Privacy Policy

Effective Date: February 2025 Last Updated: February 2025 Company: Softora Innovation Pvt Ltd (Company Registration No. 368687) Website: https://softora.com.np

Softora Innovation Pvt Ltd (“Softora,” “we,” “us,” or “our”) is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, disclose, store, and protect your personal data when you visit our website, use our services, or interact with us in any capacity.

This policy is drafted in accordance with the Individual Privacy Act, 2075 (2018) of Nepal, the Electronic Transactions Act, 2063 (2008), and aligns with internationally recognised data protection principles, including those set forth in the General Data Protection Regulation (GDPR) (EU) 2016/679 where applicable to our international users.

By accessing our website or using our services, you acknowledge that you have read, understood, and agree to the terms of this Privacy Policy.

1. Information We Collect

We may collect the following categories of personal information:

1.1 Information You Provide Directly

Contact Information — Name, email address, phone number, and mailing address when you submit a contact form, request a consultation, or communicate with us.
Employment Application Data — Name, email, phone number, resume/CV, cover letter, educational qualifications, and work experience when you apply for a position through our careers page.
Account Information — Email address and authentication credentials if you create an account on our platform.
Communication Data — Content of emails, messages, and other correspondence you send to us.
Business Information — Company name, job title, and business requirements when you engage us for services.

1.2 Information Collected Automatically

Usage Data — Pages visited, time spent on pages, navigation paths, and interaction patterns.
Device Information — Browser type, operating system, screen resolution, and device identifiers.
Network Data — IP address, approximate geographic location derived from IP, and internet service provider information.
Cookies and Similar Technologies — Session identifiers, preference settings, and analytics data (see Section 7).

1.3 Information from Third Parties

We may receive information from third-party services that you connect to our platform, analytics providers, or business partners, but only to the extent necessary for service delivery.

2. Legal Basis for Processing

We process personal information on the following lawful bases, as required under the Individual Privacy Act, 2075 (2018), Section 3:

Legal Basis	Application
Consent	When you voluntarily submit information through our forms or opt into communications
Contractual Necessity	When processing is necessary to fulfil a service agreement with you
Legitimate Interest	To improve our services, ensure security, and prevent fraud
Legal Obligation	When required by applicable laws, regulations, or court orders under Nepali law

You may withdraw your consent at any time by contacting us at privacy@softora.com.np. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

3. How We Use Your Information

We use collected information strictly for the following purposes:

Service Delivery — To respond to enquiries, deliver contracted services, and provide customer support.
Recruitment — To evaluate and process job applications submitted through our careers page.
Communication — To send service-related notifications, respond to your requests, and, with your consent, share relevant updates.
Website Improvement — To analyse usage patterns, optimise performance, and enhance user experience.
Security — To detect, prevent, and respond to security threats, fraud, or abuse.
Legal Compliance — To comply with applicable laws, regulations, and legal processes under Nepali jurisdiction.

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

We may share your personal information only in the following circumstances:

4.1 Service Providers

We engage trusted third-party service providers who assist us in operating our website, conducting business, and delivering services. These providers are contractually bound to:

Use your data only for the specific purpose for which it was shared
Maintain appropriate security measures
Not disclose your data to other parties

Our current infrastructure providers include Cloudflare, Inc. (hosting, CDN, and security services), which processes data in accordance with their own privacy policies and applicable data protection laws.

4.2 Legal Requirements

We may disclose personal information when required to do so by law, including but not limited to:

Orders of the Supreme Court, High Courts, or District Courts of Nepal
Requests from the Nepal Police or other law enforcement agencies acting under lawful authority
Requirements under the Electronic Transactions Act, 2063 (2008), Section 47
Orders under the Individual Privacy Act, 2075 (2018)

4.3 Business Transfers

In the event of a merger, acquisition, reorganisation, or sale of assets, your personal data may be transferred as part of the transaction. We will provide notice before your data is subject to a different privacy policy.

We may share your data with third parties when you have given explicit, informed consent to do so.

5. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected:

Data Category	Retention Period
Contact form submissions	2 years from date of submission
Job applications	1 year after the recruitment process concludes
Account data	Duration of account plus 30 days after deletion
Website analytics data	26 months (anonymised)
Business/contract data	5 years after contract completion (as required by Nepali tax and commercial law)

After the retention period expires, data is securely deleted or irreversibly anonymised. You may request earlier deletion by contacting us (see Section 9).

