PRIVACY POLICY
Effective Date: June 7, 2025
Last Updated: June 7, 2025
Website: http://mazala-travel.com
Mazala Travel (“Mazala Travel”, “we”, “our”, or “us”) is a travel and tourism service operated by Digital Consulting Service LLC, a registered company in Mongolia, with invoicing and financial transactions managed through Mazala Limited, a private limited company incorporated in Hong Kong. We are committed to protecting your privacy and ensuring transparency in how we collect, use, and share personal information in accordance with applicable laws in Mongolia, Hong Kong, the Republic of China (Taiwan), and other jurisdictions where we operate.
By using our services, including visiting our website, submitting inquiries, or booking travel experiences, you consent to the practices outlined in this Privacy Policy.
1. SCOPE OF THIS POLICY
This Privacy Policy applies to:
- Personal information collected through http://mazala-travel.com
- Information submitted via booking forms, email, live chat (LINE, Messenger, WhatsApp), and phone inquiries
- Data processed in relation to reservations, marketing, and customer support
2. INFORMATION WE COLLECT
A) INFORMATION YOU PROVIDE
- Identification details: Name, gender, nationality, date of birth
- Contact information: Email, phone number, messaging IDs (e.g., LINE)
- Travel preferences: Dietary needs, activity interests, special assistance
- Payment details: Billing address, credit card info (processed securely via third-party gateways)
B) INFORMATION WE AUTOMATICALLY COLLECT
- IP address, device information, browser type
- Session data, clickstream, cookies
- Language and geolocation (when permitted)
C) INFORMATION FROM THIRD PARTIES
- Social login services (if enabled)
- Travel affiliates or resellers
- Public directories or references, when permitted
3. HOW WE USE YOUR INFORMATION
We use your information to:
- Process bookings and provide travel services
- Contact you about your reservation or inquiry
- Personalize your travel experience
- Comply with tax, accounting, and legal obligations
- Improve website performance and user experience
- Send promotional updates (opt-in only)
4. LAWFUL BASIS FOR PROCESSING
We process your personal data based on:
- Your consent (e.g., for marketing)
- Contractual necessity (e.g., booking fulfillment)
- Legal obligations (e.g., invoice records under Hong Kong laws)
- Our legitimate interests (e.g., service improvements, fraud detection)
5. DATA SHARING AND DISCLOSURE
We may share your data with:
- Payment processors and merchant banks (for invoicing via Mazala Limited, HK)
- Local service providers and tour operators (for on-ground execution)
- Customer support tools (e.g., email, chat, CRM platforms)
- Regulatory bodies or legal advisors if required by law
We do not sell or rent your personal data to third parties.
6. CROSS-BORDER DATA TRANSFERS
As we operate globally:
- Your data may be stored in or transferred to servers located in Mongolia, Hong Kong, or other countries.
- We ensure appropriate safeguards under Hong Kong’s PDPO, Taiwan’s Personal Data Protection Act, and international standards such as Standard Contractual Clauses (SCCs) when needed.
7. DATA RETENTION
We retain your data:
- For the duration of your relationship with us
- For up to 7 years for invoicing and regulatory purposes
- As required by Hong Kong’s Inland Revenue Ordinance, Mongolian tax code, and other applicable laws
8. YOUR RIGHTS
Subject to your jurisdiction, you have the right to:
- Access, update, or delete your personal information
- Withdraw consent (where applicable)
- Object to or restrict processing
- Request data portability
To exercise your rights, contact us at privacy@mazala-travel.com.
9. COOKIES AND TRACKING TECHNOLOGIES
We use cookies and tracking tools to:
- Analyze website usage
- Remember your preferences
- Provide personalized content
You may adjust your browser settings to refuse cookies, but some features may not function properly. See our Cookie Policy for details.
10. CHILDREN’S PRIVACY
Our services are not directed to children under 16. If we learn we have collected data from a child without parental consent, we will delete it promptly.
11. DATA SECURITY
We implement security measures to protect your information:
- SSL encryption
- Limited access based on job role
- Secure payment gateways (PCI-DSS compliant)
However, no system is fully immune to breaches. In case of a data incident, we will notify you and regulators as required.
12. CHANGES TO THIS POLICY
We may update this Privacy Policy from time to time. When we do, the revised version will be posted with an updated effective date. Material changes will be communicated via email or website banners.
13. CONTACT US
Mazala Travel
Operated by Digital Consulting Service LLC
Ulaanbaatar, Mongolia
Email: privacy@mazala-travel.com