Privacy policy

1. Who we are

ChildSafe Nepal (“ChildSafe Nepal”, “we”, “us”) provides online life skills and child safety programs for students, and training sessions for teachers, through the website childsafenepal.com. We are responsible for the personal information described in this policy.

This policy explains what information we collect, why we collect it, who we share it with, how long we keep it and the choices you have. It is written with regard to the Individual Privacy Act, 2075 (2018) of Nepal and its regulations.

2. Information we collect

Account details. Name, email address, phone number (optional) and password. Passwords are stored only in encrypted (hashed) form; we cannot read them.

Parent or guardian. A student under 18 who creates an account without a school gives the name and phone number of a parent or guardian, and we record the date the parent or guardian agreed.

Information provided by schools. When a school enrols its students, the school gives us each student’s name, email address, school, class, section and, where provided, roll number and guardian’s name.

Learning records. Programs requested and approved, lessons completed, answers to lesson activities, time spent on lessons, and certificates issued.

Device and security information. To apply the limit on devices per account and to protect accounts, we record the type of device and browser used to sign in, the IP address, the time you signed in, and a device identifier stored in a cookie.

Teacher training registrations. Name, email address, phone number, school, position, district, any message you include, and the screenshot of your payment.

Messages. Information you send through the contact form, such as your name, contact details, organisation and message.

How you found us. If you arrive through a link from a campaign (for example a Facebook post or a message from your school) or from another website, we note that source with your registration, account or message, so we know which announcements reach teachers and families.

We do not collect payment card or bank account numbers. Payments are made through your own banking or wallet app.

3. How we use information

We use personal information only to:

• create and manage accounts and let learners sign in;
• provide lessons, record progress, open lessons in order and issue certificates;
• review access requests and payments, and confirm training registrations;
• send service emails, such as password reset links, registration confirmations and decisions;
• give schools progress reports for the students they have enrolled;
• keep accounts secure, prevent misuse and apply the device limit;
• answer questions sent to us and improve our programs.

We do not sell personal information, show advertising, or use personal information for marketing by other organisations.

4. Children’s information

Most of our learners are children. Student accounts are normally created at the request of the student’s school, which is responsible for informing parents or guardians and obtaining any consent required.

A student under 18 who signs up without a school must give the name and phone number of a parent or guardian and confirm that the parent or guardian has read this policy and agrees. The account can be used only after the email address is confirmed. We may contact the parent or guardian to check, and we close accounts where agreement was not given.

We collect only the information needed to run the programs. Student profiles are never public. A parent or guardian may ask to see, correct or delete a child’s information by contacting us (section 10).

5. When information is shared

We share personal information only in these cases:

• With the student’s school, which can see the progress and certificates of the students it has enrolled.
• With service providers that run the website for us under contract: website hosting, database hosting, email delivery and spam protection. They may process information only on our instructions.
• Certificate verification. Anyone who has a certificate ID can check it on our verification page, which shows the learner’s name, the program and the date of completion.
• When required by law, or to protect the safety of a child or another person.

Our hosting and database providers may store information on servers outside Nepal (for example in Singapore). We choose providers that protect information with security measures appropriate to its sensitivity.

6. Cookies

We use only the cookies needed for the website to work: one that keeps you signed in, and one that identifies your device so the device limit can be applied without counting the same device twice. Your browser also remembers, for up to 90 days, which link or website brought you here, and your choice of light or dark mode; this stays on your device until you submit a form. We do not use advertising cookies or track you across other websites.

7. How we protect information

The website uses encrypted connections (HTTPS). Passwords are stored in hashed form. Accounts are locked after repeated failed attempts to sign in. Administrative access is limited to authorised staff, and administrative actions are recorded. Payment screenshots are stored privately and are visible only to administrators. No method of storage or transmission is completely secure, but we work to protect information against loss, misuse and unauthorised access.

8. How long we keep information

We keep account and learning records for as long as the account is active and for as long as the school agreement requires. Certificates are kept so that they can continue to be verified, until the account is deleted.

• Payment screenshots are deleted automatically 90 days after the registration is approved or rejected, and never kept longer than 365 days.
• The training registration itself (name, contact details, school, amount and decision) is kept as our payment record.
• Accounts whose email address is never confirmed are deleted after 14 days.
• Password reset and email confirmation links stop working after a short time and are then deleted.
• Contact messages are kept for as long as needed to answer them.

When information is no longer needed, we delete it or make it anonymous.

9. Your rights

You may ask us to:

• tell you what personal information we hold about you or your child, and give you a copy;
• correct information that is wrong or incomplete;
• delete information, where we are not required to keep it;
• stop using information for a purpose you have agreed to.

On your dashboard (My learning) you can update your name and phone number, download a copy of your data, and delete your account with its progress, certificates and devices. Teacher training registrations and contact messages are kept separately; ask us if you want them deleted. For other requests, contact us as described below. We may need to confirm your identity before acting on a request, and we will reply within a reasonable time.

10. Contact us

For questions or requests about this policy or your personal information, contact:

11. Changes to this policy

We may update this policy when our services or legal requirements change. The date at the top shows when it was last updated. If the changes are significant, we will let account holders know by email or on the website.