PRIVACY POLICY

Last Updated: April 2026

At The Legend. Mongolia, operated by Sunrise Travel Bureau LLC, we hold your privacy in the highest regard. This policy outlines our commitment to transparency and the rigorous standards we apply to safeguard the personal information you entrust to us.

1. THE DATA WE COLLECT

To provide a seamless "Legend" experience, we collect information that identifies you as an Envoy:

• Identity Data: Full name, nationality, passport details (for domestic flights and permits), and date of birth.
• Contact Data: Email address, phone number, and physical address.
• Financial Data: Payment details processed securely via Bonum Gateway. (Note: We do not store full credit card numbers on our servers).
• Expedition Data: Dietary requirements, medical disclosures, travel preferences, and shirt sizes for custom gear.
• Digital Data: IP address, browser type, and usage patterns collected via cookies for website optimization.

2. HOW WE ACTIVATE YOUR DATA

Your information is used strictly to curate and execute your journey:

• Logistics: To secure luxury accommodations, domestic flights, and national park permits.
• Personalization: To carve your name on your Golden Gerege and customize your Envoy Passport.
• Communication: To send pre-departure briefings and "Legend Club" updates.
• Safety: To coordinate emergency protocols and medical support if required.

3. STEWARDSHIP & SHARING

We do not sell, rent, or trade your personal data. We only share necessary fragments with trusted partners essential to your expedition:

• Aviation & Transport: Domestic flight operators and private fleet drivers.
• Hospitality: Luxury camps and hotel partners.
• Payment Gateways: Bonum Gateway, Apple Pay, and Google Pay for secure transaction processing.
• Legal Compliance: Only when mandated by Mongolian or International law.

4. DATA SECURITY PROTOCOLS

We implement "Institutional-Grade" security measures:

• Encryption: All data transmitted via our website is protected by high-level SSL (Secure Sockets Layer) encryption.
• Access Control: Only authorized Concierge and Expedition staff have access to sensitive personal files.
• Secure Storage: Digital records are stored on encrypted servers with regular security audits.

5. COOKIES & DIGITAL FOOTPRINT

We use cookies to enhance your browsing experience. These small files help us remember your preferences and understand how you interact with our "Realms." You may disable cookies in your browser settings, though some website features may be limited.

6. YOUR SOVEREIGN RIGHTS

As an Envoy, you have the right to:

• Access: Request a copy of the personal data we hold about you.
• Rectify: Update or correct any inaccuracies in your profile.
• Erase: Request the deletion of your data (subject to legal or tax retention requirements).
• Withdraw: Opt-out of any "Legend Club" marketing communications at any time.

7. INTERNATIONAL DATA TRANSFERS

As a global operation with hubs in Montreal, Canada, and Ulaanbaatar, Mongolia, your data may be processed across borders. We ensure that all international transfers comply with recognized data protection standards to maintain the integrity of your information.

8. DATA RETENTION

We retain your information for as long as you are a member of The Legend Club to maintain your status (Envoy, Pathfinder, Guardian, Legend) and for the period required to comply with Mongolian tax and legal obligations.

9. THIRD-PARTY LINKS

Our "Journal" may contain links to external cultural or historical sites. We are not responsible for the privacy practices of external entities and encourage you to review their policies.

10. CONTACT OUR CONCIERGE

For any inquiries regarding your data or this policy, please contact our privacy liaison: