Legal

Privacy policy

This policy explains what personal information Outfiqe collects, why we collect it, how we use and share it, and the choices you have.

Last reviewed: [NEEDS INPUT: effective date]

Working draft. This document is pending a formal review and is not yet legally binding. Bracketed items marked NEEDS INPUT require confirmed company details before publication.

Who we are

Outfiqe operates a fashion marketplace connecting shoppers, creators and clothing brands in Nepal. In this policy, “Outfiqe”, “we” and “us” refer to [NEEDS INPUT: registered legal entity name and registration number], registered at [NEEDS INPUT: registered address]. For any privacy question or request, contact [NEEDS INPUT: privacy / grievance contact email].

Information we collect

Information you give us

  • Account details: name, email address, phone number and password (stored only as a hash).
  • Order details: delivery name, address, landmark, city and contact phone number.
  • Creator and brand details: profile information, and, for withdrawals, bank account information, which is encrypted at rest and only decrypted for a payout.
  • Content you post: looks, photos, reviews, messages and support requests.

Information collected automatically

  • Device and usage data: pages viewed, taps on creator tags and links, and session identifiers used for attribution.
  • Cookies and similar technologies. See our cookie policy.
  • Error and performance diagnostics through our error-reporting provider.

Information from third parties

  • If you sign in with Google or Facebook, we receive your name and email address from that provider.
  • Payment status information from eSewa and Khalti when you pay by wallet. We do not receive or store your full wallet or card credentials.

How we use your information

  • To create and secure your account, and to authenticate you.
  • To process orders, arrange delivery, and handle cancellations, returns and refunds.
  • To attribute sales to creators and calculate and pay commissions and brand settlements.
  • To provide support, and to send transactional messages about your orders and account.
  • To detect, prevent and investigate fraud, abuse and security incidents.
  • To improve the product and understand how it is used, in aggregate.
  • To send marketing communications where you have opted in or where the law permits. You can opt out at any time.

Legal bases

We process your information to perform our contract with you (orders, payouts), for our legitimate interests (security, fraud prevention, product improvement), to comply with legal obligations, and with your consent where required (for example, non-essential cookies and opt-in marketing). [NEEDS INPUT: confirm the applicable data-protection framework and legal bases for Nepal and any other market served.]

How we share information

  • Brands: when you place an order, the relevant brand receives the information needed to prepare it. Buyer contact and address details are managed by Outfiqe and are not exposed to brands beyond what fulfilment requires.
  • Delivery partners: your delivery name, address and phone number to complete delivery.
  • Payment providers: eSewa and Khalti, to process and verify wallet payments and refunds.
  • Service providers: hosting, error reporting, email delivery and analytics, under contract and only for the purposes above.
  • Legal and safety: where required by law, or to protect the rights, property or safety of Outfiqe, our users or the public.
  • Business transfers: in connection with a merger, acquisition or sale of assets, subject to this policy.

We do not sell your personal information.

Retention

We keep personal information for as long as your account is active and as needed to provide the service, then for the period required to meet legal, accounting, tax and dispute- resolution obligations. [NEEDS INPUT: confirm retention periods, especially for financial and bank-account records.]

Security

Passwords are hashed and never stored in plain text. Bank account numbers are encrypted at rest and access to decrypt them is restricted and logged. Access tokens are short-lived and sessions can be revoked. No system is perfectly secure, but we take reasonable technical and organisational measures to protect your information.

Your rights and choices

  • Access, correct or delete your account information from your account settings, or by contacting us.
  • Opt out of marketing messages using the unsubscribe link or your settings.
  • Disconnect a linked Google or Facebook sign-in from your account settings.
  • Request a copy of your data, or restrict or object to certain processing, where the law provides for it.

[NEEDS INPUT: describe the complaint route and supervisory authority, if any.]

Children

Outfiqe is not directed at children under [NEEDS INPUT: minimum age]. We do not knowingly collect their information.

Changes to this policy

We will update this policy as the product and the law change, and will post the new version here with a revised review date. Material changes will be communicated in the app or by email.