MMIC Platform Privacy Policy

Website: www.mmic.com.cn
Updated effective date: July 28, 2026

To comply with the Personal Information Protection Law of the People's Republic of China, the Cybersecurity Law of the People's Republic of China, and other laws and regulations, and to meet data-compliance requirements for cross-border Mongolian mining information services, this Policy explains how the MMIC Platform collects, uses, stores, shares, and protects your personal and enterprise information and describes your information rights. Please read this Policy in full before using the Platform. By registering, logging in, or making a payment, you agree to all provisions of this Policy.

1. Information We Collect

1.1 Information You Submit

The following information is necessary for registration, payment, and consulting:

  1. Individual Users: mobile-phone number, email address, and name;
  2. Enterprise Users: full enterprise name, Unified Social Credit Code, contact person's name and telephone number, business address, invoice title, taxpayer identification number, and corporate bank-account information used for invoicing;
  3. Business interaction information: mining consulting requests, intentions to invest in mining rights, tender-matching messages, and customer-service communication records that you submit; and
  4. Paid transaction information: payment order number, payment amount, payment channel, invoicing records, and membership-subscription plan records.

1.2 Device and Access Information Collected Automatically

The following information is collected for security and service optimization:

  1. Device information: device model, operating system, browser type, IP address, access time, page-view history, and search keywords;
  2. Cookie data: website cache identifiers used to maintain login status, record membership access, and deliver relevant mining information; and
  3. Activity logs: account login location, download history, data-export history, and GIS-map search activity, used for account-security risk control and to identify account theft and bulk scraping by crawlers.

1.3 Information We Do Not Need to Collect

The Platform will not require sensitive private information such as an identity card, full bank-card number, or home address. Enterprise financial and tax information is collected only as needed for invoicing. Biometric and location information is not collected on a mandatory basis.

2. Purposes for Using Information

We use your information only for the following lawful purposes and will not misuse it beyond these purposes:

  1. Account management: registration, login, identity verification, password recovery, and account-security risk control;
  2. Providing Platform services: activating membership access and delivering Mongolian mining news, tender notices, and market-price change alerts;
  3. Orders and financial and tax performance: processing membership payments, issuing invoices, recording transaction flows, and meeting national financial and tax record-retention requirements;
  4. Customer service: responding to mining consulting requests and handling account failures, refunds, complaints, and after-sales matters;
  5. Platform security: identifying account theft, crawlers, improper bulk downloads, and malicious attacks and protecting Platform data;
  6. Business optimization: compiling statistics on User browsing preferences and improving Mongolian mineral data, GIS maps, and report content;
  7. Compliance obligations: complying with lawful information requests from public security, market regulation, tax, and other competent authorities; and
  8. Marketing communications: sending notices about new Platform reports, membership promotions, and mining-industry events only with your consent. You may unsubscribe from these communications at any time.

3. Information Storage and Cross-Border Transfers

3.1 Storage Location

All personal and enterprise User data is stored on compliant servers in mainland China. Except as required by law or by a competent authority, we will not proactively transfer your information to servers located in Mongolia or elsewhere outside mainland China.

3.2 Retention Periods

  1. Basic account information: retained for the life of the account. After account deletion, financial, tax, and transaction records will be retained for ten years as required by national rules, while other personal identity information will be automatically de-identified and deleted;
  2. Browsing and activity logs: retained for 180 days and then automatically deleted, except where retention is necessary to address an unresolved dispute or cooperate with a lawful investigation by a competent authority; and
  3. Consulting and communication records: retained for three years for tracing after-sales disputes.

3.3 Cross-Border Restrictions

The Platform exports only publicly available Mongolian mining data. It will not transfer or share Chinese Users' personal or enterprise private data with Mongolian mining enterprises or overseas third-party organizations. This restriction does not apply where otherwise provided by law or administrative regulation or where a competent authority lawfully requires disclosure.

4. Information Sharing and Disclosure

4.1 Limited Disclosure to Third Parties

Without your written consent, we will never proactively sell, rent, or share your information with a third party. Limited disclosure is permitted only in the following circumstances required by law or necessary to provide services:

1) Authorized Service Providers

Only the following providers supporting basic Platform operations are included:

  • Third-party payment institutions: to process payment deductions, only the order amount and enterprise name are transmitted; complete contact details are not disclosed;
  • Cloud-server and security providers: used only for data storage and attack protection. They enter into data-confidentiality agreements and are prohibited from using User information; and
  • Email and SMS providers: used only to deliver mining information to which you have subscribed, with no reuse for additional marketing.

