Privacy Policy

1. Introduction

Welcome to Confidential Trading Pvt. Ltd. ("CTPL", "we", "us", or "our"), a premier importer and distributor of industrial and commercial goods operating in Nepal. We respect your privacy and are committed to protecting your personal data in accordance with applicable data protection laws in Nepal.

This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit our website (ctpl.com.np), submit inquiries through our contact forms, apply for distributorship, or otherwise interact with our distribution services. It also explains your rights regarding your personal data.

2. Data Controller

The data controller responsible for your personal data is:

3. The Data We Collect About You

We collect the following categories of personal data when you interact with our website and services:

A. Information You Provide Voluntarily

• Contact Form Data: Name, company name (optional), email address, phone number, subject, and message content when you submit an inquiry via our "Reach Out" page.
• Distributor Application Data: Owner name, company name, email address, phone number, company VAT/PAN number (9 digits), covered geographic areas, brands of interest, and additional message when you apply for distributorship.

B. Information Collected Automatically

• Technical Data: Internet Protocol (IP) address, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access this website.
• Usage Data: Information about how you use our website, including pages visited, time spent, referral source, and interaction with content.

C. Information We Do Not Collect

We do not collect payment information, financial data, government-issued IDs, or sensitive personal data (such as health, biometric, or racial/ethnic data) through our website.

4. How We Use Your Personal Data

We use your personal data for the following purposes, relying on the lawful bases indicated:

• Responding to inquiries (Legitimate Interest / Contract): To respond to your contact form submissions, answer questions about our products, brands, and distribution services.
• Processing distributor applications (Contract / Legitimate Interest): To evaluate, process, and communicate regarding your distributorship application, including due diligence and background verification.
• Business development (Legitimate Interest): To follow up on business inquiries, send relevant product catalogs, and inform you about new brands or distribution opportunities (only if you have expressed interest).
• Website operation and improvement (Legitimate Interest): To administer, maintain, and improve our website, analyze usage trends, and ensure security.
• Legal compliance (Legal Obligation): To comply with applicable laws in Nepal, including tax, accounting, and regulatory requirements.

5. Data Sharing and Disclosure

We do not sell your personal data. We may share your information only in the following circumstances:

• Internal teams: Our management, sales, and operations teams who need access to evaluate inquiries and applications.
• Service providers: Third-party processors (e.g., cloud hosting, email delivery, analytics) who process data on our behalf under strict confidentiality and data processing agreements.
• Brand principals: With your consent, we may share distributor application details with the relevant brand principals/manufacturers you have expressed interest in representing.
• Legal authorities: When required by law, regulation, court order, or government request in Nepal.
• Business transfers: In connection with a merger, acquisition, or sale of assets, subject to confidentiality protections.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal data:

• HTTPS/TLS encryption for all data in transit
• Secure cloud infrastructure with access controls and monitoring
• Role-based access control limiting data access to authorized personnel only
• Regular security assessments and vulnerability scanning
• Data minimization — we only collect what is necessary for stated purposes

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee absolute security.

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy:

• Contact form data: Retained for 2 years from last interaction, unless a business relationship is established.
• Distributor application data: Retained for 3 years from submission for evaluation and record-keeping; if approved, retained for the duration of the business relationship plus 7 years for legal/tax compliance.
• Technical/usage data: Retained for 12 months for analytics and security purposes.

We may retain data longer where required by Nepal law (e.g., tax records, litigation holds) or to resolve disputes.

8. Your Rights Under Nepal Law

Under applicable data protection principles in Nepal, you have the following rights regarding your personal data:

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure: Request deletion of your data where there is no compelling reason for continued processing.
• Right to Restrict Processing: Request limitation of processing in certain circumstances.
• Right to Data Portability: Receive your data in a structured, commonly used format.
• Right to Object: Object to processing based on legitimate interests, including direct marketing.
• Right to Withdraw Consent: Where processing is based on consent, withdraw it at any time (does not affect lawfulness of prior processing).

To exercise any of these rights, please contact us via our Reach Out page or email info.ctpl1@gmail.com. We will respond within a reasonable timeframe as required by law.

9. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to:

• Essential cookies: Required for website functionality (session management, security).
• Analytics cookies: Help us understand how visitors interact with our site (anonymized where possible).

You can manage cookie preferences through your browser settings. Disabling essential cookies may impair website functionality.

10. International Data Transfers

Your data is primarily processed and stored on servers located in Nepal. If we use cloud services with data centers outside Nepal, we ensure adequate safeguards (standard contractual clauses, adequacy decisions) are in place as per applicable regulations.

11. Children's Privacy

Our website and services are not directed to individuals under 18. We do not knowingly collect personal data from children. If you believe we have collected data from a minor, please contact us immediately for prompt deletion.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The "Last updated" date at the top indicates the most recent revision.

For material changes, we will provide notice via our website or direct communication (where we have your contact details) before the changes take effect.

13. Contact Us

If you have questions, concerns, or complaints about this Privacy Policy or our data practices, please contact: