Who is responsible for your information
META GROUP LLC owns and operates Winter Mongolia and is responsible for the personal information described in this policy. Questions and privacy requests can be sent to info@wintermongolia.com.
Information we collect
Depending on how you use the service, we may collect:
- your name, email address, optional phone number, and group size;
- preferred dates, selected departures, trip interests, inquiries, notes, and conversation messages;
- booking references, quotes, payment deadlines, payment status, provider references, and confirmation details;
- information needed to evaluate requested arrangements, accessibility, safety, dietary, or other operational needs;
- essential session cookies and security tokens used for administration or limited guest access; and
- technical records such as timestamps, application errors, security events, and basic request information.
Payment-card details are entered with the payment provider. Winter Mongolia does not store complete card numbers or card security codes.
How we use information
- to answer inquiries and recommend suitable experiences;
- to review requests, confirm availability, prepare quotes, accept payment, and operate bookings;
- to communicate changes, practical instructions, and customer-support responses;
- to protect customers, administrators, the website, and payment workflows from misuse;
- to maintain business, accounting, dispute, and compliance records; and
- to understand and improve the reliability and usability of our services.
Service providers and international processing
We use service providers where necessary to operate the website and deliver services. These may include AWS for hosting, authentication, storage, and infrastructure; Neon for PostgreSQL hosting; Resend and Zoho for email; Cloudflare for domain and DNS services; YouTube for embedded video; and Golomt Bank and relevant card networks for payment processing.
Some providers process information outside Mongolia. We disclose only the information reasonably needed for their role and expect them to protect it under their contractual and legal obligations. We may also disclose information when required by law, to protect safety or rights, or as part of a legitimate corporate transaction.
How long we retain information
We retain information only as long as reasonably needed to provide the requested service, operate and secure the business, maintain accounting and booking records, meet legal obligations, and resolve disputes. Retention can differ by record type. Short-lived access links and browser sessions expire, while booking and payment records may need to be kept longer. We delete or anonymize information when it is no longer reasonably required.
How we protect information
We use access controls, multi-factor authentication for administrators, encrypted network connections, restricted cloud storage, environment-specific credentials, and time-limited guest access. No internet service can guarantee absolute security, so please contact us promptly if you believe an inquiry or booking link, email account, or personal information has been compromised.
Your choices and requests
You may ask us to explain the information we hold about you or request an appropriate correction, copy, restriction, or deletion. We may need to verify your identity and may retain information where required for legal, accounting, security, or dispute purposes.
Winter Mongolia services are arranged by adults and are not directed to children acting independently. A responsible adult should provide only the information about younger travelers that is necessary for the trip.
Updates and contact
We may update this policy when our practices, providers, or obligations change. The effective date above identifies the current version. Send privacy questions or requests to info@wintermongolia.com or use the contact details shown on this page.
Related policies