1. Introduction
DataWithMala (operated by Mala Deep, hereinafter “we”, “us”, or “our”) is committed to protecting your personal information. This Privacy Policy explains what data we collect, why we collect it, how we use it, and your rights — in compliance with Nepal’s Privacy Act 2075 (2018) (“Nepal Privacy Act”), the Individual Privacy Act 2018, and internationally recognised standards including GDPR principles and OECD Privacy Guidelines.
By accessing datawithmala.com or enrolling in any course, you agree to this policy. If you do not agree, please discontinue use of our platform.
2. Scope and Applicable Law
2.1 Nepal Law
We comply with Nepal’s Right to Privacy Act 2075 (2018) and the Electronic Transactions Act 2063 (2006), which establish the right of individuals to control their personal information and govern electronic data collection.
2.2 International Standards
For users in the European Economic Area (EEA), United Kingdom, or other jurisdictions with strong data protection laws, we apply equivalent protections based on GDPR principles, including lawful basis for processing, data minimisation, and data subject rights.
3. Information We Collect
3.1 Information You Provide Directly
- Full name and email address (newsletter signup, course enrollment)
- Phone number (WhatsApp contact, if you initiate contact)
- Payment details (processed securely by our LMS provider, lms.dataksha.com — we do not store card details)
- Messages, questions, and feedback you send us
3.2 Information Collected Automatically
- IP address and approximate geographic location
- Browser type, operating system, device type
- Pages visited, time spent, referral URLs
- Cookies and session identifiers (see Section 7)
3.3 Information from Third Parties
- Course enrollment and progress data from lms.dataksha.com
- Social media interactions if you engage with our Facebook or Instagram pages
4. How We Use Your Information
We process your personal data for the following purposes and on the following legal bases:
Course delivery: Providing access to enrolled courses, issuing certificates, and managing your account. (Contractual necessity)
Communication: Sending course updates, newsletters (only if you opt in), and responding to your inquiries. (Legitimate interest / Consent)
Payment processing: Facilitating enrollment payments through our LMS provider. (Contractual necessity)
Platform improvement: Analysing usage data to improve course content and website experience. (Legitimate interest)
Legal compliance: Maintaining records as required by Nepalese tax and business laws. (Legal obligation)
We do not sell, rent, or trade your personal data to any third party for marketing purposes.
5. Data Sharing and Disclosure
We share your data only in the following limited circumstances:
- With lms.dataksha.com (our LMS provider) to manage course enrollment and delivery
- With payment processors as required to complete transactions
- With WhatsApp (Meta) when you contact us via our WhatsApp business number
- With law enforcement or government authorities if legally required under Nepalese law
- With your explicit consent for any other purpose
All third-party providers we use are required to maintain appropriate data security standards.
6. Data Retention
We retain personal data for the following periods:
- Account and enrollment records: For the duration of your account plus 5 years (as required for Nepalese business records)
- Email marketing lists: Until you unsubscribe
- Payment records: 7 years (Nepalese tax law requirement)
- Analytics data: 26 months in anonymised form
After the applicable retention period, data is securely deleted or anonymised.
7. Cookies
We use cookies and similar technologies to improve your browsing experience. Types of cookies we use:
- Essential cookies: Required for the website to function (login sessions, shopping cart)
- Analytics cookies: To understand how visitors use our site (e.g., page views)
- Preference cookies: To remember your settings and choices
You may disable cookies through your browser settings. Disabling essential cookies may affect website functionality. By continuing to use the site, you consent to our use of non-essential cookies.
8. Your Rights
Under the Nepal Privacy Act 2075 and applicable international law, you have the right to:
- Access: Request a copy of personal data we hold about you
- Correction: Request correction of inaccurate or incomplete data
- Deletion: Request erasure of your data where it is no longer necessary for its original purpose
- Objection: Object to processing based on legitimate interests
- Data portability: Receive your data in a structured, machine-readable format
- Withdraw consent: At any time where processing is based on consent
To exercise any of these rights, contact us at: WhatsApp: +977 9813886937. We will respond within 30 days.
9. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, or destruction. These include SSL/TLS encryption, access controls, and secure third-party hosting. No system is completely secure; in the event of a data breach affecting your rights, we will notify you as required by applicable law.
10. International Data Transfers
Our LMS platform and communication tools may process data outside Nepal. When this occurs, we ensure appropriate safeguards are in place, consistent with international privacy standards.
11. Children’s Privacy
Our services are intended for individuals aged 16 and above. We do not knowingly collect personal data from children under 16. If we become aware of such collection, we will delete it promptly.
12. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated by email (to enrolled users) and by notice on our website. Your continued use of the platform after such notice constitutes acceptance.
13. Contact Us
DataWithMala — Mala Deep
Kathmandu, Nepal
WhatsApp: +977 9813886937
Website: datawithmala.com