Privacy Policy

Last Updated: March 15, 2025

At Qestra Core, we respect your privacy and are committed to protecting your personal information. This policy explains how we collect, use, and safeguard data when you interact with our AR development training programs and services. We operate under Mongolia's data protection framework and maintain international best practices for user privacy.

Information We Collect

We collect different types of information based on how you interact with our services. Some data you provide directly when enrolling in programs or contacting us. Other information is gathered automatically through your use of our website and learning platforms.

Personal Information You Provide

  • Name, email address, and phone number when you register for courses or request information
  • Educational background and professional experience for program placement purposes
  • Payment details when you enroll in paid training programs (processed through secure third-party providers)
  • Project work, assignments, and learning materials you create during training
  • Communication history including support inquiries and feedback

Automatically Collected Data

  • Device information including browser type, operating system, and screen resolution
  • IP address and general location data (city and country level only)
  • Website usage patterns including pages visited, time spent, and navigation paths
  • Learning platform analytics such as course progress, module completion, and assignment submissions
  • Technical logs for system security and performance monitoring

We don't collect sensitive personal data like health records, political affiliations, or religious beliefs. Our focus stays on information relevant to delivering quality AR development education.

How We Use Your Information

Your data helps us provide better training experiences and maintain our educational services. We use information purposefully and don't engage in practices that feel invasive or unnecessary.

  • Processing course enrollments and managing your participation in training programs
  • Communicating about schedules, assignments, and program updates
  • Providing technical support and responding to your questions
  • Assessing learning progress and offering personalized guidance
  • Improving course content based on student feedback and performance data
  • Sending relevant updates about new programs or schedule changes (you can opt out anytime)
  • Maintaining platform security and preventing unauthorized access
  • Meeting legal obligations under Mongolian law

We never sell your personal information to third parties. Your data isn't a product for us—it's a tool to serve you better.

Data Storage and Protection

We store your information on secure servers and implement multiple layers of protection. Our systems use industry-standard encryption, and access is restricted to authorized team members who need it for their work.

Physical security measures protect our Mongolia office where some data is processed. Digital security includes encrypted data transmission, regular security audits, and protected backup systems. We maintain separate development and production environments to prevent accidental data exposure.

How Long We Keep Your Data

Active student records remain accessible during your enrollment and for two years after program completion. This allows you to reference course materials and maintain access to your project portfolio. After this period, we archive personal identifiers but may retain anonymized learning data for quality improvement.

Financial records are kept for seven years as required by Mongolian tax law. Communication logs are typically deleted after three years unless needed for ongoing support or legal purposes.

If you request account deletion, we remove personal information within 30 days. Some data may need to remain for legal compliance, but it's isolated and no longer used for operational purposes.

Sharing Your Information

We share data only when necessary to provide services or meet legal requirements. Here's who might receive your information and why:

  • Payment processors handle transaction details when you enroll in paid programs. They operate under their own privacy policies and security standards
  • Cloud service providers host our learning platform and store course materials. They're contractually bound to protect your data
  • Email service providers help us send course updates and communications. We share only necessary contact information
  • Analytics providers receive anonymized usage data to help us understand how students interact with our platform
  • Legal authorities may receive information if required by court order or Mongolian law enforcement

We don't share student work or project portfolios without explicit permission. If you create something during training that we'd like to showcase as an example, we always ask first.

Third-party service providers are carefully vetted. They can only use your data for the specific services they provide to us—nothing else.

Your Privacy Rights

You have control over your personal information. Under Mongolian data protection principles and our commitment to transparency, you can:

  • Access your data — Request a copy of the personal information we hold about you
  • Correct inaccuracies — Update outdated or incorrect information in your profile
  • Request deletion — Ask us to remove your personal data (with some legal exceptions)
  • Withdraw consent — Opt out of marketing communications or data processing based on consent
  • Export your work — Download projects and assignments you created during training
  • Object to processing — Challenge how we use your information in specific circumstances
  • Restrict processing — Limit how we use your data while we address your concerns

How to Exercise These Rights

Send your request to info@qestracore.com with your name and the specific action you want. We'll verify your identity and respond within 15 business days. If your request is complex or requires extensive data retrieval, we might need up to 30 days and will keep you informed of progress.

For account access or basic profile updates, you can log into your student portal directly. The help section there walks through common data management tasks.

There's no fee for reasonable requests. If you make multiple requests for the same information within a short time, we might charge a small administrative fee to cover processing costs.

Cookies and Tracking Technologies

Our website uses cookies—small text files stored on your device—to remember your preferences and understand how people use our site. We're straightforward about what we track and why.

Types of Cookies We Use

  • Essential cookies keep the site working properly. They remember your login status and security settings
  • Preference cookies store your language choice and display settings
  • Analytics cookies help us see which pages are useful and where people have trouble
  • Performance cookies track page load times and identify technical issues

We don't use advertising cookies or cross-site tracking. Your browsing activity on our site stays on our site.

Most browsers let you control cookies through their settings. You can block or delete cookies, though some site features might not work as smoothly. The help section of your browser explains how to manage these preferences.

Data Security Measures

We take security seriously because we know how much you trust us with your information. Our approach combines technology, policies, and team training.

  • SSL/TLS encryption protects data transmission between your device and our servers
  • Encrypted storage secures data at rest using industry-standard protocols
  • Access controls limit who can view personal information based on job role
  • Two-factor authentication protects administrative accounts
  • Regular security audits identify and fix potential vulnerabilities
  • Automated backup systems protect against data loss
  • Incident response procedures guide our team if a breach occurs
  • Staff training ensures everyone understands privacy responsibilities

No system is completely immune to attacks, but we maintain vigilance and update our defenses as threats evolve. If a security incident affects your data, we'll notify you promptly and explain what happened and what we're doing about it.

Student Work and Intellectual Property

Projects and assignments you create during training belong to you. We maintain copies for grading and feedback purposes, but ownership stays with you.

Occasionally we like to showcase exceptional student work in promotional materials or as course examples. We never do this without your written permission. If you agree, you can revoke consent later and we'll remove your work from public materials.

Collaborative projects involve multiple students, and everyone maintains rights to their individual contributions. Group work used for promotional purposes requires consent from all participants.

Your portfolio is yours to use however you want. Share it with potential employers, post it online, include it in job applications—no permission needed from us.

Children's Privacy

Our AR development programs target adults and professionals. We don't knowingly collect information from anyone under 16 years old. If a parent or guardian believes we've accidentally gathered data from a minor, contact us immediately and we'll delete it.

For youth-focused workshops (ages 16-18), we require parental consent before enrollment. These programs have additional privacy protections and limited data collection.

International Data Transfers

We primarily store data within Mongolia, but some cloud services operate servers in other countries. When data moves internationally, we ensure adequate protection through:

  • Contracts requiring service providers to maintain security standards
  • Encryption during transfer to prevent interception
  • Limitation of transferred data to only what's necessary for the service
  • Regular audits of international service providers

You can request information about where your data is stored by contacting our privacy team.

Changes to This Policy

Privacy practices evolve as technology changes and regulations develop. We review this policy annually and update it when necessary. Significant changes are announced through email and a notice on our website at least 30 days before taking effect.

The "Last Updated" date at the top of this page shows when we made the most recent changes. Previous versions are available on request if you want to see what changed.

Continued use of our services after policy updates means you accept the changes. If you disagree with modifications, you can close your account before they take effect.

Questions About Privacy?

We're happy to discuss our privacy practices and address any concerns. Reach our team at:

Email: info@qestracore.com

Phone: +976 9111 7971

Address: Их Монгол Улсын гудамж, БЗД-ийн 26-р хороо. Энканто хотхон 305-1, Ulaanbaatar, Mongolia

We aim to respond to privacy inquiries within three business days. Complex requests might take longer, but we'll keep you informed of progress.