DATA PRIVACY POLICY

Effective Date: May 1, 2025

1. INTRODUCTION

Depth Nepal ("we," "our," or "us") is committed to protecting the privacy and security of personal data we process in the course of our business operations. This Privacy Policy explains how we collect, use, disclose, and safeguard data when you engage our services or interact with our digital platforms.

We serve both domestic and international clients and are committed to maintaining compliance with applicable data protection laws, including Nepal's data protection regulations and, where applicable, international frameworks such as the General Data Protection Regulation (GDPR).

2. DATA WE COLLECT

2.1 Client Data

We collect information necessary to provide our services, including:

  • Business contact information (names, job titles, email addresses, phone numbers)
  • Account and billing information
  • Project requirements and specifications
  • Communication records related to service delivery

2.2 Data Processed on Behalf of Clients

As a data analytics and transformation company, we may process various types of data on behalf of our clients, including:

  • Customer databases
  • Transactional records
  • Analytics information
  • Other data sets provided by clients for processing

When processing data on behalf of clients, we act as a data processor and handle such information in accordance with our contractual obligations and our Data Processor Agreement.

2.3 Website Visitor Data

When you visit our website, we may collect:

  • Device information (IP address, browser type, operating system)
  • Usage data (pages visited, time spent on site)
  • Cookies and similar technologies data
  • Information you voluntarily provide through contact forms

3. HOW WE USE DATA

We use collected data for the following purposes:

3.1 Service Provision

  • Delivering the services requested by clients
  • Managing client relationships and accounts
  • Processing payments and maintaining financial records
  • Providing customer support

3.2 Operational Purposes

  • Improving our services
  • Ensuring the security and functionality of our systems
  • Analyzing usage patterns to enhance user experience
  • Staff training and quality assurance

3.3 Communication

  • Responding to inquiries and requests
  • Providing information about our services
  • Sending service updates and administrative notices
  • Marketing our services to potential clients (where permitted by law)

4. LEGAL BASIS FOR PROCESSING

We process personal data on the following legal grounds:

  • Contractual Necessity: Processing necessary to fulfill our contractual obligations
  • Legitimate Interests: Where processing is in our legitimate business interests and not overridden by your rights
  • Consent: Where you have given clear consent for specific processing activities
  • Legal Obligation: Where processing is necessary to comply with legal obligations

5. DATA SHARING AND DISCLOSURE

We may share data with:

5.1 Service Providers

Third-party vendors who perform services on our behalf, such as cloud hosting providers, payment processors, and analytics services. These providers are contractually obligated to protect your data.

5.2 Legal Requirements

We may disclose information if required by law, regulation, legal process, or governmental request.

5.3 Business Transfers

In connection with a corporate transaction, such as a merger, acquisition, or sale of assets.

5.4 With Client Permission

We may share data with other entities when we have client permission to do so.

Note: We do not sell personal data to third parties.

6. INTERNATIONAL DATA TRANSFERS

As we serve international clients, personal data may be transferred to, stored, and processed in countries outside Nepal. When transferring data internationally, we implement appropriate safeguards to ensure data protection, which may include:

  • Data Processing Agreements with Standard Contractual Clauses
  • Ensuring recipient countries have adequate data protection laws
  • Obtaining consent for transfers where appropriate

7. DATA SECURITY

We implement appropriate technical and organizational measures to protect personal data, including:

  • Encryption of sensitive information
  • Access controls and authentication procedures
  • Regular security assessments and testing
  • Staff training on data protection
  • Secure network infrastructure
  • Data backup and recovery procedures

8. DATA RETENTION

We retain personal data for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Factors we consider when determining retention periods include:

  • Duration of client relationship
  • Legal obligations
  • Applicable statute of limitations
  • Ongoing business needs

9. YOUR RIGHTS

Depending on your location, you may have certain rights regarding your personal data:

  • Access: Request information about data we hold about you
  • Rectification: Request correction of inaccurate data
  • Erasure: Request deletion of your data under certain circumstances
  • Restriction: Request limitation of processing of your data
  • Data Portability: Request transfer of your data in a structured format
  • Objection: Object to processing based on legitimate interests
  • Withdraw Consent: Withdraw previously given consent

To exercise these rights, please contact us using the information in Section 12.

10. COOKIES AND TRACKING TECHNOLOGIES

Our website uses cookies and similar technologies to enhance user experience and collect information about how our site is used. Types of cookies we use may include:

  • Essential cookies: Required for site functionality
  • Analytical cookies: Help us understand how visitors use our site
  • Preference cookies: Remember your settings and preferences
  • Marketing cookies: Used to deliver relevant advertisements

You can manage cookie preferences through your browser settings.

11. CHANGES TO THIS POLICY

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will post the revised policy on our website with an updated effective date.

12. CONTACT INFORMATION

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Depth Nepal
Email: info@depthnepal.com

13. COMPLAINT RESOLUTION

If you have concerns about our data practices that have not been resolved through direct contact with us, you have the right to lodge a complaint with the relevant data protection authority.