Privacy Policy

1. Introduction

AlpineRoot Technologies Nepal (“AlpineRoot”, “we”, “us”, or “our”) is committed to protecting the privacy and personal information of our clients, website visitors, and prospective clients in Nepal. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information in accordance with applicable laws of Nepal, including the Privacy Act, 2075 (2018) and the Electronic Transactions Act, 2063 (2008), where relevant.

By visiting our website at alpineroot.com.np or submitting information through our contact forms, you consent to the practices described in this policy.

2. Information We Collect

We collect personal information only where it is reasonably necessary for our business activities. The types of personal information we may collect include:

• Contact information: Your name, email address, phone number, and company or organisation name when you submit our contact form.
• Project and onboarding information: Business details, brand assets, domain information, and technical requirements you provide so we can deliver the services you request.
• Technical data: IP address, browser type, device information, and page visit data collected automatically via analytics tools. Where possible, this data is aggregated or pseudonymised and not used to identify you personally.

3. How We Use Your Information

We use the information we collect for the following purposes:

• To respond to enquiries submitted via our contact form or other channels.
• To deliver, manage, and improve the digital services you engage us for.
• To send transactional communications related to your project or enquiry.
• To improve the performance, security, and content of our website.
• To comply with legal obligations under the laws of Nepal.

We do not sell, rent, or trade your personal information to third parties.

4. Data Storage and Security

Your personal information is stored on secure, encrypted infrastructure operated by reputable cloud providers. Specifically:

• Form submissions may be stored in a managed PostgreSQL database hosted in secure data centres with encryption in transit and at rest.
• Uploaded files (such as brand assets) are stored in private object storage with access controls limited to authorised personnel.

We implement reasonable administrative, technical, and organisational safeguards designed to protect your personal information from unauthorised access, disclosure, alteration, or destruction.

5. Disclosure to Third Parties

We may disclose personal information to the following categories of third parties where necessary to deliver our services:

• Email providers: Used to send transactional emails. Your email address is transmitted solely to deliver the message.
• Analytics providers (PostHog): Aggregated or pseudonymised usage data when you have consented to non-essential cookies.
• Infrastructure providers: Hosting, database, CDN, and deployment partners that process data as part of normal operations and are bound by contractual confidentiality and security obligations.

We require service providers to handle personal information in line with applicable privacy requirements and only for the purposes we specify.

6. Your Rights

Under applicable Nepalese privacy law, you may have the right to:

• Request access to the personal information we hold about you.
• Request correction of inaccurate or incomplete information.
• Request deletion of your personal information, subject to legal retention requirements.
• Withdraw consent for processing where consent is the basis for collection.

To exercise any of these rights, please contact us at info@rootalpine.com.

7. Cookies and Tracking

Our website uses cookies and similar technologies for essential operation and, with your consent, for analytics. We ask for your consent before placing non-essential cookies. You can withdraw consent at any time through your browser settings or the cookie preferences on this site.

8. Cross-Border Processing

Some of our infrastructure and service providers may process data outside Nepal. Where this occurs, we take steps to ensure appropriate safeguards are in place consistent with the Privacy Act, 2075 (2018) and our contractual obligations.

9. Changes to This Policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page will reflect any changes. We encourage you to review this page periodically.