PRIVACY POLICY
(Effective Date: May 5, 2026)
1. INTRODUCTION
1.1 Karki Associates Private Limited (“Company”, “we”, “us”, “our”) respects your privacy and is committed to protecting your personal data. This Privacy Policy (“Policy”) explains how we collect, use, disclose, retain, and safeguard your personal information when you visit our website (the “Site”), interact with us through electronic means, or otherwise communicate with us.
1.2 This Policy is incorporated into and forms part of our Terms of Use. By accessing or using the Site, you acknowledge that you have read and understood this Policy and agree to the collection, use, and disclosure of your information as described herein. If you do not agree with this Policy, please do not use the Site.
2. DEFINITIONS
2.1 “Personal Data” means any information relating to an identified or identifiable natural person, including but not limited to name, email address, phone number, IP address, device identifiers, and any other data that can be linked to an individual.
2.2 “Processing” means any operation performed on Personal Data, whether by automated means, such as collection, recording, organisation, storage, adaptation, retrieval, consultation, use, disclosure, dissemination, alignment, combination, restriction, erasure, or destruction.
2.3 “Data Subject” means the individual to whom the Personal Data relates.
2.4 “Service Provider” means any third party that processes Personal Data on behalf of the Company.
3. TYPES OF INFORMATION WE COLLECT
We may collect, process, and store the following categories of information:
3.1 Personal Data You Voluntarily Provide
When you: (a) Contact us through our contact form, email, or telephone; (b) Request legal information, newsletters, or other communications; (c) Submit an inquiry about our legal or consultancy services; (d) Provide feedback, testimonials, or participate in surveys; we may collect: name, email address, telephone number, organisation name, job title, country, and any other information you choose to include in your message or communication.
3.2 Automatically Collected Data (Usage Data)
When you access the Site, we automatically collect: (a) Device information: IP address, browser type and version, operating system, device type, and unique device identifiers; (b) Usage information: pages visited, time and date of access, time spent on pages, clickstream data, referring/exit URLs, and other diagnostic data; (c) Location information: general geographic location (e.g., city or region) derived from your IP address.
3.3 Cookies and Similar Tracking Technologies
We use cookies, web beacons, pixel tags, and local storage to: (a) Enhance your browsing experience; (b) Analyse Site usage and performance; (c) Remember your preferences and language settings. You may control cookies through your browser settings. Disabling certain cookies may affect the functionality of the Site. A separate Cookie Policy is available on the Site.
4. LAWFUL BASES FOR PROCESSING (LEGAL GROUNDS)
We process your Personal Data only on the following lawful bases, as recognised under applicable laws of Nepal and international standards: (a) Consent: You have given clear, affirmative consent for processing for a specific purpose (e.g., sending marketing communications). (b) Contractual necessity: Processing is necessary to respond to your inquiry or to provide services you have requested prior to entering into a contract. (c) Legal obligation: Processing is required to comply with a legal or regulatory obligation to which we are subject (e.g., anti-money laundering laws, court orders). (d) Legitimate interests: Processing is necessary for our legitimate business interests, provided such interests are not overridden by your data protection rights (e.g., improving Site security, preventing fraud, analysing usage patterns).
5. PURPOSES AND USES OF YOUR INFORMATION
We use your Personal Data for the following purposes:
5.1 Core Business Purposes: (a) To respond to your queries, requests, or submissions; (b) To provide legal, advocacy, or consultancy services if you become a client; (c) To communicate with you regarding potential engagements or ongoing matters.
5.2 Site Operations and Improvement: (a) To maintain, secure, and optimize the Site; (b) To monitor and analyse usage trends, traffic, and user behaviour; (c) To customise and personalise your experience on the Site.
5.3 Legal Compliance and Protection: (a) To comply with applicable laws, regulations, court orders, or governmental requests; (b) To enforce our Terms of Use and this Policy; (c) To detect, prevent, or investigate security incidents, fraud, or other prohibited activities; (d) To protect the rights, property, or safety of the Company, our users, or others.
5.4 Marketing and Communications (with consent): If you have provided explicit consent, we may use your contact details to send you legal updates, newsletters, event invitations, or other information that may be of interest. You may opt out at any time using the unsubscribe link or by contacting us.
6. DISCLOSURE OF YOUR PERSONAL DATA
We do not sell, rent, or trade your Personal Data to third parties. We may share your Personal Data only in the following limited circumstances:
6.1 Service Providers and Processors: We may engage trusted third-party service providers to perform functions on our behalf, such as hosting, analytics, email delivery, or security monitoring. These providers have access to your Personal Data only to the extent necessary to perform their services and are contractually obligated to maintain confidentiality and security.
6.2 Legal and Regulatory Disclosures: We may disclose your Personal Data if required to do so by law, regulation, legal process, or enforceable governmental request, including but not limited to: (a) Complying with a subpoena, court order, or other legal instrument; (b) Responding to lawful requests from public or law enforcement authorities; (c) Establishing, exercising, or defending legal rights.
6.3 Corporate Transactions: In the event of a merger, acquisition, reorganisation, sale of assets, or insolvency, your Personal Data may be transferred as part of the transaction, subject to the same level of privacy protection as set forth in this Policy and to the extent permitted by law.
6.4 With Your Consent: We may share your Personal Data with third parties when you have given explicit consent to do so for a specific purpose.
7. INTERNATIONAL DATA TRANSFERS
7.1 The Company is based in Nepal. If you access the Site from outside Nepal, your Personal Data may be transferred to, and processed in, Nepal. Nepali data protection laws may differ from those in your country.
