Privacy Policy

schedule Last updated 13 Apr 2026

PARIVAN

PRIVACY POLICY

How Parivan collects, uses, shares, stores and protects personal information of buyers, vendors and visitors in Nepal

Operated in Nepal only · Single operating establishment · Multi-vendor apparel marketplace (intermediary)
Issued: 03 September 2026 · Document: PARIVAN-POL-PRIVACY-001 · Version 1.0

COMPLETION REQUIRED. Placeholders in square brackets (for example [COMPANY LEGAL NAME]) must be completed with the registered particulars of the operating company before these documents are published or executed. Until then, these drafts are internal working documents and must not be treated as executed contracts.

PLAIN STATEMENT. Parivan does not sell your personal information. We collect only what we need to run a Cash-on-Delivery and prepaid apparel marketplace in Nepal, to deliver your order, to handle exchanges and refunds, to pay vendors, to prevent fraud, and to meet Nepal law. By creating an account, placing an order, or listing as a vendor, you agree to this Policy, read together with the Terms & Conditions.

1. WHO WE ARE

This Policy is issued by [COMPANY LEGAL NAME], a company registered in Nepal under registration number [COMPANY REGISTRATION NO.], having its registered office at [REGISTERED OFFICE ADDRESS, KATHMANDU], PAN [PAN], VAT [VAT IF REGISTERED], Department of Commerce e-commerce listing number [E-COMMERCE LISTING NO.] (together, “Parivan”, “we”, “us”). Parivan operates a multi-vendor online apparel marketplace at [WEBSITE URL] and any related mobile-web interface (the “Platform”). Parivan operates in Nepal only and maintains a single operating establishment.

For privacy requests: [PRIVACY EMAIL] and [SUPPORT PHONE]. For statutory grievances see the Grievance Redressal Policy and the Grievance Officer at [GRIEVANCE OFFICER EMAIL].

2. SCOPE AND LEGAL BASES

This Policy applies to personal information of buyers, prospective buyers, vendors and their representatives, delivery-related contacts, and website visitors. It is intended to comply with the Individual Privacy Act, 2075 (2018), Section 12 of the Electronic Commerce Act, 2081 (2025), the Consumer Protection Act, 2075, and the Electronic Transactions Act, 2063.

We process personal information on the following bases, as applicable: (a) to perform a contract (your order, vendor agreement, delivery, refund); (b) your consent (marketing, optional cookies, account features); (c) our legitimate business interests in preventing fraud, COD abuse, vendor bypass, and in improving the Platform, provided those interests are not overridden by your rights; and (d) legal obligation (tax, consumer complaints, court or Department orders).

3. INFORMATION WE COLLECT

3.1 Information you give us

· Buyers: full name, delivery address, landmark, ward/municipality, reachable mobile number, email if provided, date of birth or age confirmation, order contents, size/fit preferences you choose to save, review text and photos, bank or wallet details only if needed to pay an approved refund, identity documents if we must verify a high-value refund or suspected fraud.

· Vendors: business/legal name, proprietor/director names, address, mobile, email, PAN/VAT, company/firm registration, bank account for payout, cancelled cheque or account proof, product photographs and descriptions, specimen signatures where collected, emergency contact.

· Communications: call, SMS, Viber/WhatsApp or in-Platform chat relating to orders, KYC and complaints. Calls may be logged. Do not send unnecessary identity documents on open chat.

3.2 Information we collect automatically

· Device and browser type, IP address, approximate location at city level, pages viewed, referring URL, cart events, crash logs, cookie identifiers, and similar usage data.

3.3 Information from others

· Delivery partners (delivery success, COD collected, GPS scan events, failed-attempt notes).

· Payment providers (success/failure of prepaid payments, limited tokens — we do not store full card PAN or PIN).

· Vendors (dispatch confirmation, stock). Public business registries. Social-login providers if you choose to use them.

3.4 What we do not collect as a default

· We do not take copies of citizenship, passport or biometric data unless a specific refund, vendor KYC or legal requirement makes it necessary.

· We do not store card numbers, CVV or ATM PINs. Prepaid card data, if any, is handled by the listed payment provider under its own policy.

· We do not knowingly collect personal information of children under 18. The Platform is for persons 18 years or older, or minors using it only with a parent or legal guardian who accepts this Policy.

4. HOW WE USE INFORMATION

· Create and administer accounts; verify orders by phone/SMS; arrange pickup, delivery and COD; process prepaid payments.

· Handle exchanges, returns, refunds and grievances within statutory and policy timelines.

· Pay vendors; deduct commission, fees, penalties and set-off; produce settlement statements.

· Detect and prevent fraud, fake orders, serial COD refusal, misleading listings, review manipulation, and vendor/buyer circumvention of the Platform.

· Listing quality review, including review of actual versus AI-enhanced images, and virtual try-on features.

· Customer support, service messages, delivery updates.

· Analytics to improve catalogue, size guidance and operations.

