PrivacyPolicy
Plain language, no dark patterns. What we collect, why we hold it, and how to make us delete it.
01What we collect
We collect the minimum needed to cut, pack and deliver your order — and to keep your account yours. We never ask for data we cannot point to a purpose for.
- Account details — your name, email address and a bcrypt-hashed password (we can never read your actual password).
- Order details — what you ordered, sizes, quantities, delivery address and phone number, so our courier finds your door.
- Order confirmations — we call or message to confirm cash-on-delivery orders before dispatch.
- Technical logs — standard server records (IP, browser type, timestamps) kept briefly for security and debugging.
02How we use it
Your data runs your side of the atelier: fulfilment, delivery, order status updates and account features like order history. We also use order patterns in aggregate — which silhouettes sell through, which sizes to cut more of — to plan the next drop.
We do not sell, rent or trade your personal information. Ever. That is not the frequency we operate on.
05How we protect it
Traffic to and from this site is encrypted (TLS). Passwords are hashed with bcrypt and never stored in readable form. Because we operate cash on delivery, we never hold your card details — there is nothing card-shaped in our systems to steal. Access to production data is limited to the atelier staff who need it to ship your order.
06How long we keep it
Account and order records live for as long as your account does. Delete your account from your panel and your profile, saved details and order history are erased from our database — copies we must retain for bookkeeping under Nepali law are kept only as long, and only as much, as the law requires.
07Your rights
Under Nepal's Individual Privacy Act, 2075 (2018), you can ask to see the data we hold about you, correct anything wrong, delete your account, or withdraw consent for optional communications. Everything except deletion you can do right inside your account panel; for anything else, email hello@nepora.com and we will respond within 30 days — usually much faster.
08Children
Nepora is not directed at anyone under 16. We do not knowingly collect data from children; if we learn we have, we delete it promptly.
09Changes to this policy
If we change how we handle personal data, we will update this page and the date above. Material changes that affect existing accounts will be announced by email before they take effect.
Questions about this policy? Write to hello@nepora.com or find us in Thamel, Kathmandu — a human answers, not a bot.
Back to the drop