Privacy Act 2075 (Nepal)
Privacy Policy
This policy explains how Vesh Nepal collects, uses, and protects your personal data, in compliance with Nepal's Privacy Act 2075 (B.S.) and Electronic Transaction Act 2063. Last updated: 01 January 2024.
1. Information We Collect
- Account information: Name, mobile number, email address (optional), and profile photo.
- Identity documents: Citizenship card or NID (for verified sellers only). Stored encrypted.
- Transaction data: Purchase history, sale history, payment references (not card/wallet credentials).
- Communications: In-app messages between buyers and sellers.
- Usage data: Pages visited, search queries, device type, and IP address (for security and analytics).
2. How We Use Your Information
- To operate and improve the Vesh Nepal marketplace.
- To verify seller identity as required by Consumer Protection Act 2075.
- To process transactions and facilitate payments.
- To send transactional SMS (OTPs, order updates). We do not send unsolicited marketing SMS.
- To detect and prevent fraud, scams, and prohibited listings.
- To comply with lawful requests from Nepal government authorities.
3. Data Sharing
We do not sell, rent, or share your personal data with third parties for marketing purposes.
- Payment gateways (eSewa, Khalti): Only the transaction amount and reference. No personal credentials are shared.
- SMS providers (Akash SMS): Only your mobile number and the message content for delivery.
- Government authorities: When required by law under Nepal's Electronic Transaction Act 2063 or court order.
4. Data Retention
- Account data is retained for as long as your account is active.
- Transaction records are retained for 7 years as required by Nepal's tax laws (Income Tax Act 2058).
- Identity verification documents are deleted within 90 days of account closure.
- On account deletion, personal data is anonymised or removed within 30 days.
5. Your Rights (Privacy Act 2075)
- Right to access the personal data we hold about you.
- Right to correct inaccurate data.
- Right to request deletion of your data (subject to legal retention obligations).
- Right to withdraw consent for non-essential data processing.
To exercise any of these rights, email: privacy@veshnepal.com
6. Security
We use industry-standard encryption (TLS/HTTPS) for all data in transit. Sensitive data (identity documents, passwords) is stored encrypted at rest. We conduct regular security reviews.
7. Contact
For privacy-related enquiries:
Email: privacy@veshnepal.com
Address: Vesh Nepal Pvt. Ltd., Kusunti – 13, Lalitpur, Nepal