Privacy policy

Last updated: August 12, 2026

This page explains what personal data the National Information Technology Park (NITP) collects through this platform, what it is used for, and who it is shared with.

1. What we collect

Account: name, e-mail address, phone number, a hashed form of your password, and an optional profile photo.
Training and examination registrations: family name, given name, national ID number, date of birth, gender, and the Latin-script name required for international certificates.
Payments: order amounts, payment status, your VAT-receipt (E-Barimt) choice — individual or organisation — and, for organisations, the registration number.
Room and coworking bookings: the date, time slot and room you choose.
Feedback: the text you write, your name and contact details.
Technical data: IP address (used only for rate limiting and security) and browser type.

2. What we use it for

Delivering the service: confirming registrations, allocating seats, booking rooms, issuing certificates.
Processing payments and issuing the VAT receipt (E-Barimt) required by law.
Sending you notifications: order status, course reminders, examination information and replies to your feedback.
Security: protecting against unauthorised access and automated abuse.
We do NOT sell personal data to third parties for advertising.

3. Who it is shared with

QPay — the order amount and reference needed to process a payment.
The tax authority’s E-Barimt system — the data required to issue a receipt under Mongolian law.
E-mail and SMS providers — the address or number needed to deliver a notification.
International examination bodies (ICDL, ITPEC, TOPCIT) — only to the extent needed to issue that examination’s certificate.
Competent authorities, where required by law.

4. How long we keep it

Account data is kept while your account is active.
Payment and E-Barimt records are kept for the period required by financial and tax law.
Certificate records are kept so that a certificate’s validity can be verified later.

5. Cookies

itp_session — the strictly necessary cookie that keeps you signed in. It cannot be read by JavaScript.
itp_authed — a hint flag used to show a “signed in” state. It is never used as an authorisation check.
NEXT_LOCALE, itp-theme — remember your language and appearance choice.
All of these are necessary to operate the service. We do not use advertising or tracking cookies.

6. Your rights

View and correct your data — directly in the portal’s Profile section.
Request deletion or restriction of processing — using the contact details below.
We respond within the period set by law.

7. Contact

National Information Technology Park, Baga Toiruu-49, Sukhbaatar District, Ulaanbaatar-210646.
E-mail: info@itpark.mn · Phone: (+976) 11-327123

1. What we collect

Account: name, e-mail address, phone number, a hashed form of your password, and an optional profile photo.

Training and examination registrations: family name, given name, national ID number, date of birth, gender, and the Latin-script name required for international certificates.

Payments: order amounts, payment status, your VAT-receipt (E-Barimt) choice — individual or organisation — and, for organisations, the registration number.

Room and coworking bookings: the date, time slot and room you choose.

Feedback: the text you write, your name and contact details.

Technical data: IP address (used only for rate limiting and security) and browser type.

2. What we use it for

Delivering the service: confirming registrations, allocating seats, booking rooms, issuing certificates.

Processing payments and issuing the VAT receipt (E-Barimt) required by law.

Sending you notifications: order status, course reminders, examination information and replies to your feedback.

Security: protecting against unauthorised access and automated abuse.

We do NOT sell personal data to third parties for advertising.

3. Who it is shared with

QPay — the order amount and reference needed to process a payment.

The tax authority’s E-Barimt system — the data required to issue a receipt under Mongolian law.

E-mail and SMS providers — the address or number needed to deliver a notification.

International examination bodies (ICDL, ITPEC, TOPCIT) — only to the extent needed to issue that examination’s certificate.

Competent authorities, where required by law.

5. Cookies

itp_session — the strictly necessary cookie that keeps you signed in. It cannot be read by JavaScript.

itp_authed — a hint flag used to show a “signed in” state. It is never used as an authorisation check.

NEXT_LOCALE, itp-theme — remember your language and appearance choice.

All of these are necessary to operate the service. We do not use advertising or tracking cookies.