Privacy & Policy

Effective Date: May 28, 2024                                                                                                                                                      Ulaanbaatar, Mongolia

The Mongol Ecology Center ("MEC") and its Youth Sustainability Corps program ("YSC") prioritize the privacy of all users, particularly young Mongolians aged 15-20 who are the core participants. This Privacy Policy outlines the collection, use, and disclosure of information from users of our website and mobile application (collectively, the "Platform").

Information Collection
We adhere to the principle of data minimization, collecting only two categories of information:
Personally Identifiable Information (PII):
This includes data that can be traced back to an individual, such as name, email address, and optional information like phone number and school affiliation. We gather PII solely when voluntarily provided through program registration, scholarship applications, event sign-ups, or Platform contact forms. This ensures we collect the minimum data necessary for effective program management and deliver targeted resources aligned with YSC's goals of empowering young environmental stewards. Additionally, PII may be used to connect you with relevant opportunities, such as mentorship programs or internships, based on your qualifications and interests.
Non-Personally Identifiable Information (Non-PII):
This encompasses data that does not identify an individual, such as device type, operating system, IP address, browsing activity on the Platform, and anonymized survey responses. This information is collected automatically to enhance the Platform and user experience. For instance, we may use browsing activity to identify areas requiring improvement or prioritize content development based on user interests. This data-driven approach allows us to continuously optimize the Platform for functionality and design.
Usage Data:
The Platform automatically collects anonymized data about your usage patterns. This includes accessed pages, features utilized, timestamps, durations, and device information (operating system, browser type). This data helps us understand how users navigate the Platform and identify areas for improvement.
Content Submissions:
You have the option to contribute content like comments, photos, and videos to the Platform. Be mindful that such content may contain your or others' PII. It's important to seek consent before including any identifiable information about others.

Data Usage for a Fulfilling YSC Experience
The information we collect is used for specific purposes that directly benefit your YSC experience:
Platform Functionality:
To provide a smooth and efficient user experience, we use data to maintain and improve the Platform's functionalities.
Account Management:
Your PII facilitates registration and allows us to manage your user account effectively.
Essential Communication:
We use your email address to send critical updates about the Platform, including changes to terms, conditions, and privacy policies. Supportive Environment:
We leverage usage data to identify areas where we can enhance user support and address your inquiries efficiently.
YSC Program Engagement:
We strive to personalize your YSC experience by providing relevant program information, event updates, and opportunities that align with your interests. This may involve using anonymized usage data to tailor recommendations.
Data-Driven Improvement:
By analyzing anonymized usage data, we can identify trends and user behavior patterns. This allows us to continuously improve the Platform's features and functionalities to better serve our young Mongolian audience.
Legal Compliance:
We adhere to all applicable Mongolian laws and regulations regarding data privacy.

Use of Information
The information collected serves the following purposes:
Program Administration:
Effectively delivering program information about events, workshops, scholarships, and relevant content. Additionally, we use your information to process applications and registrations, and track participation in YSC activities. This ensures efficient program delivery and allows us to tailor resources to your specific interests and learning goals within the YSC's mission of fostering responsible environmental citizenship among Mongolian youth.
Platform Improvement:
Personalizing your user experience by recommending relevant content, programs, or resources based on your interests and activity. Non-PII also helps us improve the Platform's functionality, design, and user experience. For instance, we may use heatmaps to identify areas of high user traffic and prioritize content development based on browsing patterns. This continuous process ensures the Platform remains informative, engaging, and meets the evolving needs of YSC participants.
Legal Compliance:
Maintaining compliance with all applicable legal and regulatory requirements, such as those relating to data protection or program reporting. This ensures responsible data handling practices and adherence to Mongolian laws. We are committed to transparency and accountability in our data collection practices.

Your Responsibility in Safeguarding Your Information
In addition to the security measures we implement, you also play a crucial role in protecting your information. Here are some best practices to keep your information secure:
Strong Password Selection:
Your password serves as the primary defense for your account. Select a strong password with a minimum of 12 characters, incorporating a combination of uppercase and lowercase letters, numbers, and symbols. Refrain from using easily guessable information like birthdays, names, or pet names.
Discretion in Online Information Sharing:
While the YSC Platform is a fantastic space to connect with other young sustainability enthusiasts, exercising caution regarding online information sharing is vital. Avoid sharing sensitive information like your home address, phone number, or financial details.
Phishing Attempt Awareness:
Phishing attacks are emails or messages designed to deceive you into revealing personal information. Be wary of emails or messages that appear to be from MEC but request you to click on suspicious links or provide your password. If the legitimacy of an email or message is unclear, do not click on any links or attachments, and contact MEC directly. By following these best practices, you can significantly contribute to keeping your information safe and secure.

