Privacy Policy

1. Introduction & Legal Basis

This Privacy Policy explains how Buwigs collects, uses, stores and discloses personal information. We aim to comply with applicable Nepalese law including the Individual Privacy Act, 2018 and other relevant statutes. This policy applies to personal data collected through our website, services and during the course of employment.

2. Data We Collect & Purpose

We collect only the information necessary for the stated purposes. Examples include:

• Identity & Contact: name, email, postal address, telephone number, date of birth.
• Government IDs & Employment: citizenship ID/number, passport number, employment history, payroll and bank details where required for hiring and payments.
• Sensitive Data (where required and only with explicit written consent): biometrics, medical information for statutory leave, or other special categories.
• Usage & Technical: IP address, device identifiers, cookie and analytics data.

Purposes: to provide and improve our services, recruit and pay staff, manage relationships, comply with legal obligations, and protect the security of our operations.

3. Informed Consent

We process personal information only where we have a lawful basis. For the collection of sensitive personal data (e.g., biometrics) or where required by law, we will obtain explicit written consent before collection and processing. Individuals may withdraw consent at any time, subject to legal or contractual restrictions.

4. Rights of Individuals

Under applicable law you have the following rights, which you may exercise by contacting us:

• Right to access: obtain a copy of personal data we hold about you.
• Right to rectification: correct inaccurate or incomplete data.
• Right to erasure: request deletion where there is no lawful reason to retain data.
• Right to restrict or object to processing, and to withdraw consent.
• Right to lodge a complaint with the relevant authority where you believe your rights have been breached.

5. Security Measures

We implement reasonable organisational and technical safeguards to protect personal information, including: TLS for data in transit, encryption at rest, role-based access controls, strong authentication, regular vulnerability scanning, and retention policies. Access to sensitive data is limited to authorised personnel only.

6. Third-Party Sharing & International Transfers

We may share information with trusted service providers (cloud, payroll, analytics) and partners who process data on our behalf. We require contractual safeguards (data processing agreements) to ensure they process personal information in accordance with this policy. Where data is transferred outside Nepal we rely on appropriate safeguards and contractual protections.

7. Data Retention

We retain personal information only for as long as necessary for the purposes set out above, or to satisfy legal, accounting, or reporting requirements. Retention periods vary by category of data and applicable law.

8. Children

Our services are not directed to children under the age of 18. We do not knowingly collect personal data from children without parental consent.

9. Contact & Complaints

To exercise your rights, request copies, or raise concerns, contact us atinfo@buwigs.com. You may also lodge a complaint with the competent data protection authority in Nepal.

10. Changes to This Policy

We may update this policy to reflect changes in our practices or legal requirements. The effective date above will be revised when material changes occur.