Green Shield Mongolia · Legal

Privacy Policy

Last updated: 2026-05-02

Green Shield Mongolia (a programme of the Green Finance Initiative, registered in Ulaanbaatar, Mongolia — “we”, “us”, “our”) is committed to protecting your personal data. This policy explains what we collect when you visit green-shields.com or make a donation, why we collect it, how we use it, and the rights you have over it.

1. Who is the data controller?

The Green Finance Initiative is the data controller for personal data collected through this site. You can reach us at maralgoo@green-shields.com.

2. What data we collect

Information you give us

Account information: when you create a donor account — your name, email and a hashed password.
Donation details: name, email, project region selection, donation amount, optional gift recipient details.
Payment information: processed by HiPay (hipay.mn). HiPay handles all card data; we receive only a payment reference and status. We do not store card numbers on our servers.
Communications: any message you send us by email, contact form, or phone.

Information collected automatically

Technical: IP address, browser, device, referring URL, pages viewed, language preference.
Cookies and local storage: a small number of strictly-necessary items, including your auth session cookie and your selected language. We do not use third-party advertising cookies.

3. Why we use your data

To process donations and send receipts.
To create and operate your donor account, including the dashboard.
To send the survival reports you have explicitly requested at year 1 and year 3.
To respond to your enquiries.
To improve the site and detect abuse.
To meet legal, accounting, and audit obligations.

4. Legal bases (GDPR / UK GDPR)

Contract: processing your donation and delivering the planting commitment.
Consent: survival-report emails, gift-card delivery, marketing (only if opted in).
Legitimate interests: security, analytics, and protecting our work.
Legal obligation: tax, anti-fraud, audit.

We share personal data only with:

HiPay (hipay.mn) — our payment processor, for the limited purpose of processing your donation.
Email-delivery and analytics service providers, under data-processing agreements.
Auditors and authorities where required by law.

We never sell your data.

6. International transfers

Some of our processors are located outside Mongolia (including the EEA, UK, US, and Singapore). Where we transfer personal data to those jurisdictions we rely on Standard Contractual Clauses or equivalent safeguards.

7. How long we keep data

Donation records: 7 years (audit and tax).
Account data: until you ask us to delete it.
Email communications: up to 3 years from last contact.
Web analytics: up to 26 months in aggregated form.

8. Your rights

You have the right to access, correct, delete, restrict, or port your personal data, and to object to processing. EEA / UK residents may complain to a supervisory authority. To exercise any right email maralgoo@green-shields.com.

9. Children

This site is not directed to children under 16, and we do not knowingly collect data from them.

10. Changes

If we update this policy we will revise the “Last updated” date above and, where the change is material, notify you by email or a notice on the site.

11. Contact

Green Finance Initiative
Ulaanbaatar, Mongolia
maralgoo@green-shields.com
+976 9914 7326