Privacy Policy

1. Information We Collect

We collect information that you voluntarily provide to us and information that is collected automatically as you navigate the website.

1.1 Personal Information You Provide

When you fill out a contact form, request a quote, subscribe to our newsletter, apply for a job, or otherwise engage with us, you may provide:

• Name, email address, phone number, and company name.
• Project details, business goals, budgets, and timelines you choose to share.
• Billing and payment information when engaging our services.
• Account credentials if you sign up for client portals or product demos.
• Any other information you choose to include in messages, attachments, or briefs.

1.2 Information Collected Automatically

When you visit our website, we and our service providers may automatically collect:

• IP address, browser type and version, operating system, device identifiers.
• Pages visited, time spent on pages, referring and exit URLs, click patterns.
• Approximate geographic location derived from IP.
• Cookie identifiers and similar tracking technologies (see Section 6).

1.3 Information from Third Parties

We may receive information about you from third parties such as analytics providers, advertising networks, payment processors, social media platforms (if you interact with us through them), and publicly available sources.

2. How We Use Your Information

We use the information we collect for the following purposes:

• To respond to your inquiries and provide customer support.
• To deliver, operate, maintain, and improve our services and website.
• To process transactions, issue invoices, and manage client accounts.
• To send administrative information, updates, and service-related notices.
• To send marketing communications where you have opted in or where permitted by law.
• To personalize your experience and present content relevant to your interests.
• To monitor and analyze trends, usage, and activity in connection with our services.
• To detect, prevent, and address fraud, security incidents, and abuse.
• To comply with legal obligations and enforce our agreements.

3. Legal Bases for Processing (GDPR / UK GDPR)

If you are in the European Economic Area, the United Kingdom, or other jurisdictions that require a legal basis, we process your personal data on the following grounds:

• Performance of a contract — to deliver the services you have engaged us to provide.
• Legitimate interests — to operate, secure, and improve our business where your rights and freedoms do not override those interests.
• Consent — for marketing communications and non-essential cookies, which you may withdraw at any time.
• Legal obligation — to comply with tax, accounting, and regulatory requirements.

4. How We Share Your Information

We do not sell your personal information. We may share information in the following limited circumstances:

• Service providers: with vendors, contractors, and consultants who perform services on our behalf (hosting, analytics, payment processing, email delivery, CRM). These parties are contractually obligated to protect your information.
• Business transfers: in connection with a merger, acquisition, financing, or sale of assets, with appropriate confidentiality protections.
• Legal compliance: when required to comply with applicable law, valid legal process, or government requests, or to protect our rights, property, or safety.
• With your consent: in any other case where you have given us permission to share your information.

5. Data Retention

We retain personal information only for as long as necessary to fulfill the purposes for which we collected it, including to satisfy legal, accounting, or reporting requirements. Typical retention periods:

• Client and project records: up to 7 years after the engagement closes, to comply with tax and contract law.
• Marketing leads and newsletter subscribers: until you unsubscribe or 24 months of inactivity, whichever is sooner.
• Server logs and analytics: up to 24 months.
• Job applications: up to 12 months after the position is filled.

6. Cookies and Tracking Technologies

We use cookies, web beacons, pixels, and similar technologies to operate the website, remember your preferences, measure performance, and deliver relevant advertising. Categories of cookies we use:

• Strictly necessary: required for the site to function (e.g., session, security). Cannot be disabled.
• Performance: analytics that help us understand how visitors use the site (e.g., Google Analytics, Plausible).
• Functional: remember preferences such as language and region.
• Marketing: used to deliver relevant ads and measure their effectiveness.

You can manage cookie preferences through your browser settings or our in-app cookie banner. Disabling certain cookies may affect site functionality.

7. Third-Party Services

We rely on the following categories of third-party services, each governed by their own privacy practices:

• Hosting and infrastructure (e.g., Vercel, AWS, Cloudflare).
• Analytics (e.g., Google Analytics, Microsoft Clarity).
• Email and CRM (e.g., Resend, HubSpot, Customer.io).
• Payment processing (e.g., Stripe, Khalti, eSewa).
• Productivity and collaboration (e.g., Google Workspace, Notion, Slack).

8. International Data Transfers

We are based in Nepal and may transfer, store, and process your information in countries other than your own, including the United States, the European Economic Area, and Singapore. When we transfer personal data across borders, we use appropriate safeguards such as Standard Contractual Clauses, encryption in transit and at rest, and access controls.

9. Your Rights and Choices

Depending on your jurisdiction, you may have some or all of the following rights:

• Access: request a copy of the personal data we hold about you.
• Correction: ask us to correct inaccurate or incomplete data.
• Deletion: ask us to delete your data, subject to legal exceptions.
• Restriction or objection: restrict or object to certain processing activities.
• Portability: receive your data in a structured, machine-readable format.
• Withdraw consent: withdraw consent at any time where processing is based on consent.
• Opt out of marketing: unsubscribe via the link in any marketing email or by contacting us.
• Lodge a complaint: with a data protection authority in your jurisdiction.

To exercise these rights, contact us at info@peakminddigital.com. We respond to verified requests within 30 days.

10. Security

We implement administrative, technical, and physical safeguards designed to protect your personal information, including encryption in transit (TLS/HTTPS), encryption at rest for sensitive data, role-based access controls, two-factor authentication for staff, and regular security reviews. No method of transmission or storage, however, is 100% secure, and we cannot guarantee absolute security.

11. Children’s Privacy

Our website and services are not directed to children under the age of 16, and we do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us so we can delete it.

12. Third-Party Links

Our website may contain links to third-party sites we do not own or control. We are not responsible for the privacy practices of those sites. We encourage you to read the privacy policies of every site that collects personal information.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top reflects when changes were made. Material changes will be notified through the website or, where appropriate, by email. Your continued use of the website after changes constitutes acceptance of the revised policy.

14. Contact Us

If you have questions about this Privacy Policy, wish to exercise your rights, or have a complaint, please contact us: