Privacy policy

Who we are

Jholo is an online shop serving customers across Nepal. For privacy questions or requests about your information, email [email protected] or contact us through our Instagram, Facebook, or TikTok account.

Information we use

• Account details: Google sign-in provides your account identifier, email address, display name, and profile image when available.
• Orders and delivery: the name, phone number, delivery address, selected products, order status, and details you provide to fulfil and support an order.
• Payments: payment method, order reference, and any receipt image you submit so we can verify and reconcile payment. Do not include passwords, one-time codes, card security codes, or other login credentials.
• Support and social messages: messages and attachments you send to Jholo through our website or connected social messaging accounts, plus the information needed to reply and keep an order-support record.
• Basic site preferences: limited settings such as your chosen colour theme and shopping bag are saved in your browser so the site can work as expected.

Names, email addresses, phone numbers, delivery addresses, order histories, and receipts can identify or relate to a person. We treat them as personal information and only request details needed for the relevant store feature.

Why we use it

We use information to provide sign-in, accept and fulfil orders, calculate and explain delivery charges, verify payments, provide tracking and customer support, handle cancellations or reported product issues, prevent misuse, maintain accounting and business records, and meet applicable legal obligations.

Services that help operate Jholo

We use service providers to support website hosting, account sign-in, secure data storage, payment-proof handling, and customer messaging. If you choose to look up a delivery address, the address text is sent to a mapping and routing provider to find a location and estimate road distance. If you contact us through Instagram or Facebook, those platforms process the conversation; messages handled through our connected inbox may also be retained so our team can reply and support your order. Some providers may process information outside Nepal and handle it under their own privacy terms. We limit the information shared to what is needed for the feature you use.

Do not send private documents, payment receipts, passwords, one-time codes, or payment credentials through social messages.

We do not request or store your online-banking password, wallet password, one-time password, or full payment-card credentials.

How long we keep information

Order, transaction, and administrative records are retained only as long as needed for applicable Nepalese legal, tax, dispute-resolution, and legitimate business recordkeeping purposes. The exact period can depend on the record and the applicable requirement; some business records may need to be kept for an extended period.

Payment-proof images are stored separately in Cloudflare R2 and are scheduled to expire 30 days after upload. R2 lifecycle deletion is automatic but may take up to 24 hours after expiry to complete. This retention applies to files uploaded under the payment-proof storage path; it does not mean a receipt or image attached to a social-platform conversation is covered by that rule.

Conversation and admin audit records are retained for customer support, security, business management, and applicable legal obligations without a fixed automatic deletion period. Unsent messages are hidden from the shared inbox, but the original content and action remain in a record that only Jholo superadmins can view.

Your choices and requests

You may contact us to request access to, correction of, or deletion of personal information. We will review and respond in accordance with applicable Nepalese law. We may need to keep some order, transaction, or security records where the law or legitimate recordkeeping needs require it. You may also manage your Google sign-in relationship through your Google Account and contact the relevant social platform about information held by that platform.

Security and changes

We use account-based access controls and reputable service providers to protect store information, but no website or transmission method can be guaranteed completely secure. We will update this page when our information practices materially change and show the latest revision date here.

Contact

For a privacy question or request, email [email protected]. You can also message @jholo.np on Instagram.