Privacy Policy

1.1 Personal Information

When you register or use our services, we may collect:

• Full name and date of birth
• Email address and phone number
• Residential address in Nepal
• Educational background and qualifications
• Citizenship number (for instructors and verification purposes)
• Payment information (processed securely through approved payment gateways)
• Profile photograph

1.2 Automatically Collected Information

• IP address and device information
• Browser type and version
• Usage data and activity logs
• Cookies and similar tracking technologies
• Location data (with your consent)

1.3 Educational Data

• Course enrollment and progress
• Assignment submissions and grades
• Communication with instructors
• Learning preferences and feedback

We use your information for the following purposes:

• To provide and maintain our educational services
• To process course enrollments and payments
• To communicate with you about courses, updates, and announcements
• To personalize your learning experience
• To improve our platform and develop new features
• To ensure platform security and prevent fraud
• To comply with legal obligations under Nepal law
• To send promotional materials (with your consent)
• To conduct research and analytics for service improvement

Under Nepal's Electronic Transaction Act, 2063 (2008), we process your personal data based on:

• Consent: You have given explicit consent for data processing
• Contractual Necessity: Processing is necessary to fulfill our service agreement
• Legal Obligation: Required by Nepal law or government authorities
• Legitimate Interest: For improving services and preventing fraud

We do not sell your personal information. We may share your information with:

4.1 Service Providers

• Payment processors (eSewa, Khalti, banks)
• Cloud hosting services
• Email and communication service providers
• Analytics and performance monitoring tools

4.2 Educational Partners

• Course instructors (limited to enrolled students only)
• Educational institutions affiliated with our platform

4.3 Legal Requirements

• Government authorities when required by Nepal law
• Law enforcement agencies in case of criminal investigations
• Courts in response to legal proceedings
• Tax authorities as per Nepal tax regulations

4.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the new entity, subject to this Privacy Policy.

We implement appropriate technical and organizational measures to protect your data:

• SSL/TLS encryption for data transmission
• Secure password hashing and storage
• Regular security audits and updates
• Access controls and authentication mechanisms
• Firewall protection and intrusion detection
• Regular data backups
• Employee training on data protection

However, no method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

In accordance with the Right to Information Act, 2064 (2007) and the Constitution of Nepal, you have the following rights:

6.1 Right to Access

You can request a copy of your personal data we hold.

6.2 Right to Rectification

You can update or correct inaccurate personal information.

6.3 Right to Deletion

You can request deletion of your personal data, subject to legal and contractual obligations.

6.4 Right to Withdraw Consent

You can withdraw consent for marketing communications at any time.

6.5 Right to Data Portability

You can request your data in a structured, commonly used format.

6.6 Right to Object

You can object to processing of your data for direct marketing purposes.

To exercise these rights, contact us at privacy@nepaledu.com. We will respond within 15 working days as per Nepal's legal requirements.

7. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience:

• Essential Cookies: Required for platform functionality
• Analytics Cookies: Help us understand how you use our platform
• Preference Cookies: Remember your settings and preferences
• Marketing Cookies: Used to deliver relevant advertisements (with consent)

You can control cookies through your browser settings. Disabling certain cookies may affect platform functionality.

8. Children's Privacy

Our platform is designed for users aged 13 and above. For users under 18:

• Parental or guardian consent is required
• We collect minimal necessary information
• Parents can request access, correction, or deletion of their child's data
• We do not knowingly collect data from children under 13

If we discover we have collected information from a child under 13, we will delete it immediately.

9. Data Retention

We retain your personal data for as long as necessary:

• Active accounts: Duration of service use plus 1 year
• Inactive accounts: 3 years, then deleted
• Payment records: 7 years (as per Nepal tax law)
• Course completion certificates: Indefinitely
• Marketing data: Until consent is withdrawn

10. International Data Transfers

Your data is primarily stored in Nepal. If we transfer data internationally, we ensure:

• Adequate data protection measures are in place
• Compliance with Nepal's Electronic Transaction Act
• Contractual safeguards with third-party processors
• Your explicit consent when required

11. Third-Party Links

Our platform may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any personal information.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make significant changes:

• We will notify you via email or platform notification
• The "Last Updated" date will be revised
• Continued use constitutes acceptance of the updated policy
• For material changes, we may seek your explicit consent

13. Contact Us

For questions, concerns, or to exercise your privacy rights, contact our Data Protection Officer:

14. Complaints and Grievances

If you believe your privacy rights have been violated, you can:

• File a complaint with our Data Protection Officer
• Contact the Nepal Telecommunications Authority (NTA)
• Seek recourse through Nepal's legal system

We will investigate all complaints within 30 days and provide a written response.