Privacy Policy

1. Data We Collect

When you use Beema Dokaan, we collect information you provide directly — including your full name, email address, phone number, date of birth, citizenship number, and address — as part of account registration and KYC verification. We also collect information about the insurance plans you browse and purchase, your payment history, and any communications you have with our team.

We automatically collect certain technical data when you visit our website or use our mobile app, including your IP address, browser type, device identifier, pages visited, and time spent on each page. This data is collected through cookies and similar tracking technologies described in Section 5 of this policy.

If you use our referral programme as a promoter, we also collect your bank account or mobile wallet details to process commission payouts.

2. How We Use Your Data

We use your personal data to create and manage your account, verify your identity (KYC), process insurance applications and payments, and communicate with you about your policies and claims. We also use your data to comply with legal and regulatory obligations under Nepali law, including requirements set by the Nepal Insurance Authority (NIA) and Nepal Rastra Bank (NRB).

With your consent, we may use your contact information to send you relevant insurance tips, policy reminders, and promotional offers from Beema Dokaan or our partner insurers. You can opt out of marketing communications at any time by clicking the unsubscribe link in any email or updating your preferences in your account settings.

We use aggregated and anonymised data to improve our platform, train our recommendation algorithms, and understand usage patterns. This data cannot be used to identify you individually.

3. Sharing Your Data

We share your personal data with NIA-licensed insurance companies when you purchase a policy or submit a claim, as this is required to fulfil the insurance contract. We only share the data that each insurer specifically needs to process your application.

We use third-party service providers for payment processing (eSewa, Khalti, ConnectIPS), identity verification, cloud hosting, and customer support tools. All providers are contractually required to handle your data securely and only for the purposes we specify.

We do not sell your personal data to third parties for their independent marketing purposes. We may disclose your data if required by law, court order, or a regulatory authority in Nepal.

4. Cookies and Tracking

We use cookies and similar technologies to keep you logged in, remember your preferences, and understand how you navigate our platform. Essential cookies are required for the website to function and cannot be disabled. Analytics cookies (currently using a privacy-friendly analytics tool) help us understand page performance and user flows.

You can control non-essential cookies through your browser settings. Note that disabling cookies may affect some functionality of the website. We do not use third-party advertising cookies or sell data to ad networks.

5. Data Retention

We retain your personal data for as long as your account is active or as needed to provide you with our services. If you close your account, we retain certain information for up to seven years to comply with Nepali financial record-keeping regulations and to resolve any disputes or claims that may arise.

Policy documents and claims records are retained for the duration of the policy term plus seven years. Payment transaction records are retained for ten years as required by NRB guidelines. You may request deletion of your data where we are not legally required to retain it — see Section 6 for how to exercise this right.

6. Your Rights

You have the right to access the personal data we hold about you. You can request a copy of your data at any time by writing to us at the contact details below. You also have the right to correct inaccurate data, restrict processing in certain circumstances, and port your data to another service provider in a machine-readable format.

Where we rely on your consent to process data (such as for marketing communications), you have the right to withdraw consent at any time. Withdrawing consent does not affect the lawfulness of processing before withdrawal. To exercise any of these rights, please contact our Data Protection Officer using the details in Section 8.

7. Security

We implement industry-standard security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. These measures include TLS encryption for data in transit, AES-256 encryption for sensitive data at rest, role-based access controls, regular security audits, and two-factor authentication for staff accounts.

Despite these measures, no method of transmission over the internet is completely secure. If you believe your account has been compromised, please contact us immediately so we can take protective action. We will notify you and the relevant authorities in the event of a data breach that affects your rights and freedoms, as required by applicable law.

8. Contact and Updates

If you have questions about this privacy policy or wish to exercise your data rights, please contact our Data Protection Officer at:

Beema Dokaan Pvt. Ltd. Budhanilkantha-09, Kathmandu, Nepal Email: privacy@beemadokaan.com.np Phone: +977-XX-XXXXXXX

We may update this policy from time to time to reflect changes in our practices or legal requirements. We will notify you of material changes by email or by displaying a prominent notice on our website. The date of the most recent revision appears at the top of this page. Continued use of our platform after the effective date constitutes acceptance of the updated policy.