Privacy Policy

Welcome to Amrah.mn ("we", "our", or "us"). We operate the website https://amrah.mn and provide an online platform for discovering and booking rural accommodation across Mongolia. This Privacy Policy explains what personal data we collect, why we collect it, and how you can control it.

1. Information We Collect

We collect information in two ways — information you provide directly and information collected automatically.

Account data: name, email address, and password (hashed) when you register.
Social login data: name, email, profile photo, and provider ID when you sign in via Google or Facebook.
Booking data: check-in/check-out dates, guest count, and special requests tied to your orders.
Payment data: transaction references and payment status (we do not store full card numbers).
Usage data: pages visited, search queries, browser type, IP address, and timestamps collected automatically via server logs.

2. How We Use Your Information

We use your data only for purposes necessary to provide and improve our service:

To create and manage your account.
To process and confirm bookings and communicate order updates.
To handle payments and detect fraud.
To send transactional emails (booking confirmations, password resets).
To improve platform performance and fix issues using aggregated analytics.
To comply with legal obligations.

We do not sell your personal data. We share data only in these limited circumstances:

Property hosts: your name, contact details, and booking information are shared with the host of the property you book.
Payment processors: we work with licensed payment gateways (e.g., PePay). They handle payment data under their own privacy policies.
Service providers: hosting, email delivery, and analytics vendors who process data on our behalf under data-processing agreements.
Legal requirements: when required by Mongolian law or a valid government order.

4. Cookies & Tracking

We use essential cookies to keep you logged in and protect forms (CSRF tokens). We may also use analytics cookies to understand how visitors interact with the site. You can disable non-essential cookies in your browser settings; essential cookies are required for the site to function.

When you choose to sign in with Google or Facebook, we receive your name, email address, and profile picture from that provider. We do not receive your social media password and we do not post anything to your social accounts. The information we receive is governed by the provider's own privacy policy in addition to ours.

6. Data Retention

We retain your account data for as long as your account is active. Booking and payment records are kept for 7 years to comply with Mongolian accounting and tax law. You may request deletion of your account at any time; records required by law will be anonymised rather than deleted.

7. Your Rights

You have the right to:

Access a copy of the personal data we hold about you.
Correct inaccurate data.
Request deletion of your data (subject to legal retention obligations).
Object to or restrict certain processing activities.
Withdraw consent where processing is based on consent.

To exercise any of these rights, email us at the address in Section 11.

8. Security

We implement industry-standard safeguards including HTTPS encryption, hashed passwords (bcrypt), and access controls limiting data to authorised personnel. No internet transmission is 100% secure, and we cannot guarantee absolute security.

9. Children's Privacy

Our service is not directed at children under 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

10. Changes to This Policy

We may update this policy from time to time. When we make material changes we will update the "Last updated" date at the top and, where appropriate, notify you by email or an in-app notice. Continued use of the service after changes constitutes acceptance of the revised policy.

11. Contact Us

If you have any questions or concerns about this Privacy Policy, please contact us:

Email: [email protected]
Address: Ulaanbaatar, Mongolia