Your data stays protected while we shop for you
Trust matters when we handle your purchases. This page explains what we collect, why we use it, and how we keep it safe while moving your orders from international stores to Nepal.
Last updated: October 29, 2024
Information we collect
We only ask for details that let us source, pay for, and deliver your orders safely.
- Account data: your name, email, phone number, delivery addresses, and login details.
- Order data: links you submit, quotes we build, invoices, payments, and shipment tracking updates.
- Conversation history: chats or calls with our concierge team over email, phone, WhatsApp, or web forms.
- Technical data: device info, IP address, browser details, and analytics events from browsing or signing in.
How we use your information
We rely on personal data to run iWishBag, assist with orders, and meet our legal duties.
- Build quotes, buy products on your behalf, clear customs, and deliver parcels to the right person.
- Send service alerts—quote updates, payment reminders, shipment milestones—and reply to support questions.
- Improve the site by reviewing aggregated usage trends and keeping systems reliable.
- Detect fraud, resolve disputes, and follow audit or regulatory rules in Nepal and partner markets.
Legal basis for processing
We process your information under one or more of these legal grounds:
- Contract performance when we prepare quotes, collect payments, and hand over goods.
- Legitimate interest for customer support, analytics, and service improvements that respect your rights.
- Legal obligations covering tax, customs declarations, anti-money-laundering, and accounting rules.
- Consent when you opt into marketing updates or turn on extras like saved addresses.
Data sharing and disclosure
We never sell your data. We only share it with partners who help deliver your order or keep the platform running.
- Logistics and customs teams that handle pickup, import clearance, and doorstep delivery.
- Payment processors and banks that accept transfers, verify transactions, and issue receipts.
- Technology vendors that host our infrastructure, analytics, email, or customer support tools.
- Government agencies when the law, a court order, or safety concerns require it.
Data retention
We keep information only while needed to run the service or meet legal and operational requirements.
Most account and order records stay on file for up to seven years so we comply with tax, customs, and financial rules in Nepal.
Your rights and choices
Email [email protected] to exercise any of these rights:
- Access, correct, or update the personal data tied to your account.
- Ask us to delete your account and personal data, minus records we must retain for compliance.
- Opt out of marketing or withdraw consent you gave earlier.
- Request a portable copy of the data you shared with us.
International data transfers
Because we source from the U.S., India, and other markets, your data might be processed outside Nepal.
Our partners follow contractual safeguards and security standards so your data stays protected wherever it travels.
Data security
We use administrative, technical, and physical safeguards to stop loss, misuse, or unauthorised access.
That includes encrypted storage, limited staff access, regular security reviews, and multi-factor authentication for internal tools.
Changes to this policy
We update this policy when regulations, services, or data practices change. We’ll refresh the date above and, when needed, notify you via email or dashboard alerts.
Transparency matters
We regularly review vendors, infrastructure, and processes to keep your information secure. If our data practices change in a meaningful way, we’ll announce it through the member dashboard and by email.