Meridian operates an online platform that lets independent merchants run their own storefronts. This policy explains what personal data we collect, why, who we share it with, and the choices you have. It applies to shoppers, merchants (“vendors”), and visitors to our websites.
1.Who we are
“Meridian” (“we”, “us”, “our”) refers to
[Legal Entity Name], a company registered in Mongolia under
registration number [Company Registration No.], with its registered
office at [Registered Address]. We operate the Meridian platform and
the websites at meridian.mn and its subdomains, including vendor storefronts hosted at
{store}.meridian.mn and on connected custom domains.
For privacy questions, contact us at support@meridian.mn.
2.Scope & our role
Meridian is a multi-vendor platform. Each vendor operates an independent store and sells directly to shoppers. This creates two distinct roles for personal data:
- Platform data we control. Account registration, platform security, billing, aggregate analytics, and the operation of shared services (payments, fiscal receipts, delivery, chat). For this data, Meridian is the controller.
- Store data the vendor controls. When you place an order on a vendor’s storefront, that vendor independently controls the customer data for their store and is responsible for its own use of it (for example, their own marketing or customer service). Meridian processes that data on the vendor’s behalf to operate their store.
This policy covers Meridian’s own processing. A vendor’s additional uses of your data are governed by that vendor’s own privacy practices.
3.Data we collect
Account & profile
- Shoppers: name, email address, phone number, and the password or login credential you set.
- Vendors: business name, contact details, and identity/business documents you upload for verification, which may be processed by automated document-extraction tools.
Orders & transactions
- Products viewed, carts, and orders placed.
- Delivery details: recipient name, phone number, and shipping address.
- Order amounts, status, and history.
Payment data
Payments are processed through QPay and by bank transfer. We receive confirmation of payment status and transaction references. We do not collect or store full bank-card numbers — these are handled by the payment provider.
Fiscal / tax data
To issue tax-compliant receipts through Mongolia’s eBarimt system, we process the information required by law, which may include a buyer’s registration number for company (B2B) receipts and the line items of the purchase.
Communications
- Messages you exchange with a store’s assistant or staff, including conversations over Facebook Messenger where a vendor has connected a Facebook Page.
- Chat sessions with our AI shopping and merchant assistants (see Section 5).
- Emails and support requests you send us.
Technical & usage data
- IP address, device and browser type, and approximate location derived from your IP.
- Pages viewed, referring URLs, and interactions, collected to operate, secure, and improve the platform (including rate-limiting to prevent abuse).
- Cookies and similar technologies (see Section 8).
4.How we use data
- Create and manage accounts and authenticate logins.
- Process orders, payments, and refunds, and keep you updated on order status.
- Arrange delivery through our logistics partner.
- Issue legally required fiscal receipts.
- Provide customer support and operate AI-assisted chat.
- Send transactional messages (order confirmations, receipts, account notices).
- Detect, prevent, and investigate fraud, abuse, and security incidents.
- Maintain, analyse, and improve the platform.
- Comply with legal, tax, and accounting obligations.
5.AI-powered features
Meridian offers AI assistants — a customer shopping assistant on storefronts and a merchant assistant for vendors. To generate responses, the content of your chat messages and the relevant context (such as product or order information) is sent to a third-party AI provider — Anthropic, Google, or OpenAI, depending on configuration — which processes it to return a response.
These providers process the data on our behalf under their terms and do not use Meridian conversation content to train their public models where their enterprise terms provide for this. Please avoid entering sensitive personal information into chat that is not needed for your request. AI responses can be inaccurate and are not professional, legal, financial, or medical advice.
6.Payments & fiscal receipts
When you pay via QPay or bank transfer, the payment provider processes your payment details directly. We receive only the information needed to confirm and reconcile the transaction. For every qualifying purchase, an electronic fiscal receipt is registered with the Mongolian tax authority through the eBarimt system, as required by Mongolian law.
9.International transfers
Some of our service providers — including cloud hosting, email, and AI providers — operate outside Mongolia. Where personal data is transferred internationally, we take reasonable steps to ensure it is handled under appropriate safeguards and consistent with this policy.
10.Data retention
We keep personal data for as long as needed to provide the platform and for legitimate business purposes such as resolving disputes and enforcing our agreements. Transaction and fiscal-receipt records are retained for the periods required by Mongolian tax and accounting law. When data is no longer needed, we delete or anonymise it.
11.Security
We use technical and organisational measures designed to protect personal data, including encryption in transit, access controls, tenant data isolation between vendors, and audit logging. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
12.Your rights
Subject to applicable law, you may request to:
- Access the personal data we hold about you.
- Correct inaccurate or incomplete data.
- Delete your data, where we are not required to keep it.
- Object to or restrict certain processing.
- Withdraw consent where processing is based on consent.
To make a request, contact support@meridian.mn. For data tied to a specific store, we may direct your request to the relevant vendor, who controls that store’s customer data. We may need to verify your identity before acting on a request.
13.Children
The platform is not directed to children, and we do not knowingly collect personal data from children. If you believe a child has provided us personal data, contact us and we will take appropriate steps to delete it.
14.Changes to this policy
We may update this policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, provide additional notice. Your continued use of the platform after changes take effect means you accept the updated policy.
15.Contact
Questions, requests, or complaints about this policy or your personal data:
Meridian
Email: support@meridian.mn
[Registered Address]