Privacy Policy

1. Who we are

This website is run by [Company legal name, e.g. Everoast Pvt. Ltd.] (“EVEROAST”, “we”, “us”), [Registered address], Bhaktapur, Nepal. This policy explains what personal information we collect when you use this website, why we collect it, and the choices you have. We handle personal information in line with Nepal’s Individual Privacy Act, 2075 (2018).

2. What we collect

We only collect what we need to sell and deliver coffee and to answer you.

• When you order: your name, phone number, delivery address and city, the items you chose, and the order total. For orders outside Nepal we also ask for your email, country and postal code, and any notes you add.
• When you send an inquiry: your name, email, and anything else you choose to give us, such as phone number, company, role, expected volume and your message.
• When you join our mailing list: your email address.
• When you pay: a payment reference, the amount, and whether the payment succeeded. We do not receive or store your card number, CVC, bank login or wallet password. See section 4.
• Technical information: our hosting provider automatically records basic request details such as IP address, browser type and the time of the request, for security and to keep the site running.

3. How we use it

• To process, roast, pack and deliver your order, and to contact you about it.
• To confirm your payment with the payment provider you chose.
• To reply to inquiries, including wholesale and hospitality requests.
• To send our mailing list, only if you joined it. Every email lets you leave.
• To keep accounting and tax records required by Nepali law.
• To protect the website and our customers from fraud and misuse.

We do not sell or rent your personal information, and we do not use it for advertising profiles.

4. Payments

Payments are handled entirely by licensed payment providers: eSewa, Fonepay, and card payments through Himalayan Bank Limited and its gateway partner 2C2P. You enter your card, bank or wallet details on the provider’s own secure page, not on ours. We only receive the result: whether the payment succeeded, the amount and a reference number. Each provider handles your information under its own privacy policy.

5. Who we share it with

We share personal information only as far as needed to serve you:

• Payment providers (eSewa, Fonepay, Himalayan Bank / 2C2P), to take your payment.
• Delivery partners and couriers, who receive your name, phone and address to deliver your order.
• Service providers who run parts of this website for us, such as web hosting and email delivery. They may process data outside Nepal and may only use it to provide their service to us.
• Authorities, where Nepali law requires it.

6. Cookies and browser storage

We do not use advertising or tracking cookies, and we do not run analytics.

• Your cart is saved in your own browser (local storage) so it is still there if you reload the page or return from a payment page. It holds only the items you chose, never payment details. It is cleared when your payment is confirmed, and you can clear it at any time through your browser settings.
• A short-lived payment cookie is set when you go to eSewa, Fonepay or the card payment page, so we can match your order when you come back. It expires after 30 minutes and is deleted once the payment finishes.

7. How long we keep it

We keep order and payment records for as long as Nepali tax and accounting law requires. We keep inquiry messages for as long as needed to deal with them, and your mailing list email until you unsubscribe. After that we delete or anonymise the information.

8. How we protect it

This website is served over an encrypted connection (HTTPS). Payment details go straight to the payment provider and never pass through us. Access to customer information is limited to the people who need it to fulfil orders. No method of transmission or storage is completely secure, but we take reasonable steps to protect your information.

9. Your rights

You can ask us to:

• tell you what personal information we hold about you;
• correct information that is wrong or out of date;
• delete your information, where we are not required by law to keep it;
• stop sending you mailing list emails.

To do any of these, contact us using the details below. We may need to confirm your identity first, and we will reply within a reasonable time.

10. Children

This website is not directed at children, and we do not knowingly collect personal information from anyone under 16. If you believe a child has given us their information, contact us and we will delete it.

11. Changes to this policy

We may update this policy from time to time. The date at the top shows when it last changed. Significant changes will be shown clearly on this page.

12. Contact us