1. Who We Are
Sabthok Nepal ("we," "us") is operated by Sabthok Pvt. Ltd., based in Thamel, Kathmandu, Nepal. This Privacy Policy explains how we collect, use, and protect your personal information when you use our website and services.
2. Information We Collect
a) Information from Google Sign-In
When you sign in with Google, we receive:
- Your name (first and last)
- Your email address
- Your Google account profile picture (if available)
We do not receive or store your Google password.
b) Information You Provide
- Phone number and language preference (optional, via profile)
- Booking details: dates, party size, special requests
- Messages sent through our contact forms
c) Automatically Collected Information
- IP address, browser type, and device information
- Pages visited and time spent on the Platform
- Referring website or search terms
3. How We Use Your Information
- To provide our services: Process bookings, connect you with guides, and manage your account.
- To communicate: Send booking confirmations, status updates, and respond to inquiries.
- To improve the Platform: Analyze usage patterns to enhance the user experience.
- To ensure safety: Prevent fraud, abuse, and unauthorized access.
We do not sell your personal data to third parties.
4. Information Sharing
We share your information only in these cases:
- With guides: Your name, contact details, and booking details are shared with the guide assigned to your experience so they can coordinate your trip.
- Service providers: We use third-party services for hosting, email, and analytics that may process your data on our behalf.
- Legal requirements: If required by law or to protect the rights and safety of our users.
5. Cookies & Local Storage
We use:
- Authentication tokens: Stored in your browser's local storage to keep you signed in.
- Essential cookies: Required for the Platform to function (e.g., CSRF protection).
We do not use advertising or tracking cookies.
6. Data Security
We protect your data with HTTPS encryption in transit, secure server infrastructure, and access controls. However, no system is 100% secure, and we cannot guarantee absolute security.
7. Data Retention
We retain your account data for as long as your account is active. Booking records are kept for 3 years for legal and operational purposes. You may request deletion of your account and associated data at any time.
8. Your Rights
You have the right to:
- Access the personal data we hold about you.
- Correct inaccurate information via your profile page.
- Delete your account and personal data by contacting us.
- Withdraw consent for data processing at any time.
To exercise these rights, email us at [email protected].
9. Children's Privacy
The Platform is not intended for children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us to have it removed.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify registered users of material changes via email. Continued use of the Platform after changes constitutes acceptance.