How we collect, use, and protect your information
Effective Date: February 22, 2026
Champak Paun ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or interact with our services. We operate in compliance with applicable data protection laws across the jurisdictions we serve.
Champak Paun is a family-owned food business registered in Kathmandu, Nepal. We are the data controller responsible for your personal information. We operate in compliance with Nepal's Individual Privacy Act 2075 (2018) and Electronic Transaction Act 2063 (2006), as well as applicable data protection laws in the countries we serve.
We collect information that you provide directly to us through our contact form, pre-order form, and other interactions. This includes your name, email address, phone number (optional), and country of residence.
We automatically collect certain technical information when you visit our website, including your IP address, browser type, operating system, pages visited, and referring website. This data helps us improve our website and services.
We use essential cookies to remember your language preference and theme selection (light/dark mode). These are strictly necessary for website functionality and do not track you across other websites.
We do not collect sensitive personal data such as financial information, health data, or government identification numbers through our website.
We use your information to process and respond to pre-order inquiries, communicate with you about our products and services, improve our website and user experience, and send marketing communications (only with your explicit consent).
Our legal bases for processing your data include: your consent (for marketing communications and optional form submissions), contractual necessity (for processing pre-orders and inquiries), and legitimate interest (for website improvement and security).
We do not sell, rent, or trade your personal information to third parties. We may share your data with trusted service providers who assist us with website hosting, email delivery, and shipping logistics. All service providers are bound by data processing agreements.
We may disclose your information if required by law, court order, or governmental authority, or if necessary to protect our rights, safety, or property. When transferring data across borders, we implement appropriate safeguards to ensure your information remains protected.
As we serve customers in multiple countries, your data may be transferred internationally. For UK customers, we comply with UK GDPR requirements for international transfers. For Australian customers, we adhere to the Australian Privacy Principles (APPs). For Canadian customers, we comply with PIPEDA. For Japanese customers, we comply with APPI. For California residents, we comply with CCPA/CPRA — you have the right to know what personal information we collect, request deletion, and opt out of the sale of personal information (we do not sell personal information).
We retain pre-order form data for up to 24 months to fulfill your inquiry and communicate about product availability. Contact form submissions are retained for 12 months. Website analytics data is anonymized and aggregated. You may request deletion of your personal data at any time by contacting us.
Depending on your jurisdiction, you may have the right to access the personal data we hold about you, request correction of inaccurate data, request deletion of your data, withdraw consent for marketing communications, request data portability, and lodge a complaint with your local data protection authority. We will respond to all legitimate requests within 30 days.
We implement appropriate technical and organizational measures to protect your personal information, including SSL/TLS encryption for all data transmitted through our website and access controls to limit who can view personal data. While we strive to protect your information, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.
In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected individuals and relevant authorities within 72 hours where feasible. Notifications will include the nature of the breach, likely consequences, and measures taken to address it.
Our website and services are not directed to children under the age of 13. We do not knowingly collect personal information from children. In compliance with COPPA and similar regulations, if we discover that we have collected data from a child under 13, we will promptly delete it. If you believe a child has provided us with personal information, please contact us immediately.
We use essential cookies for core website functionality: language preference (English/Nepali) and theme selection (light/dark mode). We may use anonymized analytics to understand how visitors use our website. You can control cookie settings through your browser. No third-party advertising cookies are used on our website.
We may update this Privacy Policy from time to time. Changes will be posted on this page with a revised effective date. We encourage you to review this policy periodically. Your continued use of our website after changes are posted constitutes acceptance of the updated policy.
If you have any questions or concerns about this Privacy Policy, please contact us at info@champakpaun.com or through our Contact page. We are committed to resolving any privacy concerns promptly.