6. Data Security

We implement robust technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction, in compliance with Section 7 of the Individual Privacy Act, 2075 (2018) and Section 44 of the Electronic Transactions Act, 2063 (2008):

Encryption — Data is encrypted in transit (TLS/SSL) and at rest where applicable.
Access Controls — Strict role-based access controls limit data access to authorised personnel only.
Infrastructure Security — Our services are hosted on Cloudflare Workers with enterprise-grade security, DDoS protection, and Web Application Firewall (WAF).
Database Security — Application data is stored in Cloudflare D1 (database) and Cloudflare R2 (file storage) with built-in encryption and access controls.
Regular Audits — We conduct periodic security reviews and vulnerability assessments.
Incident Response — We maintain an incident response plan to promptly address any data breaches.

While we employ industry-standard security measures, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security but are committed to safeguarding your data to the best of our ability.

7. Cookies and Tracking Technologies

7.1 What Are Cookies?

Cookies are small text files stored on your device when you visit our website. They help us provide a better browsing experience.

7.2 Types of Cookies We Use

Cookie Type	Purpose	Duration
Essential Cookies	Required for basic website functionality (e.g., authentication, session management)	Session
Preference Cookies	Store your preferences (e.g., language, theme)	1 year
Analytics Cookies	Help us understand how visitors use our site	26 months

7.3 Managing Cookies

You can control cookies through your browser settings. Most browsers allow you to:

View and delete existing cookies
Block cookies from specific or all websites
Set preferences for certain types of cookies

Please note that disabling essential cookies may affect website functionality. We do not use cookies for third-party advertising or cross-site tracking.

8. International Data Transfers

Our services are hosted on Cloudflare’s global network, which may involve the processing of data in jurisdictions outside Nepal. When your data is transferred internationally, we ensure that:

Adequate safeguards are in place, including contractual obligations with service providers
Transfers comply with applicable data protection laws
Your data receives a level of protection consistent with this Privacy Policy and the Individual Privacy Act, 2075 (2018)

9. Your Rights

Under the Individual Privacy Act, 2075 (2018) and applicable data protection principles, you have the following rights regarding your personal data:

Right of Access — Request confirmation of whether we hold your personal data and obtain a copy of it (Section 4).
Right to Rectification — Request correction of inaccurate or incomplete personal data.
Right to Deletion — Request deletion of your personal data where there is no compelling reason for its continued processing (Section 5).
Right to Restriction — Request that we limit the processing of your data under certain circumstances.
Right to Object — Object to the processing of your data for specific purposes, including direct marketing.
Right to Data Portability — Request your data in a structured, commonly used, machine-readable format.
Right to Withdraw Consent — Withdraw previously given consent at any time without affecting the lawfulness of prior processing.
Right to Complain — Lodge a complaint with the relevant regulatory authority in Nepal if you believe your data rights have been violated.

To exercise any of these rights, please contact us at:

Email: privacy@softora.com.np
Subject Line: “Data Privacy Request”

We will respond to all legitimate requests within 30 days. In exceptional cases requiring additional time, we will notify you of the extension and the reasons for it.

10. Children’s Privacy

Our website and services are not directed at individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected data from a child under 16, we will take immediate steps to delete such information. If you believe a child has provided us with personal data, please contact us immediately.

11. Third-Party Links

Our website may contain links to third-party websites, applications, or services. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites. We encourage you to review the privacy policy of every site you visit before providing any personal information.

12. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy at any time to reflect changes in our practices, legal requirements, or service offerings. When we make material changes:

The “Last Updated” date at the top of this policy will be revised
A notice may be posted on our website for significant changes
Continued use of our website or services after changes constitutes acceptance of the revised policy

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

13. Governing Law and Jurisdiction

This Privacy Policy is governed by and construed in accordance with the laws of Nepal, including but not limited to:

The Constitution of Nepal, 2072 (2015), Article 28 (Right to Privacy)
Individual Privacy Act, 2075 (2018)
Electronic Transactions Act, 2063 (2008)
National Penal Code, 2074 (2017), Chapter 16 (Offences Relating to Privacy)

Any disputes arising out of or in connection with this Privacy Policy shall be subject to the exclusive jurisdiction of the competent courts of Nepal.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Softora Innovation Pvt Ltd Company Registration No. 368687

Email: privacy@softora.com.np
General Enquiries: info@softora.com.np
Website: https://softora.com.np

We take every privacy enquiry seriously and will respond promptly to all legitimate requests.