Legal
Privacy Policy
Last updated: June 2025
Karnalisoft (“we”, “our”, “us”) is committed to protecting your personal information and your right to privacy. This policy explains what information we collect, how we use it, and what rights you have in relation to it. This policy applies to all information collected through our website at karnalisoft.com and through our communications with you.
1. Information We Collect
Information you provide directly
When you fill in our contact form, request a quote, or send us an email, we collect the information you provide — typically your name, email address, phone number, and the details of your project enquiry.
Information collected automatically
When you visit our website, we may collect standard technical information such as your IP address, browser type, the pages you visit, and how you arrived at our site. This is collected through Vercel Analytics and Google Analytics, and is used in aggregate form to understand how our website is used.
Cookies
We use a small number of strictly necessary cookies required for the website to function correctly, and analytics cookies (which you can decline). We do not use advertising or tracking cookies.
2. How We Use Your Information
We use the information we collect to: respond to your enquiries and provide quotes; communicate about active projects; improve our website and services; comply with legal obligations. We do not sell, rent, or share your personal information with third parties for marketing purposes.
3. Legal Basis for Processing
We process your personal data on the basis of: (a) your consent, where you have provided it explicitly; (b) our legitimate interests in operating and improving our business; (c) the performance of a contract, where we are engaged to provide services to you; and (d) compliance with legal obligations.
4. Data Retention
We retain your personal information for as long as is necessary to provide services, maintain our business records, and comply with our legal obligations. Enquiry data from contacts who do not become clients is typically deleted within 12 months. Project data for clients is retained for 7 years for accounting and legal purposes.
5. Data Security
We take reasonable technical and organisational measures to protect your personal data from unauthorised access, loss, or disclosure. Our website is served over HTTPS. We use reputable third-party services (Vercel, Google) with their own security certifications. However, no internet transmission is completely secure, and we cannot guarantee absolute security.
6. Third-Party Services
We use the following third-party services which may process your data: Vercel (website hosting and analytics — vercel.com/legal/privacy-policy); Google Analytics (website analytics — policies.google.com/privacy); and email services for responding to enquiries. Each of these services has its own privacy policy.
7. Your Rights
You have the right to: access the personal data we hold about you; correct any inaccurate data; request deletion of your data (subject to legal obligations); object to or restrict certain processing; and withdraw consent at any time. To exercise any of these rights, contact us at hello@karnalisoft.com.
8. Contact Us
If you have any questions about this privacy policy or how we handle your data, please contact us by email at hello@karnalisoft.com, or write to us at Karnalisoft, Baneshwor, Kathmandu, Bagmati Province, Nepal.