Flora Nepal is an online platform where plant nursery owners create profiles and list their plants so visitors can discover them. This policy explains what information we collect when you use floranepal.com ("the Platform"), why we collect it, and the choices and rights you have over it.
This Platform is operated by [FILL IN: Your Legal Entity Name], based in Nepal ("we", "us", "our"). It is intended for users in Nepal, and we handle personal information in line with the Individual Privacy Act, 2075 (2018) and the Individual Privacy Regulation, 2077 (2020).
1Who this policy covers
This policy applies to two kinds of people:
- Nursery owners who register an account, create a nursery profile, and publish plant listings.
- Visitors who browse the Platform to find nurseries and plants without an account.
Where a section applies only to one group, we say so.
2Information we collect
2.1 Information from Google Sign-In (nursery owners)
The only way to create an account on Flora Nepal is through Google Sign-In. When you choose this option, Google shares the following information with us:
- Your name as it appears on your Google account;
- Your email address associated with your Google account;
- Your profile picture from your Google account;
- A unique Google identifier that lets us recognise your account on future sign-ins.
We do not receive your Google password. Your use of Google Sign-In is also subject to Google's Privacy Policy.
2.2 Information you add to the Platform (nursery owners)
- Nursery profile: your nursery's name, and any description, location, or contact details you choose to add.
- Plant listings: plant names, prices, offer prices, categories, seasons, and any images or details you enter.
2.3 Information we collect automatically (everyone)
When you visit or sign in, our servers and hosting provider automatically record certain technical information, including:
- Your IP address and approximate region;
- Browser type, device type, and operating system;
- Pages viewed, dates and times of access, and the page that referred you;
- For logged-in nursery owners, a session identifier stored in a cookie that keeps you signed in.
We use this to operate the Platform, keep accounts secure, fix problems, and understand general usage. We do not currently use any third-party analytics or advertising tools.
3What is public and what is private
The purpose of Flora Nepal is to help nurseries get discovered, so some information is published deliberately. Please understand the difference before you add information to the Platform:
| Visible to the public | Kept private to your account |
|---|---|
| Nursery name, your published plant listings (name, price, offer price, images), and any profile details you choose to display. | Your login email, your Google identifier, your profile picture (unless shown in your public profile), and our internal server and technical logs. |
Do not put information in a public field (such as a listing or profile description) that you would not want shown to anyone on the internet.
4How we use your information
We use the information described above only to:
- Create and manage your account and let you sign in via Google;
- Publish and display your nursery profile and plant listings;
- Operate, maintain, secure, and improve the Platform;
- Respond to your questions or support requests;
- Detect and prevent fraud, abuse, or security incidents;
- Comply with applicable law.
We use your information only for the purposes for which it was collected, as required under the Individual Privacy Act, 2075. We do not use your information for unrelated purposes without your consent.
5Cookies and local storage
We use a small number of cookies and browser storage mechanisms that are necessary for the Platform to work:
- Session cookie: keeps nursery owners signed in after they authenticate with Google. Without it, you would be signed out on every page load.
- Browser localStorage: when signing in via the Flora Nepal mobile app, a temporary authentication token is stored in your browser's localStorage so the web Platform can recognise your session. This token is removed immediately after it is used.
We do not use advertising or third-party tracking cookies. You can block or delete cookies in your browser settings, but blocking the session cookie will prevent you from staying logged in.
6When we share information
We do not sell your personal information. We share it only in these limited situations:
- Service providers: [FILL IN: your hosting provider, e.g. "DigitalOcean"] hosts our servers and stores our data. They may only process data to provide their service to us and are bound by confidentiality obligations.
- Google: we use Google Sign-In for authentication. When you sign in, your device communicates with Google's servers in accordance with Google's Privacy Policy.
- Public display: the information described as public in Section 3 is, by design, visible to all visitors.
- Legal requirements: where we are required to disclose information by law, by a competent authority, or to protect the rights, safety, or property of users or the public.
- Business transfer: if the Platform is merged, acquired, or transferred, your information may be transferred as part of that transaction, subject to this policy.
7How long we keep information
We keep your account, profile, and listing information for as long as your account is active. If you close your account or ask us to delete it, we will delete or anonymise your personal information within a reasonable period, except where we must keep certain records to comply with the law or to resolve disputes. Technical logs are kept for a limited period and then deleted.
8How we protect your information
We take reasonable technical and organisational measures to protect your information, including access controls on our servers and using Google's secure OAuth 2.0 flow for authentication. No system is completely secure, however, so we cannot guarantee absolute security. If a data breach affects your personal information, we will notify you and any relevant authority within 72 hours of becoming aware, where required by law.
9Your rights
Under the Individual Privacy Act, 2075 (2018) and Article 28 of the Constitution of Nepal, you have the right to:
- Be informed about what personal information we collect and why;
- Access the personal information we hold about you;
- Request correction of inaccurate or incomplete information;
- Request deletion of your personal information, subject to our legal obligations;
- Withdraw consent for processing that relies on your consent;
- File a complaint if you believe your privacy rights have been breached.
To exercise any of these rights, contact us using the details in Section 13. You can update most of your nursery profile and listing information directly by signing in.
10Children
The Platform is intended for nursery owners and adult visitors, and is not directed at children. We do not knowingly collect personal information from children. If you believe a child has provided us information, please contact us so we can remove it.
11Links to other sites
Nursery profiles or listings may contain links to other websites. We are not responsible for the privacy practices of those sites, and we encourage you to read their privacy policies.
12Changes to this policy
We may update this policy from time to time. When we make material changes, we will update the "Last updated" date above and notify account holders by email where appropriate. Your continued use of the Platform after a change means you accept the updated policy.
13Contact us
If you have questions about this policy or want to exercise your rights, contact us at:
- Email: privacy@floranepal.com
- Operator: [FILL IN: Your Legal Entity Name]
- Address: [FILL IN: Registered address, City, Nepal]
If you are not satisfied with our response, you may pursue a complaint under the Individual Privacy Act, 2075. Note that the Act sets a limitation period for filing certain complaints, so act promptly.
14Governing law
This policy is governed by the laws of Nepal, including the Individual Privacy Act, 2075 (2018) and the Individual Privacy Regulation, 2077 (2020).