Privacy Policy

This is a starting draft based on how XShopDigital's systems actually work. It is not legal advice — for GDPR, CCPA or other regional privacy-law compliance, have this reviewed by a professional, since obligations vary depending on where your customers are located.

1. Information we collect

When you create an account, place an order, or contact us, we collect: your name, email address, phone number, billing/shipping details you provide, and order history. If you choose a "private account" option on a subscription product, we securely store the login credentials you provide, encrypted at rest, so they can be included with your order.

2. How we use your information

We use your information to: process and deliver orders, send order and account-related emails (confirmations, password resets, support replies), respond to support requests, and improve the site. We do not sell your personal information to third parties.

3. Payment information

We do not store your full payment card or gateway account details ourselves. Payments made via eSewa or Khalti are processed directly by those providers under their own privacy policies. If you pay by manual QR transfer, the payment screenshot you upload is stored securely and is only visible to our admin team for verification.

4. Cookies

We use essential cookies to keep you signed in and to remember your cart. We do not currently use third-party advertising trackers.

5. Data retention

We retain order and account data for as long as your account is active, or as needed to comply with our legal and tax obligations.

6. Your rights

You can request a copy of the personal data we hold about you, ask us to correct it, or request deletion of your account, by contacting us. Some information may need to be retained for legal or accounting reasons even after a deletion request.

7. Security

Sensitive fields such as private-account credentials are encrypted before being stored. We use HTTPS across the site. No online system can be guaranteed 100% secure, but we take reasonable steps to protect your data.

8. Contact

Questions about this policy? Contact us.