Privacy Policy

1. Information We Collect

When you interact with our website and services, we may collect the following types of information:

• Personal details you provide during booking or registration — name, email address, phone number, and billing address.
• Payment information processed securely through our third-party payment providers (Khalti and Stripe). We do not store your credit card or bank account details on our servers.
• Booking details including check-in/check-out dates, room preferences, number of guests, and special requests.
• Account credentials — email and encrypted password when you create an account.
• Usage data — pages visited, time spent, browser type, device information, and IP address collected automatically through server logs.
• Communication records when you contact us via email, phone, or our contact form.

2. How We Use Your Information

We use your personal information for the following purposes:

• Processing and managing your room reservations, restaurant orders, and service bookings.
• Sending booking confirmations, check-in instructions, and stay-related communications.
• Processing payments through Khalti and Stripe.
• Responding to your inquiries and providing customer support.
• Improving our website, services, and guest experience.
• Sending promotional offers and newsletters (only with your consent; you can unsubscribe at any time).
• Complying with legal obligations under the laws of Nepal.

3. Third-Party Services

We use the following third-party services that may process your data according to their own privacy policies:

• Supabase — database hosting, user authentication, and file storage.
• Stripe — international payment processing.
• Khalti — domestic (Nepal) payment processing.
• Resend — transactional email delivery for booking confirmations and notifications.
• Google Maps — embedded maps on our website.

We encourage you to review the privacy policies of these services. We share only the minimum information necessary for each service to function.

4. Cookies & Local Storage

Our website uses the following cookies and browser storage:

• Authentication cookies — managed by Supabase to maintain your login session. These are essential for the website to function when you are logged in.
• No advertising or third-party tracking cookies are used on our website.

You can disable cookies in your browser settings, but this may affect your ability to log in and make reservations.

5. Data Storage & Security

We take the security of your personal information seriously:

• All data is transmitted over HTTPS (encrypted in transit).
• User passwords are hashed and never stored in plain text.
• Our database is hosted on Supabase cloud infrastructure with industry-standard security measures.
• Access to guest data is restricted to authorized hotel staff through role-based access controls (Admin, Manager, Receptionist roles).
• Payment card data is processed directly by Stripe/Khalti and never touches our servers.

6. Data Retention

We retain your personal data for the following periods:

• Booking records — retained for 5 years after your last stay for accounting and legal compliance.
• Account data — retained as long as your account is active. You may request deletion at any time.
• Communication records — retained for up to 2 years.
• Server logs — retained for up to 90 days.

7. Your Rights

You have the following rights regarding your personal data:

• Access — request a copy of the personal data we hold about you.
• Correction — request correction of inaccurate or incomplete data.
• Deletion — request deletion of your personal data and account.
• Withdrawal of consent — unsubscribe from marketing communications at any time.
• Data portability — request your data in a machine-readable format.

To exercise any of these rights, contact us at namaste@imculturalvillage.com or call +977-41-590123.

8. Children's Privacy

Our website and services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child under 16, we will take steps to delete that information promptly.

9. International Visitors

Our services are primarily operated from Nepal. If you are visiting from outside Nepal, please be aware that your data will be transferred to and stored in Nepal. By using our website and services, you consent to this transfer.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The updated policy will be posted on this page with a revised "Last Updated" date. We encourage you to review this page periodically.

11. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact us:

• Email: namaste@imculturalvillage.com
• Phone: +977-41-590123
• Address: East-West Highway, Mithila Region, Province 2, Nepal