Privacy policy

What we collect

Through registration and inquiry forms we receive your name, phone number, email address, organization name, job title, and any notes or requests you write yourself. If you sign in with Google, we receive your name, email, and profile picture from Google. Our forms use a hidden anti-bot field and submission rate limits. If you allow measurement, Google Analytics additionally receives a random browser identifier (a cookie), your IP address, browser and device type, the addresses of pages you view and the names of buttons you click — see “Cookies and measurement” below.

Phone calls: when you call our phone number, or a member of our staff calls you, a record of the call reaches our internal system from the system of our telephone service provider, CallPro — your phone number, the date, time and length of the call, its direction (incoming or outgoing), whether it was answered, and which member of staff took it. Our staff may add a short note about the call. We match the call to your earlier request or registration by phone number and use it to return calls we missed. We do not keep the caller name shown by the phone system, and our system does not keep copies of call recordings.

The ad or link that brought you

When you submit a form, we receive with it the domain of the site that sent you here — only the domain, for example www.facebook.com, not the full address — and the path of our page (the one an ad or tagged link brought you to, otherwise the page with the form), with any parameters other than ad and link tags removed. If you arrived through one of our ads or a tagged link (one carrying utm_*, fbclid, gclid or campaign parameters), we keep those tags, that domain and that path in this browser tab only, so they are not lost as you move between pages and we can tell which ad or link brought you; if you arrive through several ads or links in the same tab, only the most recent one is kept. This is not a cookie, and the site does not need it to work — if your browser blocks it (for example in private mode), the site and its forms work as normal. It is not sent anywhere and is deleted when you close the tab; it reaches us only with a form you submit, and is then kept for as long as that form’s details. We never make it public and use it only to count, in internal reports, which ads and links work. If you prefer it not to reach us, close the tab before submitting a form and open the site again by typing its address.

How we use it

We use this information to confirm your training registration, contact you about payment and schedule, prepare proposals for organizational requests, and share information about programs you have expressed interest in. We do not sell your data or pass it to third parties for advertising.

How long we keep it

Data is stored in Dale Carnegie Mongolia’s internal systems with access control and change logging. How long depends on the type: inquiry and contact-form details are kept for 24 months after the last contact; course registration, payment and certificate records are kept for 5 years to meet accounting and record-keeping requirements. After that we delete the data or render it non-identifying.

In call records, we keep your full phone number for 180 days from the date of the call and then delete it (only its last three digits remain in the record); the original notification from the phone system is kept for 30 days. Call records not linked to any of our requests or registrations are deleted entirely after 180 days; linked call records are kept together with that request or registration and deleted along with it. If our staff create a new request from your call, your phone number is saved with that request and kept for the same period as the request (see above).

Where your data is stored

Our database runs on Supabase, in a Singapore data center. The website is hosted on Vercel. If you choose to sign in with Google, Google performs the sign-in. Google Analytics also measures site usage, but only if you allow it in the cookie bar — if you do not, that request is never made. If you register for a course, or submit the contact, program-interest or corporate-inquiry form, we send an acknowledgment through Resend, an email delivery service, which receives your email address, your name, and — for course registrations — the course details. Forms use Cloudflare Turnstile for bot checking. This means your data is processed outside Mongolia. We do not sell or pass your data to any third party beyond these.

In addition, our phone service is provided by CallPro LLC, a Mongolian company: it connects calls and keeps the call history and — if calls are recorded — call recordings in its own systems, for its own retention periods. Call records reach our system from CallPro; we do not pass CallPro any of your information other than your phone number (no name, email or request details).

Cookies and measurement

Apart from storage the site needs in order to work (your sign-in session and the temporary contents of a form you are filling in), no cookie is set by default. For the tab-only record of the ad or link that brought you, see “The ad or link that brought you” above. We use Google Analytics 4 for measurement, and it loads only after you choose “Allow”. · Purpose: to count which pages are viewed and how many people start a form versus finish it, so we can improve the site. · Controller: Dale Carnegie Mongolia, info@dalecarnegie.mn, +976 7000 0330. · Data collected: a randomly generated browser identifier (a cookie), your IP address, browser and device type, the addresses of pages you view, and the names of buttons you click. Information that identifies you directly — name, phone, email — is never sent to measurement. · Duration: 180 days (6 months) for the browser cookie, 14 months for the records held in Google Analytics. · Publication: never made public; used only in aggregate in internal reports. · Third party: Google LLC, outside Mongolia. Google Signals and ad personalization are switched OFF, so the data is not used for advertising. · Withdrawing consent: use the “Cookie settings” button below, or the same button in the footer of every page, at any time. The moment you decline, sending to Google stops and the _ga cookie in your browser is deleted.

Your rights

You may access your data and obtain a copy of it, have inaccurate data corrected, have it deleted, ask us to restrict processing, withdraw consent at any time, and opt out of marketing messages. Withdrawing consent does not affect the lawfulness of processing carried out before you withdrew it. Mongolia’s Law on Personal Data Protection grants you rights beyond those listed here.

Minors

We do not register anyone under 18 for a course through this website. For teen programs we register participants by contacting a parent or guardian directly. If a minor’s data has reached us without consent, please tell us at the address below and we will delete it immediately.

Requests and complaints

Send requests to exercise the rights above to the email address below. We respond within 30 days of receiving a request; if a request is complex and we need longer, we will tell you within that period. If you are not satisfied with our response, you may complain to the National Human Rights Commission and the competent authority.

Payment and cancellation

Course fees, cancellation, refunds and transfers are covered separately in the Terms of service. Terms of service

Privacy contact

For privacy questions or requests, write to: info@dalecarnegie.mn