Skip to content
Milaan Enterprises

LEGAL

Privacy Policy

Last updated 18 August 2026

Draft — requires review by a qualified lawyer before launch.

This document accurately describes how the platform operates, and covers the clauses commonly expected in B2B supply terms. It has not been reviewed by a lawyer and is not drafted against Nepali contract, consumer or data-protection law. Publishing it does not limit legal liability. Have it reviewed, adjust it to your actual business practices, and remove this notice.

1. Who we are

Milaan Enterprises supplies goods on a wholesale basis to businesses in Nepal. We are the controller of the personal information described in this policy.

This policy covers our website and our Android and iOS applications.

2. What we collect

  • Enquiry details. When you submit the partner form we store your business name, contact name, email address, optional phone number and your message.
  • Account details. If you hold a wholesale account: name, email, business name, address, city and tax registration number.
  • Order records. Products ordered, quantities, the price at the time of order, delivery status and any notes you add.
  • Technical data. Standard server logs, including IP address and browser or device type, generated when you use the site or app.
  • Analytics. Only if you accept analytics cookies. See section 4.

We do not knowingly collect information from anyone under 18. Our services are for businesses, not individuals acting as consumers.

3. Why we use it, and on what basis

  • To respond to enquiries — because you asked us to.
  • To operate your account and fulfil orders — to perform our contract with you.
  • To meet accounting and tax obligations — because the law requires it.
  • To keep the service secure and prevent abuse — our legitimate interest in running the business safely.
  • Analytics — only with your consent, which you can withdraw at any time.

We do not use your information for automated decision-making, and we do not sell it.

4. Cookies and analytics

No analytics or advertising script loads until you accept it. Declining means no tracking script is loaded and no analytics cookie is written. Your choice is stored locally in your browser so you are not asked repeatedly.

If you sign in, we set a session cookie that is strictly necessary to keep you signed in. It is not used for tracking and cannot be declined without losing the ability to sign in.

Where analytics are enabled, they may be provided by Google Analytics, Google Tag Manager or Meta. Those providers process data on their own terms, which we link to at the point of consent where required.

To withdraw analytics consent, clear this site's storage in your browser settings and choose Decline when asked again.

5. Who processes your data

We share personal information only with providers needed to run the business, and only as far as they need it:

  • Supabase — database, authentication and file storage.
  • Vercel — website and application hosting.
  • Delivery partners — the name, address and phone number needed to deliver an order.
  • Analytics providers — only where you have consented.

We may also disclose information where the law requires it, or to establish or defend legal claims.

6. Where your data is held

Our hosting and database providers operate infrastructure outside Nepal, so your information may be stored and processed abroad. We choose providers that offer recognised security practices and contractual protections for the data they hold on our behalf.

7. How long we keep it

  • Enquiries — while we are in contact and for a reasonable period afterwards, then deleted.
  • Account and order records — for as long as the account is active, and afterwards for the period required by accounting and tax law.
  • Server logs — a short operational period.

8. How we protect it

Access is restricted at the database level, so one business account cannot read another's orders, pricing or details. Wholesale pricing is visible only to approved accounts, and only for the price tier assigned to that business.

Traffic is encrypted in transit. In the mobile app, session tokens are held in the device keystore rather than in plain storage.

No system is perfectly secure. If a breach affects your information and presents a real risk to you, we will tell you.

9. Your choices

You can ask us for a copy of the information we hold about you, ask us to correct it, ask us to delete it where we are not required to keep it, or object to a particular use.

Contact us using the details below and we will respond within a reasonable period. We may need to verify your identity first.

10. Changes

We may update this policy. The version published here is the one in force, and the date at the top shows when it last changed.

11. Contact

Questions about this policy, or about the information we hold: info@milaanenterprises.com or +977-9703677111 — Thera 10 - Mithila Bihari Municipality, Dhanusha, Janakpur, Nepal.