Effective Date: 25/07/2025

In compliance with applicable regulations on the protection of personal data in Nepal, including provisions under the Privacy Act 2018 (2075 B.S.) and related legal frameworks, SICKO (“we,” “our,” or “us”) hereby provides you with information regarding how we collect, use, store, and protect your personal data.


WHO IS RESPONSIBLE FOR THE PROCESSING OF YOUR PERSONAL DATA?

The data controller responsible for your personal data is:

SICKO, a company incorporated under the laws of Nepal, with registered office at [Insert Office Address], Kathmandu, Nepal.

Email (for data protection matters): [email protected]


WHEN DO WE COLLECT YOUR PERSONAL DATA?

We collect personal data through our website and other channels in the following situations:

  • Forms on our website: Including contact forms, checkout pages, or newsletter subscriptions.

  • Email communication: When you contact us at [email protected] for inquiries, feedback, complaints, or job applications.

  • Careers section: When you apply for job opportunities via our website by submitting your resume or relevant information.

  • Cookies and online tracking: When you browse our site, we use cookies to track preferences, usage, and improve user experience.

  • Newsletter subscriptions: When you opt-in to receive updates, promotions, or brand news.

  • Account creation: When you register for an account on our platform.


WHAT PERSONAL DATA DO WE COLLECT AND WHY?

Depending on your interaction with our services, we may collect:

  • Identification data: Name, email address, contact number, shipping address, country of residence, etc.

  • Payment data: Transaction and payment details.

  • Usage data: IP address, geolocation, browser data, and interaction history.

  • Preferences: Shopping habits, wishlist items, feedback, and communication preferences.

We collect this data for the following purposes:

1. To fulfil your purchases and manage orders

  • Processing payments

  • Shipping products

  • Sending confirmations and updates

  • Handling returns or exchanges

Legal basis: Performance of a contract

2. To respond to customer service inquiries

  • Support through email or live chat

  • Complaint resolution

  • Order tracking or feedback

Legal basis: Consent, performance of contract, or legitimate interest

3. To manage user accounts

  • Creating and managing your account

  • Providing access to order history or exclusive features

Legal basis: Contractual necessity

4. To manage your loyalty program membership

  • Apply exclusive offers

  • Track rewards and purchases

  • Send tailored updates or event invitations

Legal basis: Performance of a contract and/or consent

5. For marketing and promotional purposes

  • Sending newsletters or promotional emails

  • Running giveaways or contests

  • Personalizing product recommendations or ads

Legal basis: Consent or legitimate interest (for existing customers)

6. For recruitment

  • Processing job applications

  • Interview scheduling and evaluation

  • Retaining CVs for future openings (with consent)

Legal basis: Pre-contractual necessity and consent

7. Website performance and analytics

  • Site improvements

  • Bug tracking

  • User experience optimization

Legal basis: Legitimate interest or user consent (for cookies)


HOW LONG DO WE RETAIN YOUR DATA?

We retain your data only as long as necessary for the purposes outlined above, and in compliance with the retention periods permitted by Nepalese law. Once the data is no longer needed, it will be securely deleted or anonymized.


DO WE COLLECT DATA FROM MINORS?

Our website and services are intended for individuals above the legal age of majority in Nepal (18 years). If you believe a minor has provided us with personal data, please contact us at [email protected] so we can take appropriate steps.


WHO MAY ACCESS YOUR PERSONAL DATA?

Your data may be shared, when necessary, with:

  • Logistics providers (for order fulfillment)

  • Payment gateways and financial institutions

  • IT and cloud service providers

  • Marketing or advertising platforms (with consent)

  • Government authorities, if legally required

  • Internal staff or contractors under confidentiality obligations

We ensure all third-party service providers adhere to appropriate security and data protection standards.


DO WE TRANSFER DATA INTERNATIONALLY?

Generally, your data is processed within Nepal. If any international transfer is required (e.g., via cloud services), we ensure adequate security measures are taken and such transfers comply with Nepalese data protection laws.


WHAT ARE YOUR RIGHTS REGARDING YOUR DATA?

You may exercise the following rights under Nepal’s privacy law:

  • Right to Access: Request a copy of the personal data we hold.

  • Right to Rectification: Request correction of incorrect or outdated data.

  • Right to Deletion: Request erasure of your data when no longer necessary.

  • Right to Restriction: Limit how we use your data in specific cases.

  • Right to Object: Object to certain types of processing (e.g., marketing).

  • Right to Withdraw Consent: Opt-out of marketing or tracking communications at any time.

To exercise these rights, please contact us at [email protected].


THIRD-PARTY DATA

If you provide personal data belonging to third parties, you are responsible for informing them of this policy and obtaining any necessary consent.


CHANGES TO THIS POLICY

We may update this Privacy and Cookie Policy to reflect changes in law or our data practices. We recommend reviewing this page periodically. If material changes are made, we will notify users via email or website notice.

Last updated: 25/07/2025