Privacy Policy

1. Information We Collect

We collect information in the following ways:

a) Information you give us directly

• Name, email address, phone number, shipping address, and billing address when you place an order, create an account, sign up for our newsletter, or contact us.
• Order details: items purchased, order value, order history, and any notes or preferences you provide (e.g., gift messages).
• Correspondence you send us via email, contact forms, or social media.

b) Information collected automatically

• Device and browser information (IP address, browser type, operating system, device identifiers).
• Usage data (pages viewed, time spent on pages, links clicked, referring website, general location derived from IP address).
• Cookies and similar tracking technologies, as described in our Cookie Policy.

c) Information from third parties

• Bank/wire transfer confirmation when you complete payment for an order. Once we enable online payment through eSewa or Khalti, payment confirmation data from those providers as well.
• Shipping and delivery status from our courier and logistics partners.

Orders are currently completed via bank/wire transfer arranged directly with you, so we do not collect or store any payment card, account, or wallet details on our servers. Once online payment through eSewa or Khalti is enabled, those providers will handle your payment details directly, and we still will not store your full card or wallet credentials.

2. How We Use Your Information

We use the information we collect to:

• Process and fulfill your orders, including payment (currently via bank/wire transfer), shipping, and customer support.
• Create and manage your account, if you choose to create one.
• Communicate with you about your orders, including confirmations, shipping updates, and delivery issues.
• Improve our Site and product offering based on your feedback and order history. We do not currently use website analytics tools.
• Detect and prevent fraud, abuse, and security incidents.
• Comply with legal obligations, including tax, customs, and export/import documentation required for international shipping.

4. Who We Share Your Information With

We do not sell your personal information. We share information only as necessary to run our business:

• Payment processors: orders are currently completed via bank/wire transfer, so no payment processor receives your data today. Once we enable online payment through eSewa and Khalti, those providers will process your payment directly under their own privacy policies.
• Shipping and logistics partners (e.g., Nepal Post, DHL, FedEx, or other international couriers we use) to deliver your order and provide tracking.
• Email service providers (e.g., Resend) to send order confirmations and account-related notifications.
• Professional advisors such as our accountants or legal counsel, where necessary.
• Government or regulatory authorities, where required by law, customs regulation, or to protect our legal rights.

5. International Data Transfers

Because we are based in Nepal and ship worldwide, your information may be transferred to, stored, and processed in Nepal and other countries where our service providers operate, which may have different data protection laws than your home country. Where required (for example, for EU/UK customers), we rely on our service providers' standard contractual safeguards for such transfers.

6. Data Retention

We retain your personal information for as long as necessary to:

• Fulfill the purpose for which it was collected (e.g., processing and supporting your order).
• Comply with our legal, tax, and accounting obligations.
• Resolve disputes and enforce our agreements.

Order and transaction records are typically retained for at least the period required by applicable tax and commercial law.

7. Your Rights

Depending on where you live, you may have the right to:

• Access the personal information we hold about you.
• Correct inaccurate or incomplete information.
• Request deletion of your personal information ("right to be forgotten"), subject to our legal retention obligations.
• Object to or restrict certain processing, including marketing.
• Request a copy of your data in a portable format.
• Withdraw consent at any time where processing is based on consent.
• Lodge a complaint with your local data protection authority (for EU/UK/California residents and others with a designated authority).

To exercise any of these rights, email us at lumbiniteahouse@gmail.com with the subject line "Privacy Request." We will respond within a reasonable timeframe, generally within 30 days.

California residents (CCPA/CPRA): You have the right to know what personal information we collect, request deletion, and opt out of the "sale" or "sharing" of personal information (we do not sell personal information). You will not be discriminated against for exercising these rights.

8. Children's Privacy

Our Site and products are not directed to children under 16, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can delete it.

9. Data Security

We use reasonable administrative, technical, and physical safeguards to protect your personal information, including encrypted browsing (HTTPS/SSL). Once online payment through eSewa or Khalti is enabled, that payment processing will be handled directly by those PCI-compliant providers. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

10. Marketing Communications and Opt-Out

We do not currently operate a marketing newsletter. If we introduce one in the future, every marketing email will include an unsubscribe link, and you can also opt out at any time by emailing lumbiniteahouse@gmail.com. Transactional emails (order confirmations, shipping updates) are always necessary to fulfill your order and are not subject to opt-out.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of the Site after changes take effect constitutes acceptance of the updated Policy.