Privacy Policy

PAKO Technology ("PAKO", "we", "us") operates this website. This policy explains what personal data the website collects, why we collect it, how long we keep it and what you can do about it.

It covers this website only. Our products — tiroom and darta — have their own privacy terms, because they process different data for different reasons.

PAKO Technology is not currently incorporated as a legal entity. We say so plainly rather than implying otherwise. The contact below is a real address, monitored by the people responsible for this site.

Data controller: PAKO Technology, Nepal Contact: privacy@pakotechnology.com

What we collect

Information you send us. When you use the contact form we receive your name, your email address, your company if you give one, and the message you write. Nothing on that form is collected that you did not type.

Server logs. Our hosting provider records standard request data — IP address, timestamp, the page requested, your browser's user-agent string — for security and for diagnosing faults. This is ordinary web-server behaviour rather than a tracking system.

Preferences held in your browser. Your light or dark theme choice is stored in your browser's local storage. It never leaves your device and we never see it.

What we do not collect. There is no analytics platform on this site. There are no advertising trackers, no third-party pixels, no session recording, and no cross-site profiling. If that changes, this page changes first and the change is dated.

Why we use it, and on what basis

| What | Why | Lawful basis (GDPR Art. 6) | | --- | --- | --- | | Contact-form fields | To read your message and reply to it | Legitimate interest — you contacted us and expect an answer. Consent where you ask to be kept informed. | | Server logs | Security, abuse prevention, fault diagnosis | Legitimate interest in operating a functioning, secure website | | Theme preference | Showing the site the way you chose | Strictly necessary for a function you requested |

We do not use your data for automated decision-making or profiling, and we do not sell or rent it. We will not add you to a mailing list because you used the contact form.

How long we keep it

Contact-form correspondence is kept for 24 months from our last exchange, so we can pick up a conversation where it left off, and then deleted. Server logs are kept for 30 days. If you ask us to delete your correspondence sooner, we will.

Who else sees it

We share personal data only with the processors we need to run the site. Each is bound to use it solely on our instructions.

• Resend — delivers contact-form submissions to our inbox. Processed in the United States.
• Our hosting provider — runs the site and holds the short-lived server logs described above. We will name the current provider on request.

We disclose data to anyone else only where the law requires it, and we will tell you unless we are legally barred from doing so.

International transfers

Our processors may handle your data outside Nepal, including in the United States. Where data originating in the EEA or the UK is transferred, we rely on the European Commission's Standard Contractual Clauses, or the UK Addendum to them, as incorporated into our agreements with those processors.

Your rights

Under Nepal’s Individual Privacy Act, 2075 (2018) you have the right to know what personal data about you is held, to obtain a copy of it, to have inaccurate data corrected, and to require that it is not disclosed without your consent.

If you are in the EEA or the UK

The GDPR and UK GDPR give you the right to:

• access the personal data we hold about you;
• rectify it if it is wrong or incomplete;
• erase it, where we have no overriding reason to keep it;
• restrict or object to our processing, including any processing based on legitimate interest;
• port data you gave us, in a machine-readable form;
• withdraw consent at any time, without affecting anything done before you withdrew it.

You may also complain to your national supervisory authority. In the UK that is the Information Commissioner's Office.

If you are in California

Under the CCPA as amended by the CPRA you may request disclosure of the categories and specific pieces of personal information we have collected, ask for deletion or correction, and not be discriminated against for asking. We do not sell or share personal information as those terms are defined by the CPRA, and we have not done so in the preceding twelve months.

How to exercise any of this

Write to privacy@pakotechnology.com. We reply within 30 days. We may ask you to confirm your identity, but only to the extent needed to be sure we are not disclosing your data to someone else.

Security

The site is served over HTTPS. Contact-form submissions are rate-limited and validated on the server. Access to the inbox that receives them is restricted to the people who need it. No system is perfectly secure, and we will not claim otherwise.

Children

This site is not directed at children and we do not knowingly collect personal data from anyone under 16. If you believe a child has sent us personal data, write to us and we will delete it.

Changes

When this policy changes we update the date at the top of the page. Where a change materially affects how we handle data you have already given us, we will say so here rather than rely on you noticing.

Contact

Questions, requests or complaints: privacy@pakotechnology.com.