Privacy Protection

Privacy Policy.

Transparency is at the heart of LSKhata. Learn how we protect your business data across our global platform.

1. Information We Collect

We collect information necessary to provide you with a world-class business operating system: • Account Data: Name, business phone number, email, and business registration details. • Transactional Data: Records of sales, inventory, and staff activity specifically for your business portal. • Technical Data: IP address, browser type, device information, and usage patterns to optimize platform performance. • Staff Data: Names and contact info of staff members authorized by you to use the platform.

2. How We Use Your Data

Your data is used solely to: • Provide, maintain, and improve the LSKhata features. • Administer your platform access. • Provide customer support and technical troubleshooting. • Generate business intelligence reports for your private viewing. • Send important system updates and security alerts.

3. Data Protection Framework

We adhere to strict data protection standards globally: • India: Compliance with the Digital Personal Data Protection (DPDP) Act, 2023. • Nepal: Compliance with the Privacy Act, 2075 and its implementing regulations. • Europe: Adherence to GDPR principles for data minimization and user consent. • Security: Industry-standard TLS 1.3 encryption for data in transit and AES-256 encryption for data at rest.

4. Data Sharing & Disclosure

We follow a strict "Privacy First" policy: • No Selling of Data: We never sell your business or staff data to third parties. • Service Providers: We may share data with trusted infrastructure providers (like AWS or Cloudflare) only as necessary to keep the service running. • Legal Requirements: We may disclose data if required by a valid legal order from a court of law in relevant jurisdictions.

5. Your Privacy Rights

Under global laws, you have the following rights: • Right to Access: Request a copy of the data we hold about your business. • Right to Rectification: Correct any inaccurate information in your profile. • Right to Erasure: Request the deletion of your account and all associated data (subject to legal retention requirements for accounting). • Data Portability: Export your inventory and sales data at any time.

6. Security Infrastructure

Our security stack includes: • Real-time threat monitoring and DDoS protection. • Regular security audits and vulnerability assessments. • Secure data centers with SOC2 and ISO 27001 certifications. • Encrypted database backups stored in geographically redundant locations.

Privacy Questions?

Our dedicated Data Protection Officer (DPO) is available to handle any queries regarding your business data and privacy rights. We aim to respond to all formal privacy requests within 30 days.