Privacy Policy
Last updated: August 1, 2026
This is a starting draft based on how XShopDigital's systems actually work. It is not legal advice — for GDPR, CCPA or other regional privacy-law compliance, have this reviewed by a professional, since obligations vary depending on where your customers are located.
1. Information we collect
When you create an account, place an order, or contact us, we collect: your name, email address, phone number, billing/shipping details you provide, and order history. If you choose a "private account" option on a subscription product, we securely store the login credentials you provide, encrypted at rest, so they can be included with your order.
2. How we use your information
We use your information to: process and deliver orders, send order and account-related emails (confirmations, password resets, support replies), respond to support requests, and improve the site. We do not sell your personal information to third parties.
3. Payment information
We do not store your full payment card or gateway account details ourselves. Payments made via eSewa or Khalti are processed directly by those providers under their own privacy policies. If you pay by manual QR transfer, the payment screenshot you upload is stored securely and is only visible to our admin team for verification.
4. Cookies
We use essential cookies to keep you signed in and to remember your cart. We do not currently use third-party advertising trackers.
5. Data retention
We retain order and account data for as long as your account is active, or as needed to comply with our legal and tax obligations.
6. Your rights
You can request a copy of the personal data we hold about you, ask us to correct it, or request deletion of your account, by contacting us. Some information may need to be retained for legal or accounting reasons even after a deletion request.
7. Security
Sensitive fields such as private-account credentials are encrypted before being stored. We use HTTPS across the site. No online system can be guaranteed 100% secure, but we take reasonable steps to protect your data.
8. Contact
Questions about this policy? Contact us.