standard security measures to protect your data from unauthorized access, loss, or misuse.

Technical Safeguards

All data transmitted between your device and our servers is encrypted using SSL/TLS protocols. Your passwords are hashed and salted, meaning even we can't see them. Our databases are secured behind firewalls, and we regularly update our security systems to address new threats.

Organizational Measures

Access to your personal information is restricted to employees who need it to do their jobs. Our team receives regular training on data protection and privacy practices. We also conduct periodic security audits to identify and fix any vulnerabilities.

Despite our efforts, no online system is completely secure. If we ever experience a data breach that affects your information, we'll notify you promptly and take immediate steps to minimize the impact.

Data Retention

We don't keep your information longer than necessary. How long we retain data depends on its purpose and legal requirements.

• Active account data: Retained while your account is active
• Course completion records: Kept for 5 years for certification verification
• Financial records: Maintained for 7 years to comply with tax laws
• Marketing preferences: Stored until you opt out or delete your account
• Technical logs: Automatically deleted after 90 days
• Support communications: Kept for 2 years for quality assurance

When data reaches the end of its retention period, we securely delete or anonymize it. Anonymized data (where you can't be identified) might be kept longer for research and analytics purposes.

International Data Transfers

Our primary operations are based in Mongolia, but we use cloud services that might store data in different countries. When we transfer your information internationally, we ensure it receives adequate protection through appropriate safeguards.

We only work with service providers in countries that have strong data protection laws or who have agreed to protect your data according to recognized international standards. If you're accessing our platform from outside Mongolia, you're consenting to this international transfer of your information.

Cookies and Tracking Technologies

Our website uses cookies – small text files stored on your device that help us remember your preferences and understand how you use our platform.

Types of Cookies We Use

Essential cookies keep the platform functioning properly – they remember your login status and course progress. Analytics cookies help us understand which features are most useful. We also use preference cookies to remember your settings like language choice or video quality preferences.

You can control cookies through your browser settings, but disabling certain cookies might limit your ability to use some features. Our platform will still work with basic functionality even if you block non-essential cookies.

Children's Privacy

Our courses are designed for learners aged 16 and older. We don't knowingly collect information from children under 16 without parental consent. If you're under 16 and interested in our programs, please have a parent or guardian create the account and supervise your participation.

If we discover that we've accidentally collected data from someone under 16 without proper consent, we'll delete that information immediately. Parents who believe their child has provided us with personal information should contact us right away.

Changes to This Policy

We review and update this privacy policy regularly to reflect changes in our practices or legal requirements. When we make significant changes, we'll notify you via email or through a prominent notice on our platform at least 30 days before the changes take effect.

The "Last Updated" date at the top of this page shows when we last revised the policy. We encourage you to check back periodically, especially before providing new personal information or enrolling in new courses.

Compliance with Mongolian Law

As a company operating in Mongolia, we comply with the Law on Personal Data Protection of Mongolia and related regulations. This includes registering as a data controller with relevant authorities and following local requirements for data processing and storage.

We also align our practices with international standards to serve our global student community effectively. If there's ever a conflict between Mongolian law and international standards, we'll follow the law that provides you with the strongest protection.