Privacy policy

What information Mallket collects, why, who sees it, and the choices you have.

Last updated: 15 October 2026

These terms are being finalised with legal advice and may change. We will tell you about important changes.

Mallket Nepal (mallketnepal.com) is run by Mallket Nepal. In this page "we" and "Mallket" mean that business.

What we collect

Your account: name, email address, an optional phone number, and your password. The password is stored only in a scrambled form that we cannot read.
Your orders: the name, phone number and delivery address you give, the items, the payment method, and the order's status and history.
Feedback you send about the website: your message, the kind of feedback, an optional rating, the page you were on and, if you give it, your email address so we can answer. Only our staff read it.
Things you save or write: saved addresses, your wishlist (when signed in), product reviews, return requests and product reports.
Service enquiries and business applications (Mallket Services): your name, phone number, optional email, travel date, number of people and message; for businesses, the business and contact details, PAN/VAT and tourism licence numbers you give. Staff use them only to answer you.
If you sell on Mallket: your legal and business name, PAN/VAT and registration numbers, business address, contact details, and bank details for payouts. If you add them, your shop's address, opening hours, shop phone and map link are public on the MB page and your store page.
Technical data: your IP address and basic request details in our server logs, used for security and to stop abuse, and a sign-in cookie.

We do not receive or store your card number. Card and wallet payments are completed on the payment provider's own page; we only receive confirmation that the payment succeeded, and a reference.

Why we use it

To take and deliver your order, collect payment, and handle returns and refunds.
To pay sellers.
To keep the site and your account safe, and to prevent fraud and fake orders.
To answer your questions.
To send you emails about your account: confirming your email address and resetting your password. We do not send marketing emails.
To meet legal, tax and accounting duties.

Who sees it

Sellers see what they must pack (the product, quantity and your district). They do not see your name, phone number, address or email.
Mallket's delivery team sees your name, phone number and address to deliver your order.
Payment providers (eSewa, Khalti and card gateways) handle your payment under their own privacy policies.
Cloudflare Turnstile (a "are you a person?" check): on the pages with a form (sign in, create account, forgot password, checkout, reviews, reports, seller application, service enquiries, business applications and feedback) your browser loads a script from Cloudflare, and we send Cloudflare the check result and your IP address so it can tell people from automated programs.
Service providers who run the website for us: our hosting company (servers in Singapore) and our email sending service (it receives your email address and the content of the emails we send you). This means your data is processed outside Nepal.
Our staff, limited by role to what each person needs. Staff actions are recorded.
Authorities, only when the law requires it.

We do not sell your personal information.

Cookies and browser storage

Essential (always on): one sign-in cookie keeps you signed in (up to 7 days); your cart, your wishlist when you are not signed in, a payment in progress, the security check and your cookie choice are kept in your own browser. The site cannot work without them.
Preferences (only if you allow it): your delivery district and the products you viewed recently.
Store referrals (only if you allow it): which store's link brought you to Mallket, so that store is credited if you buy.
When you first visit we ask which of the optional ones you allow. Until you choose, they are not saved. You can change your choice at any time with Cookie settings at the bottom of every page; turning one off deletes what it saved.
We use no tracking or advertising cookies. Some pages show clearly labelled Sponsored ads. If we use an advertising network (for example Google), it may set its own cookies, and we will explain that here before we do.

How long we keep it

We keep your account information while your account exists. Order, payment and payout records are kept for as long as accounting, tax and other laws require, even if you close your account. Confirmation and reset links stop working after 24 hours and 1 hour.

How we protect it

The site uses HTTPS. Passwords are stored in scrambled form. Bank account numbers are shown only in masked form.
Staff access is limited by role, requires a company email address, and every important staff action is logged.

Your choices

You can ask us to show you the information we hold about you, correct it, or delete your account. Some records (for example orders and payments) must be kept by law, so we may keep those. To ask, contact the contact details on our Contact us page. Saved addresses can also be removed under Saved addresses.

Children

Mallket is not meant for children. If you think a child has given us personal information, please contact us and we will remove it.

Changes

If we change this policy in an important way, we will say so on this page and, where we can, by email.

Contact

Questions about your information: the contact details on our Contact us page.