Privacy Policy

Last updated: July 8, 2026

Aparmita ("we," "us," or "our"), operated by Aparmita Nepal Pvt. Ltd., Kathmandu, Nepal, respects your privacy. This policy explains what information we collect when you visit aparmita.com, how we use it, and the choices you have.

1. Information We Collect

Information you provide directly:

• Order information — name, email address, phone number, shipping and billing address, and order details when you make a purchase
• Account information — email and password if you create an account
• Communications — messages you send us via contact forms, email, or WhatsApp
• Reviews — content you submit when reviewing a product

Information collected automatically:

• Usage data — pages visited, time on site, referring pages, approximate location (country/city level), device and browser type, collected through analytics tools
• Cookies — small files stored on your device that keep your cart working, remember your preferences (such as currency), and help us understand how the site is used

Payment information: Card payments are processed by Stripe. Your full card details are transmitted directly to Stripe and never touch or persist on our servers. We receive only a confirmation of payment and the last four digits of your card for order reference. Stripe's handling of your data is governed by the Stripe Privacy Policy.

2. How We Use Your Information

We use your information to:

• Process and fulfil your orders, including shipping via our delivery partners
• Send transactional emails — order confirmations, shipping updates, delivery notifications
• Respond to your questions and support requests
• Send marketing emails about new products and offers, only where you have opted in, and always with a working unsubscribe link
• Improve our website, product range, and shopping experience through aggregated analytics
• Prevent fraud and comply with legal obligations

We do not sell, rent, or trade your personal information to third parties.

3. Who We Share Information With

We share personal data only with service providers necessary to run our store:

• Stripe — payment processing (payment and billing details)
• DHL Express and delivery partners — order delivery (name, address, phone, email)
• Supabase — secure data hosting (order and account data)
• Microsoft Clarity — site analytics (anonymised usage behaviour)
• Email service providers — transactional and marketing email (email address, order context)

Each provider is bound by its own privacy obligations and receives only the data required for its function.

4. International Transfers

We are based in Nepal and serve customers worldwide. Your information may be processed in Nepal and in the countries where our service providers operate (including the United States and the European Union). Where required, we rely on our providers' standard contractual safeguards for these transfers.

5. Your Rights

Depending on where you live, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Delete your data ("right to be forgotten")
• Export your data in a portable format
• Object to or restrict certain processing
• Withdraw consent to marketing at any time — every marketing email includes an unsubscribe link, and unsubscribing is immediate

To exercise any of these rights, email us at info@aparmita.org. We respond to all requests within 30 days.

For EU/EEA customers (GDPR): our legal bases for processing are contract performance (orders), consent (marketing), and legitimate interest (analytics, fraud prevention). You have the right to lodge a complaint with your local supervisory authority.

For California customers (CCPA): we do not sell personal information as defined by the CCPA. You may request disclosure or deletion of your data using the contact above.

6. Data Retention

We keep order records as long as needed for accounting, warranty, and legal purposes. Account data is retained until you ask us to delete it. Marketing consent records are kept until you unsubscribe. Analytics data is retained in aggregated, anonymised form.

7. Cookies

Essential cookies (cart, checkout, currency preference) are required for the site to function. Analytics cookies help us understand site usage and can be blocked through your browser settings without affecting your ability to shop. We do not use third-party advertising cookies.

8. Security

We use industry-standard measures to protect your data: TLS encryption on all pages, encrypted data storage, access controls limiting who within our team can view customer data, and PCI-compliant payment processing through Stripe. No method of transmission is 100% secure, but we take reasonable and appropriate steps to protect your information.

9. Children's Privacy

Our site is not directed at children under 16, and we do not knowingly collect their personal information. If you believe a child has provided us data, contact us and we will delete it.

10. Changes to This Policy

We may update this policy as our services or legal requirements change. The "last updated" date at the top reflects the current version. Material changes will be noted on this page.

11. Contact Us

Aparmita (Aparmita Nepal Pvt. Ltd.)
Kathmandu, Nepal
Email: info@aparmita.org