Privacy Policy

Last updated: October 2026 · Applies to Mobile Clinic (Urlabari, Morang, Nepal)

1. Who we are

Mobile Clinic operates a marketplace for second-hand smartphones and a mobile repair service with optional pickup and delivery in and around Urlabari, Morang, and other areas of Nepal we serve. This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and your rights.

2. Information we collect

• Account data: full name, email address, mobile number, password (stored as a secure hash), optional profile photo, address, and for sellers shop name, bio, and payment QR image.
• Order data: delivery address, order items, payment method, payment reference, optional payment proof image, and communication related to the order.
• Repair data: phone brand/model, problem description, pickup address, map coordinates you choose, and status history of the repair ticket.
• Technical data: approximate device/browser information, IP address logs on our hosting provider, and cookies needed for login sessions and security (CSRF protection).
• Location during active trips only: when an admin or assigned staff starts a pickup or delivery trip and chooses to share GPS, live coordinates are stored for that trip so you and the team can track progress. Tracking is not continuous outside active trips.

3. How we use your information

• To create and manage your account, verify email where required, and provide customer, seller, or admin access.
• To process orders, repairs, payments verification, and delivery or pickup coordination.
• To send transactional messages (order/repair confirmation, OTP, credentials) via email when configured.
• To show relevant seller profile information on product pages when you list or buy phones.
• To improve site security, prevent fraud, and comply with applicable law in Nepal.

4. Legal basis and consent

By creating an account, placing an order, or booking a repair, you consent to processing of the data needed to perform that service. You may request correction or deletion of account data subject to legal retention needs (for example completed order records).

5. Sharing of data

We do not sell your personal data. We may share limited data with:

• Payment verification context visible to the relevant seller or admin for orders involving their listings.
• Hosting, database (e.g. Turso), email (SMTP), and image hosting (e.g. Cloudinary) providers acting as processors under their terms.
• Authorities if required by law or to protect rights, safety, or property.

6. Images and media

Product photos, profile photos, payment proofs, and QR codes you upload may be stored on third-party cloud storage. Do not upload images of unrelated third parties without permission. IMEI/serial fields are intended for internal operational use and should not be published publicly.

7. Cookies and sessions

We use essential session cookies so you stay logged in and so forms remain secure. We do not use these cookies to sell advertising profiles. Clearing cookies will log you out.

8. Data retention

Account and transaction records are kept while your account is active and for a reasonable period afterward for dispute resolution, accounting, and legal compliance. You may request account closure; some anonymised or legally required records may remain.

9. Security

We use password hashing, HTTPS in production, role-based access (customer, seller, admin), and CSRF protection on forms. No method of transmission over the internet is 100% secure; please use a strong unique password.

10. Children’s privacy

Our services are directed to adults capable of entering into transactions. If you believe a minor has provided data, contact us to remove it.

11. Your rights

Subject to applicable law, you may request access, correction, or deletion of personal data, or withdraw consent where processing is consent-based (this may limit service). Contact us using the details on our Contact page.

12. Changes

We may update this policy from time to time. Continued use of the site after changes constitutes acceptance of the updated policy. The “Last updated” date will change when we revise this page.

13. Contact

For privacy questions: email bishal2014nir@gmail.com or phone 9819378583. Business location focus: Urlabari, Morang, Nepal.