Health Point Privacy Policy

1. General Information, Data Collection, Processing, and Use

The Hpoint loyalty system collects information from individuals and legal entities(hereinafter referred to as "User" or "Customer") in the following cases:
The Data Controller collects, processes, and uses information based on the electronic consent provided by the User.
The User’s personal data is collected, processed, and used to ensure the continuous, reliable, and proper operation of “Hpoint loyalty system”, to improve the system, and to provide simple, user-friendly services that meet the User’s interests. The Data Controller does not collect, use, or transfer the data for purposes other than those specified herein.

2. Contact Information of the Data Controller

The Data Controller is Health Point LLC, a company established under the laws of Mongolia.

Users can address any questions, requests, or complaints related to this Privacy Policy to healthpointmongolia@gmail.com.

3. Types of Data Collected, Processed, and Used

The Data Controller collects, processes, and uses the following data to ensure the proper and reliable operation of “Hpoint loyalty system” and to provide full user functionality:
- User’s name, date of birth, gender, address, postal address, order information, order process and confirmation, contact number, order and transaction history, and profile image;
- Recipient’s name, amount, transfer date, and transaction confirmation details related to transactions made through “Hpoint loyalty system”;
- Registration and cart data generated during use of “Hpoint loyalty system”;
- User’s requests, complaints, and related resolution information;
- IP address, web browser, operating system, login time, and geolocation data.

4. Conditions for Processing and Using User Data

The Data Controller processes and uses User data in the following cases:
- To deliver ordered goods and verify related information;
- To send notifications and updates to the User’s phone or email;
- To use the User’s address for delivery purposes;
- To identify and verify Users;
- To review and respond to complaints;
- To deliver information about new products, services, and discounts;
- To inform Users about new offers from suppliers.

The Data Controller stores and processes the User’s data from the time of registration until the account is closed, and respects the User’s right to privacy under the cybersecurity regulations approved by the Government of Mongolia.

5. Purposes of Data Use

User data will be used for the following purposes:
- Account verification;
- Bonus and reward calculation;
- Improving application services and user experience;
- Communication and advertisement delivery;
- Monitoring security and system performance;
- Compliance with legal obligations.

6. Disclosure of User Data

User data may be disclosed only when required by Mongolian law or upon request of authorized state institutions.
Except for such cases, the Data Controller will not disclose the User’s personal data to the public.

7. Transfer of User Data

The Data Controller will not transfer, distribute, or sell User data to third parties for profit-making purposes. Authorized personnel appointed by the Data Controller may access User data strictly within their professional duties. Any unauthorized disclosure or misuse of such data is strictly prohibited and subject to legal consequences.

8. Changes and Updates to the Privacy Policy

Health Point LLC reserves the right to modify this Privacy Policy. Any changes will be published on the Hpoint loyalty system website, and Users are responsible for reviewing them. If the Privacy Policy changes after an order is placed, the previous version will remain valid until the order is completed.

9. Account Deletion

Users have the right to delete their accounts at any time by contacting info@healthpoint.mn

Upon deletion, the following data will be permanently removed:
- Personal information (name, address, phone number, stored payment methods);
- Login information (email address, password);
- User settings and preferences.

Certain data may be retained temporarily for legal or accounting purposes, including order and payment records and service interaction history, after which they will be securely deleted.
Once deleted, accounts cannot be recovered. Previous orders remain valid, but order history access will be disabled.