Privacy Policy
Plain-language answers to what we collect, why, and the control you have over it.
Last updated: March 2026
We never sell your data
Your personal information is never sold to third parties. Full stop.
You’re in control
Access, correct, or delete your data any time — just ask.
Only what we need
We collect the minimum required to take your order and keep the app working.
Kept secure
Encrypted connections and secure tokens protect your account and payments.
The laws we follow
ScomsEats operates in Nepal and the United States, so we follow the privacy laws of both:
- Nepal — Electronic Transaction Act 2063 (ETA)
- Nepal — Individual Privacy Act 2075
- US — California Consumer Privacy Act (CCPA)
- US — Children’s Online Privacy Protection Act (COPPA)
What we collect
We only collect what’s needed to take your order and run the service:
- Account details — your name, email and phone number
- Order details — items you order and payment method (only the card type and last 4 digits)
- Location — used just to find pickup spots near you, not stored permanently
- Device info — browser type, IP address and secure session cookies
- Usage — pages visited and searches, kept anonymous to improve the app
How we use it
Your information helps us:
- Process your orders and get them ready for pickup
- Send order confirmations and pickup updates
- Suggest places and items you might like
- Keep your account safe and prevent fraud
- Meet our legal obligations in Nepal and the US
We do not sell your personal data to anyone.
Cookies
We use a small number of cookies:
- Essential — keep you logged in and remember your cart (these can’t be turned off)
- Analytics — anonymous usage stats that only run with your consent
You can withdraw cookie consent at any time from the banner at the bottom of the page.
Your rights & choices
Depending on where you live, you can:
- See the personal data we hold about you
- Fix anything that’s inaccurate
- Ask us to delete your data (the “right to be forgotten”)
- Opt out of data being sold (we don’t sell it anyway)
- Complain to your regulator (Nepal: Department of Information Technology; US: FTC)
To use any of these, just email us at info@neapes.com.
How long we keep it
- Order records are kept for 7 years, as required by Nepal’s Company Act and US tax rules
- Account data is deleted within 30 days of your deletion request
Children
- ScomsEats isn’t designed for children
- We don’t knowingly collect data from anyone under 13 (COPPA) or under 16 in Nepal
Questions about your privacy?
NEAPES Technology Pvt. Ltd.
We’re happy to help with anything about your data or this policy.