Data Protection Policy
Jurisdiction and Applicability
We would like to clarify that our operations and data storage are primarily based in Nepal, which does not fall under the jurisdiction of the European Union’s General Data Protection Regulation (GDPR). However, Nepal has its own legislation governing data protection and privacy, known as the Privacy Act of 2075 (2018).
Nepalese Privacy Act 2075 (2018)
This Act sets the framework for the collection, processing, and storage of personal and client information in Nepal. It mandates the safeguarding of individual’s privacy rights and outlines the obligations of organizations that handle such data.
Voluntary Compliance with GDPR
While we are not legally obligated to comply with GDPR, we recognize its comprehensive framework aimed at enhancing privacy rights and data security. As a proactive measure and in a bid to offer a high level of data protection to all our clients and users—regardless of their geographical location—we have voluntarily adopted practices and safeguards that are aligned with the GDPR guidelines.
High-Level Data Protection
By adopting a standard that is internationally recognized, we aim to provide the highest level of data protection. This means our clients can expect:
Transparent data collection procedures
Robust security measures
Data minimization strategies
Clear options for consent
Prompt notification in case of data breaches
Summary
While Nepal has its Privacy Act of 2075 (2018) to govern data protection, we go above and beyond to align our data protection practices with the stringent guidelines set forth by GDPR, thus offering our clients and users a heightened level of data security and privacy.
For any questions or clarifications on our data protection policy, please feel free to contact us.