Privacy Policy

KTMenu ("we", "our", "us") is a restaurant discovery platform serving the Kathmandu Valley, Nepal. We operate the website at ktmenu.com and any associated services. For privacy questions, contact us at [email protected].

This Policy is drafted in accordance with the Individual Privacy Act, 2075 (2018) and the Individual Privacy Regulations, 2077 (2020) of Nepal, which govern the collection, processing, and retention of personal data by individuals and organisations operating in Nepal, and the Electronic Transactions Act, 2063 (2006), which governs electronic records, data protection, and cybercrime.

Information you give us directly:

• Account registration: name, email address, and password when you create a KTMenu account.
• Restaurant listings: business name, address, phone number, WhatsApp contact, opening hours, menu items, and photos uploaded by restaurant owners managing their listing.
• Contact enquiries: any information you include when you contact us via the contact form or by email.

Information collected automatically:

• Usage data: pages visited, search queries, links clicked, and the time and date of your visit.
• Device and browser data: IP address, browser type and version, operating system, and referring URL.
• Cookies and similar technologies: see Section 7 and our separate Cookie Policy for details.

We use the information we collect to:

• Provide, operate, and improve the KTMenu service.
• Authenticate your account and keep it secure.
• Display restaurant listings, menus, and photos to the public.
• Respond to your enquiries and support requests.
• Send transactional emails (account confirmation, password reset).
• Analyse usage patterns to understand how the site is used and where to improve it.
• Comply with legal obligations.

We do not sell your personal information to third parties. We do not use your data for automated profiling or advertising targeting.

Restaurant listing data (business name, address, phone, menu, photos) is displayed publicly on the site: this is the core purpose of the service. Restaurant owners consent to this display when they create a listing.

We may share personal information with:

• Service providers: hosting, email delivery, and infrastructure providers who process data on our behalf under data processing agreements.
• Legal and government authorities: where required under Nepal law (including under the Electronic Transactions Act, 2063 (2006) or the Individual Privacy Act, 2075 (2018)), by court order, or to protect the rights and safety of KTMenu or others.
• Business transfers: if KTMenu is acquired or merges with another entity, user data may transfer as part of that transaction, subject to equivalent privacy protections.

In line with the security obligations set out in the Individual Privacy Act, 2075 (2018) and its Regulations, we use industry-standard measures to protect your data: HTTPS encryption in transit, hashed passwords (never stored in plain text), and access controls limiting which team members can access personal data.

No method of transmission over the internet is 100% secure. We cannot guarantee absolute security, and we encourage you to use a strong unique password for your account.

We retain account information for as long as your account is active, or as needed to provide the service. If you delete your account, we will remove your personal data within 30 days, except where we are required to retain it for legal or audit purposes.

Restaurant listing data may be retained after a listing is removed for a reasonable period for archival, audit, or legal purposes.

We do not store or process your personal data outside Nepal except through service providers who process data on our behalf under an agreement requiring them to protect it to a standard consistent with the Individual Privacy Act, 2075 (2018).

We use cookies for authentication and to keep you logged in across sessions. We do not currently use third-party advertising or tracking cookies. For full details, see our Cookie Policy.

Under the Individual Privacy Act, 2075 (2018), you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate or outdated data.
• Request deletion of your data, subject to any retention we are legally required to maintain.
• Withdraw consent to processing you previously agreed to, where processing is based on consent.
• Object to or restrict certain processing.
• Receive your data in a portable format, where technically feasible.
• Lodge a complaint with the relevant Nepal authority if you believe your data has been processed unlawfully.

If you are located outside Nepal, you may also have additional rights under the data protection law of your own jurisdiction.

To exercise any of these rights, email us at [email protected]. We will respond within 30 days.

KTMenu is not directed at children under 13. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, please contact us and we will delete it promptly.

We may update this Privacy Policy from time to time. We will notify registered users of material changes by email or by displaying a notice on the site. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of KTMenu after a policy update constitutes acceptance of the revised terms.

Questions about this Privacy Policy or our data practices? Contact us at [email protected].