All third-party partners sign confidentiality agreements, and the scope of their information use is strictly limited.

2) Mandatory Disclosure Required by Law

If a People's Court, public security, tax, cyberspace, or other administrative or judicial authority issues complete and valid legal process, the Platform will provide the corresponding information as required by law without separately notifying the User.

3) Information Made Public by the User

If you voluntarily leave enterprise contact information in Platform messages or consulting areas, it is treated as voluntarily made public and may be viewed by other Users. The Platform is not liable for disclosure of such public information.

4.2 Prohibited External Sharing

The Platform will not sell or exchange User contact details or enterprise operating information with Mongolian mining enterprises, overseas traders, competing information platforms, or advertising companies.

5. Your Personal Information Rights

  1. Right of access: you may log in to view your registration information, transaction history, consulting records, and communication-subscription records;
  2. Right to correction: if your mobile-phone number, email address, or enterprise information is incorrect, you may correct it through the account center;
  3. Right to deletion or account cancellation: after requesting account cancellation, personal information other than financial and tax data retained by law will be de-identified and deleted;
  4. Right to withdraw consent: you may turn off informational emails and SMS messages and withdraw authorization for marketing communications without affecting basic membership data services;
  5. Right to complain or appeal: if you object to the Platform's information-processing activities, you may submit an appeal to customer service; and
  6. Right to obtain a copy: you may request export of all your transaction and consulting records for internal enterprise archiving.

Channels for exercising your rights: Platform online customer service and the official contact email address. To exercise an information right, you must submit genuine and valid identity-verification materials that prove ownership of the account, as required by the Platform. After verifying account ownership, the Platform will process and respond within three working days to a request that meets applicable legal and Policy requirements. If the submitted materials do not meet the requirements or the request exceeds the scope provided by law or this Policy, the Platform may decline to process it and will inform you of the reason.

6. Information Security Measures

The Platform uses multiple layers of security to protect your data:

  1. Encryption in transit: the entire website uses HTTPS-encrypted transmission, and mobile-phone numbers and enterprise financial and tax information are stored in masked form;
  2. Tiered access: internal personnel may access only the User data necessary for their duties, and all operations are logged and audited;
  3. Server protection: firewalls and intrusion-detection systems are used, and data is backed up regularly to prevent theft by hackers;
  4. Employee confidentiality: all operating personnel sign confidentiality agreements and bear civil and criminal liability for leaking User information; and
  5. Security-incident response: if a security incident involving a User-information leak occurs, the Platform will immediately take containment measures and promptly notify affected Users as required by law. However, where the Platform has fulfilled its statutory security obligations, it is exempt from corresponding liability to the extent permitted by law if a leak is caused by circumstances it could not foresee or control, such as improper User conduct or a malicious third-party attack.

7. Information About Minors

Platform services are intended for mining-industry enterprises and adult professionals and are not offered to minors. If a minor registers an account by mistake, the guardian should contact customer service to cancel it, and the Platform will immediately delete the corresponding information.

8. Cookies and Local Cache

The Platform uses Cookies to maintain login status, preserve membership access, and improve page-loading speed. You may disable Cookies in your browser settings, but doing so may invalidate your login or prevent membership features from operating normally. The Platform does not use Cookies to collect sensitive information such as identity-card or bank-card information.

9. Policy Updates and Notices

If the Platform amends this Privacy Policy because of changes in law, regulation, or its business, the updated version will be prominently posted on the website homepage and will take effect seven days after posting. Your continued use of Platform services constitutes acceptance of the amended Policy. Material changes, such as changes to data-sharing rules, will be separately notified through your registered email address.

10. Contact Channels

Privacy inquiries, complaints, and requests concerning account information may be submitted through Platform online customer service. The Platform operator will respond and process the matter within three working days.

11. Governing Law

This Privacy Policy is governed by the Personal Information Protection Law of the People's Republic of China, the Cybersecurity Law of the People's Republic of China, and the Data Security Law of the People's Republic of China. Disputes are subject to the jurisdiction of the People's Court at the place where the Platform operator is located.