7.2 For any onward transfer of Personal Data to a third country (other than Nepal), we will ensure appropriate safeguards are in place, such as standard contractual clauses, binding corporate rules, or reliance on adequacy decisions where applicable.
8. DATA SECURITY
8.1 We implement and maintain reasonable administrative, technical, and physical safeguards designed to protect your Personal Data against accidental loss, unauthorised access, use, alteration, or disclosure. These include: (a) Encryption of data in transit using TLS (Transport Layer Security); (b) Access controls limiting personnel access to Personal Data on a need-to-know basis; (c) Regular security assessments and updates; (d) Secure storage of physical records.
8.2 Despite these measures, no method of transmission over the internet or method of electronic storage is 100% secure. Therefore, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of any credentials associated with your use of the Site.
9. DATA RETENTION
9.1 We retain your Personal Data only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, or reporting requirements.
9.2 Retention periods are determined based on: (a) The duration of your engagement or inquiry with us; (b) Our legal obligations (e.g., retention of records under Nepali laws applicable to legal professionals); (c) The statute of limitations for potential legal claims; (d) Legitimate business needs (e.g., to maintain a record of communications).
9.3 After the retention period expires, we will securely delete or anonymise your Personal Data so that it can no longer be linked to you.
10. YOUR RIGHTS AS A DATA SUBJECT
Depending on applicable law (including, where relevant, the proposed Data Protection Act of Nepal or equivalent), you may have the following rights:
10.1 Right of Access: You may request confirmation of whether we process your Personal Data and request a copy of such data.
10.2 Right to Rectification: You may request correction of inaccurate or incomplete Personal Data.
10.3 Right to Erasure (“Right to be Forgotten”): You may request deletion of your Personal Data where there is no compelling legal basis for continued processing.
10.4 Right to Restriction of Processing: You may request that we restrict processing of your Personal Data under certain conditions (e.g., while we verify accuracy).
10.5 Right to Data Portability: You may request to receive your Personal Data in a structured, commonly used, machine-readable format and to transmit it to another controller, where technically feasible and where processing is based on consent or contract.
10.6 Right to Object: You may object to processing based on legitimate interests or direct marketing.
10.7 Right to Withdraw Consent: Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
10.8 Right to Lodge a Complaint: You have the right to lodge a complaint with the relevant data protection supervisory authority in Nepal (once established) or with your local authority.
To exercise any of these rights, please contact us using the details in Section 15. We will respond within a reasonable timeframe, and in any case within one month of verifying your identity. We may charge a reasonable fee for manifestly unfounded or excessive requests.
11. CHILDREN'S PRIVACY
11.1 The Site is not intended for, nor directed at, children under the age of 13. We do not knowingly collect Personal Data from any person under 13 years of age.
11.2 If you are a parent or guardian and believe that your child under 13 has provided us with Personal Data without your consent, please contact us immediately. Upon verification, we will delete such information.
11.3 No part of the Site is designed to attract anyone under 13.
12. THIRD-PARTY LINKS AND SERVICES
12.1 The Site may contain links to third-party websites, plugins, applications, or social media platforms (e.g., LinkedIn, Twitter) that are not operated or controlled by us.
12.2 Clicking on those links or enabling those connections may allow the third party to collect or share data about you. We do not endorse or assume any responsibility for the privacy practices, content, or security of any third-party sites.
12.3 We encourage you to read the privacy policies of every third-party site you visit.
13. COOKIES AND TRACKING TECHNOLOGIES – DETAILS
13.1 We use the following categories of cookies: (a) Strictly necessary cookies: Required for the operation of the Site (e.g., security, load balancing). (b) Functional cookies: Remember your preferences and settings. (c) Analytics/performance cookies: Collect anonymous usage data to improve the Site (e.g., Google Analytics). (d) Targeting/advertising cookies: We do not currently serve third-party ads, but may use cookies to limit repetitive messages.
13.2 You can set your browser to refuse all or some cookies, or to alert you when cookies are being sent. If you disable necessary cookies, some parts of the Site may not function properly.
13.3 Our Cookie Policy (available separately) provides detailed information on the specific cookies used, their duration, and how to manage them.
14. DATA BREACH NOTIFICATION
14.1 In the event of a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, your Personal Data, we will take prompt remedial action.
14.2 Where required by applicable law, we will notify you and the relevant supervisory authority within a reasonable time, and in any event within 72 hours of becoming aware of the breach, where feasible.
15. CHANGES TO THIS PRIVACY POLICY
15.1 We may update this Policy from time to time to reflect changes in legal, regulatory, or operational requirements. The revised version will be posted on the Site with an updated “Effective Date”.
15.2 If we make material changes that significantly affect your rights, we will provide a more prominent notice (e.g., a banner on the Site or email notification, where feasible).
15.3 Your continued use of the Site after the effective date of any changes constitutes your acceptance of the revised Policy. If you do not agree to the changes, you should discontinue use of the Site.
16. SEVERABILITY
If any provision of this Policy is found to be invalid, illegal, or unenforceable by a court of competent jurisdiction, such provision shall be severed, and the remaining provisions shall continue in full force and effect.
17. GOVERNING LAW
This Policy and any disputes arising under or in connection with it shall be governed by the laws of Nepal. Any dispute relating to this Policy shall be subject to the exclusive jurisdiction of the courts of Pokhara, Kaski District, Nepal, consistent with our Terms of Use.
18. CONTACT
For any questions, requests, complaints, or to exercise your data protection rights, please contact us.
END OF PRIVACY POLICY