Data Security
We employ industry-standard security measures to safeguard your PII. These measures include secure servers, encryption technologies, and access controls to protect your data from unauthorized access, disclosure, alteration, or destruction. We understand the importance of data security, especially for young users, and we take all reasonable steps to ensure your information is protected. However, no internet transmission or electronic storage can be guaranteed to be completely secure. While we cannot guarantee the absolute security of your information, we are committed to using all reasonable means to protect it, including regular security assessments and updates to our security protocols.

Security Measures: Protecting Your Information
We implement industry-standard security measures to safeguard your information from unauthorized access, disclosure, alteration, or destruction. This includes:
Secure Data Storage:
We employ secure servers that utilize robust encryption technology to protect sensitive data like passwords. This encryption renders your data unreadable, making it virtually impossible for unauthorized individuals to access it even if intercepted.
Granular Access Controls:
We implement granular access controls to restrict access to your information to authorized personnel with a legitimate business need. This ensures that only a limited number of MEC employees and trusted service providers have access, and they are obligated to adhere to stringent data security protocols.
Regular Security Assessments and Penetration Testing:
We conduct comprehensive security assessments at regular intervals to identify and address any potential vulnerabilities in our systems. These assessments encompass penetration testing, where ethical hackers attempt to exploit weaknesses, and vulnerability scanning, which identifies known security flaws. By proactively identifying and patching these vulnerabilities, we significantly reduce the risk of unauthorized access to your information. However, it is important to acknowledge that no internet or electronic storage system is absolutely impenetrable. While we strive to maintain robust security measures, we cannot guarantee complete security from all threats. The inherent risks of the internet and the possibility of security breaches still exist. We are committed to taking all reasonable steps to mitigate these risks and will promptly notify you in the event of any security incident that affects your information.

Your Choices
We empower you to manage your data privacy. You have the right to access, update, or delete your PII through your account settings. Additionally, you can opt-out of receiving marketing communications from us. We respect your preferences and will honor your opt-out choices. Here's how:
Access and Update:
You can access and update your PII at any time by contacting us at [email protected]. This empowers you to maintain the accuracy of your information and ensure it reflects any changes in your contact details or interests.
Deletion:
You have the right to request deletion of your PII by contacting us at [email protected]. Please note that we may need to retain some information for legal or record-keeping purposes, such as program participation records required by funders. We will retain a record of your request to ensure we do not contact you again in the future, and we will explain any limitations to data deletion upon request.

Data Disclosure with Safeguards
We understand the importance of responsible data handling. We may disclose your information only to trusted third-party service providers who assist us in operating the Platform (e.g., data storage and communication providers). These disclosures are strictly limited to the information essential for them to fulfill their specific tasks and maintain the Platform's functionality. We have strict contractual obligations in place with these providers to ensure they adhere to the same high standards of data privacy that we do. In rare circumstances, we may also disclose your information when legally mandated to do so, or if we have a good faith belief that such disclosure is necessary to:
Comply with legal requirements or court orders.
Protect the rights, property, or safety of MEC, its users, or the public.
Prevent or investigate potential misconduct related to the Platform.

Data Retention for Defined Purposes
We retain your information only for as long as it is necessary to fulfill the purposes outlined in this Policy. Once your account becomes inactive, or the specific purpose for which the data was collected is no longer relevant, we will remove your information from our systems. However, there may be instances where we are required to retain certain data to comply with legal obligations, resolve disputes, or enforce our agreements.

Children's Privacy
Protecting children's privacy is paramount to MEC and the YSC program. The Platform is not directed towards children under 15. We do not knowingly collect PII from children under 15 and comply with relevant Mongolian laws regarding children's online privacy, such as the Law on Personal Information Protection. If you are a parent or guardian and believe your child has provided us with PII, please contact us at [email protected]. We will take steps to remove the information from our records in accordance with applicable laws.

Changes to this Privacy Policy
This Privacy Policy may be updated periodically to reflect changes in our practices, technological advancements, or to comply with legal requirements. We will notify users of any material changes through the Platform or contact.