This policy explains how Ulaanbaatar Buyan LLC processes and protects personal data through its public website, customer accounts, online shop, and online memorial-service ordering.
Data we process
- Account and contact data — name, phone number, optional email address, protected password hash, and phone-verification status.
- Order data — selected services or goods, complex, date, amount, delivery details, and the deceased person's name and birth/death years entered for a memorial-service order.
- Payment data — QPay invoice identifier and status, and verified transaction references. We do not store full bank-card numbers or internet-banking passwords.
- Proof of service — private photos showing completion of a memorial service. They are available only to the order owner and authorised staff through protected links.
- Technical data — sessions, security logs, request IP address, and notification-delivery state needed for reliability, audit, and fraud prevention.
How we use data
- to create and protect accounts and verify phone ownership;
- to accept orders, verify payments, and show service progress;
- to send SMS or email updates about orders, payments, and service status;
- to answer requests and meet security, audit, and legal record-keeping duties.
Service providers
Only the data necessary to provide a service may be shared with configured providers for QPay payment verification, SMS/email delivery, hosting, and storage. Those providers must not use the data for unrelated purposes.
Retention and security
We retain data for as long as needed to fulfil orders, keep financial and legal records, and resolve disputes, then delete or anonymise it where applicable. Data is transmitted over HTTPS; passwords are hashed; private photos and documents are kept outside the public web directory; and staff access is restricted by role and managed complex.
Cookies and sessions
We may use cookies and sessions required for sign-in, cart state, language choice, and security. We do not use them for unauthorised advertising profiles.
Your rights
You may ask to access or correct your data and, where permitted by law, request deletion or restriction. Some order and payment records may need to remain in the legal archive.
Children's data
Online registration and payment services are intended for adults. We do not knowingly collect children's data.
Contact
- Phone: 7016-2222
- Email: info@ulaanbaatarbuyan.mn
Last updated: 23 July 2026.