Privacy Policy

eNepzo ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our e-commerce platform.

Personal Information:

• Name, email address, phone number
• Shipping and billing addresses
• Date of birth (for age verification)
• Government-issued ID numbers (for seller verification)

Business Information (for Sellers):

• Business name and registration details
• Tax identification numbers (PAN)
• Bank account or digital wallet information
• Business licenses and certificates

Technical Information:

• IP address and device information
• Browser type and version
• Usage patterns and preferences
• Cookies and similar tracking technologies

Purpose	Data Used	Legal Basis
Account Management	Name, email, phone	Contract performance
Order Processing	Contact info, payment details	Contract performance
Seller Verification	Business documents, ID	Legal compliance
Customer Support	Account and transaction data	Legitimate interest
Marketing Communications	Email, preferences	Consent
Platform Improvement	Usage analytics	Legitimate interest

Digital Wallet Integration:

• We integrate with trusted Nepali payment providers (eSewa, Khalti, IME Pay)
• Payment credentials are processed directly by certified payment processors
• We do not store complete payment card information
• All payment data is encrypted using industry-standard protocols

Bank Account Information:

• Seller bank details are encrypted and stored securely
• Access is limited to authorized personnel only
• Used solely for payment processing and verification

We may share your information with:

Service Providers:

• Payment processors (eSewa, Khalti, banks)
• Shipping and logistics partners
• Cloud hosting providers
• Customer support tools

Legal Requirements:

• Government authorities when required by law
• Law enforcement for fraud prevention
• Tax authorities for compliance purposes

Business Transfers:

In case of merger, acquisition, or sale of assets, your information may be transferred to the new entity.

Technical Safeguards:

• SSL/TLS encryption for data transmission
• AES-256 encryption for data storage
• Regular security audits and penetration testing
• Multi-factor authentication for admin access
• Automated backup and disaster recovery systems

Administrative Safeguards:

• Limited access on a need-to-know basis
• Regular employee training on data protection
• Incident response procedures
• Vendor security assessments

You have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete information
• Erasure: Request deletion of your personal data
• Portability: Receive your data in a structured format
• Restriction: Limit how we process your information
• Objection: Object to certain types of processing
• Withdraw Consent: Opt-out of marketing communications

How to Exercise Your Rights:

Contact our Data Protection Officer at privacy@enepzo.com or use the account settings in your profile.

Types of Cookies We Use:

• Essential Cookies: Required for platform functionality
• Performance Cookies: Help us understand how you use our site
• Functional Cookies: Remember your preferences
• Marketing Cookies: Used for targeted advertising (with consent)

Managing Cookies:

You can control cookies through your browser settings. Note that disabling certain cookies may affect platform functionality.

Retention Periods:

• Account Data: Retained while account is active + 3 years
• Transaction Records: 7 years (for tax and legal compliance)
• Marketing Data: Until consent is withdrawn
• Support Communications: 3 years from last contact
• Technical Logs: 12 months

Data is securely deleted or anonymized after retention periods expire.

Your data is primarily stored and processed in Nepal. If we transfer data internationally, we ensure adequate protection through:

• Adequacy decisions by relevant authorities
• Standard contractual clauses
• Certification schemes
• Approved codes of conduct

eNepzo is not intended for children under 18. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child, we will take steps to delete it promptly.

We may update this Privacy Policy periodically. We will notify you of significant changes through:

• Email notifications to registered users
• Prominent notices on our platform
• In-app notifications

Your continued use of eNepzo after changes constitutes acceptance of the updated policy.

This Privacy Policy complies with:

• Nepal's Information Technology Act, 2063
• Electronic Transaction Act, 2063
• Consumer Protection Act, 2075
• Relevant Nepal Rastra Bank regulations