· Marketing of Parivan products and offers, only where you have not opted out. Transactional messages cannot be opted out of while an order is open.

· Comply with Nepal law, Department, IRD, Nepal Rastra Bank (if applicable), court and law-enforcement requests that are lawful.

· Establish, exercise or defend legal claims.

5. SHARING

We do not sell personal information. We share it only as follows:

· Vendors — limited fulfilment data (name, delivery address, phone, order SKU and size). Vendors are contractually forbidden from using this data for marketing, WhatsApp broadcasting, or off-platform sales. A vendor who does so is in breach of the Vendor Agreement.

· Delivery / 3PL partners — for pickup, delivery, COD collection and reverse pickup.

· Payment providers, banks and wallets — to collect prepaid amounts or pay refunds and vendor settlements.

· IT, hosting, SMS, analytics and cloud providers acting on our instructions under confidentiality.

· Professional advisers (advocates, auditors) under confidentiality.

· A buyer of the business, under a duty of confidentiality, if Parivan is sold or restructured, consistent with Nepal law.

· Government, courts, regulators and law enforcement, where required or permitted by Nepal law.

International processing: some hosting, email or analytics providers may process data outside Nepal. Where that occurs we take reasonable contractual and technical steps so that protection remains consistent with this Policy and applicable Nepal law. We do not operate a group of foreign Parivan entities, and we do not transfer buyer databases to foreign marketplaces.

6. COOKIES AND SIMILAR TECHNOLOGIES

We use essential cookies to keep you logged in, remember the cart, and secure the session. We may use analytics and advertising cookies to understand use of the Platform and to measure campaigns. You may block non-essential cookies in your browser; essential cookies cannot be blocked without breaking checkout. Where Nepal law requires prior consent for non-essential cookies, we will present a consent tool.

7. RETENTION

We keep personal information only as long as needed for the purposes above, including: order and tax records for the period required by the Income Tax Act and good commercial practice (generally at least 6 years from the end of the relevant fiscal year); complaint and grievance files for at least 3 years after closure; fraud and COD-abuse markers for as long as reasonably required to protect the Platform; account data until the account is deleted plus a short wind-down; server logs for a shorter operational period. When no longer needed we delete or irreversibly anonymise.

8. YOUR RIGHTS

Subject to Nepal law, you may request access to, correction of, or deletion of personal information we hold about you; withdraw marketing consent; and lodge a grievance with our Grievance Officer and, thereafter, with the competent Nepal authority. We will need to verify that the request comes from you (typically by the mobile number used for orders). We may refuse or limit requests that are unfounded, excessive, or where we must keep the data for a contract, dispute, tax or legal duty. Marketing opt-out: follow the unsubscribe link or write to [PRIVACY EMAIL].

9. SECURITY

We use reasonable administrative, technical and organisational measures, including access control, TLS in transit for the website, restricted staff access, and vendor confidentiality clauses. No internet transmission is completely secure. You must keep your password and OTP confidential. Notify us at once if you believe your account is compromised.

10. VENDORS AND BUYER DATA

If you are a Vendor, you are an independent controller of any buyer personal data you receive for fulfilment. You must use it only to fulfil the Parivan order, keep it confidential, not store it longer than needed, not add it to a marketing list, and delete it on our request or when the order is closed. You must notify us within 24 hours of any suspected misuse or breach of buyer data.

11. MARKETING AND SOCIAL

We may display reviews you post. If you interact with us on Facebook, Instagram, TikTok or similar, that platform’s policy also applies. Do not send citizenship copies or card data to those channels.

12. CHANGES

We may update this Policy. The version in force is the one posted on the Platform with a revised date. Material changes will be notified by posting, email or SMS where practicable. Continued use after the effective date constitutes acceptance where Nepal law so permits; where a fresh consent is required we will ask for it.

13. CONTACT

Privacy: [PRIVACY EMAIL] · Support: [SUPPORT EMAIL] / [SUPPORT PHONE] · Grievance Officer: [GRIEVANCE OFFICER NAME], [GRIEVANCE OFFICER EMAIL], [GRIEVANCE OFFICER PHONE] · Postal: [REGISTERED OFFICE ADDRESS, KATHMANDU].

DOCUMENT CONTROL

This document is issued by the operator of the Parivan Platform for use in Nepal only. It should be read with the other Parivan legal documents in force at the time of the relevant order or onboarding. If there is a conflict between a promotional statement and this document, this document prevails. If there is a conflict between this document and a mandatory provision of Nepalese law, the mandatory provision prevails.

This pack is prepared as a working legal draft aligned with the Electronic Commerce Act, 2081 (2025), the Consumer Protection Act, 2075 (2018), the Individual Privacy Act, 2075 (2018), the Electronic Transactions Act, 2063 (2008), and the Companies Act, 2063 (2006), as commonly applied to a Nepal-only intermediary marketplace. It is not a substitute for a licensed Nepalese advocate’s final review, stamping (where required), or company-board adoption.