Privacy Policy

1. Introduction

Puranochic ("we", "us", or "our") respects your privacy and is committed to protecting your personal data in accordance with the Individual Privacy Act, 2075 (2018) of Nepal and other applicable laws.

This Privacy Policy explains what information we collect, why we collect it, how we use and share it, and the rights you have over it when you use our website, applications, and C2C marketplace services (collectively, the "Services"). By using the Services, you consent to the practices described in this policy.

2. Information We Collect

What we collect depends on how you use the Platform:

• Account Data (all users): When you register, we collect your username, email address, and phone number. If you sign in with Google, we receive your name, email address, and profile picture from Google.
• Profile Data: Information you choose to add to your profile, such as a display name, address, and profile photo.
• Transaction & Shipping Data: To fulfil orders, we collect your shipping address, order history, and payment status. Because payments are made by transfer to our designated eSewa account, we also collect the payment receipt you upload as proof of payment.
• Seller Verification Data (sellers only): Users applying to sell must complete an identity verification process. For this we collect your legal name, contact details, address, and a verification photo. This information is collected with your explicit consent and used only for identity verification and fraud prevention.
• Content You Upload: Listing photos and descriptions for items you sell.
• Technical Data: Basic technical information needed to operate the Services securely, such as authentication session data. See our Cookie Policy for details.

3. How We Use Your Information

Consistent with the purpose-limitation principle of the Privacy Act, 2075, we use your personal data only for the purposes for which it was collected:

• To create and secure your account and authenticate you.
• To facilitate transactions between buyers and sellers (for example, sharing a buyer's delivery details with the seller of that order).
• To verify payments, operate our buyer-protection process, and resolve disputes.
• To verify seller identities and prevent fraud, scams, and the sale of counterfeit or illegal goods.
• To provide customer support and handle complaints and grievances.
• To comply with legal obligations under the laws of Nepal.

4. How We Protect Your Data

We take the security of your personal data seriously and apply technical and organisational safeguards appropriate to its sensitivity:

• Access to personal data is restricted by default; sensitive records, including seller verification information, are kept in private storage accessible only to authorised administrators for verification and compliance purposes.
• Verification photos and payment receipts are never publicly accessible and are not visible to other users.
• Administrative access to sensitive records is time-limited and logged.

5. Data Retention

We keep personal data only as long as needed for the purposes described above or as required by law:

• You may update your active profile information (such as your shipping address or display name) at any time.
• Records connected to completed transactions — including order history, payment verification records, and approved seller verification records — are retained for the periods required by the applicable commerce and tax laws of Nepal, to support dispute resolution, and to assist lawful investigations of fraud.

6. Sharing Your Information

We do not sell your personal data. We share it only in these limited circumstances:

• With other users: When a purchase is made, the buyer's name and delivery details are shared with the seller of that order so it can be fulfilled. We do not share your email address or payment details with other users.
• With couriers: Delivery details are shared with the courier service used for an order (for example, Pathao, InDrive, or a local parcel service).
• With service providers: Our Services run on trusted infrastructure providers that process data on our behalf under confidentiality obligations.
• For legal compliance: We may disclose information if required by law, court order, or a lawful request from Nepalese government authorities.

7. Your Privacy Rights

Under the Individual Privacy Act, 2075, you have the right to:

• Be informed: Know what personal data we collect and why — this policy serves that purpose.
• Access: Request a copy of the personal data we hold about you.
• Rectify: Correct inaccurate or incomplete personal information in your profile.
• Erase: Request deletion of your account and personal data. Note: records that we are legally required to retain (such as transaction and verification records described in Section 5) will be kept for the legally required period even after account deletion.
• Withdraw consent: Withdraw consent for data processing that is based on consent, without affecting processing already carried out.

To exercise any of these rights, contact us using the details in Section 9. We will respond to verified requests within a reasonable time.

8. Children

The Services are intended for users aged 16 and above. We do not knowingly collect personal data from anyone under 16. If you believe a person under 16 has created an account, please contact us and we will take appropriate action.

9. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your data, please contact our Privacy Office at:

Email: privacy@puranochic.com
Address: Kathmandu, Bagmati Province, Nepal