Privacy policy

Who processes your data

Buteyko Clinic Mongolia (“we”) operates amisgal.mn and processes your personal data.

For questions, complaints or requests, call 9191 0990 or use the Contact page.

What we collect

Only what is needed to provide the service:

• Email address — to create your account, sign you in, and send receipts
• Name — to identify and address you
• Password — stored hashed; we cannot read it
• Phone number — optional, used only to contact you
• Purchase history — which course, when, and for how much
• Lesson progress — which lessons you opened and completed
• Technical data — access logs and IP address, for security

Signing in with Google

If you sign in with Google we receive only your email address and name. We never see or store your Google password.

Health-related information

By buying a particular course you may indirectly indicate something about your health. We do not keep this as a medical record, do not pass it to third parties, and do not use it for advertising.

We do not collect information about your conditions, diagnoses or treatment.

Why we use it

• To create and maintain your account
• To give you access to the course you bought
• To send receipts and important notices
• To answer your questions and requests
• To keep records required by law

What we do not do

• We do not sell your data
• We do not pass it to third parties for advertising
• We do not send marketing emails without your consent

Where it is stored

Your data is held on the infrastructure of the following providers, who process it only on our behalf:

• Supabase — accounts and purchase database (servers in South Korea)
• Netlify — website hosting
• Resend — confirmation and password-reset emails
• Google — only if you choose to sign in with Google
• QPay — payments, once payment is enabled. We never receive or store your card details.

How long we keep it

For as long as your account is active. Purchase and payment records are kept for the period required by Mongolian accounting and tax law.

Your rights

Under Mongolia's Law on Personal Data Protection you have the right to:

• See the data we hold about you
• Have incorrect data corrected
• Have your account and associated data deleted
• Withdraw your consent at any time

Security

Connections are encrypted over HTTPS. Passwords are stored hashed. Access to purchased lessons is checked on the server.

No system on the internet is completely secure. If a breach occurs we will notify you as the law requires.

Changes

Any change to this policy will be published on this page and the date above updated.