PRIVACY NOTICE

Last Updated: 16 July 2026

§1INTRODUCTION

At Tukaatu Services Private Limited ("Tukaatu", "we", "our", or "us"), we understand that privacy and trust are fundamental to electronic commerce. We are committed to handling personal information responsibly, transparently, and in accordance with applicable laws and regulations of Nepal.

This Privacy Notice explains how Tukaatu collects, uses, stores, shares, protects, and otherwise processes personal information when you use:

Tukaatu Marketplace;

Merchant online stores;

Websites created through Tukaatu;

Mobile applications;

Communication tools;

Delivery services;

AI-powered features;

Film and creator features;

Marketing campaign services; and

Any other products, services, technologies, or applications that reference this Privacy Notice (collectively, the "Services").

By accessing or using the Services, creating an account, operating a Merchant store, posting content, participating in campaigns, purchasing products, or otherwise interacting with Tukaatu, you acknowledge that you have read and understood this Privacy Notice and consent to the practices described herein to the extent permitted by applicable law.

Nothing in this Privacy Notice shall limit any rights available under applicable laws and regulations.

TABLE OF CONTENTS

Information We Collect

How We Use Information

Location Information

Cookies and Similar Technologies

How We Share Information

Public Content and Communications

Payment Information

Merchant Privacy and Responsibilities

Films, Creators and Marketing Campaigns

AI and Automated Services

Data Security

Data Retention and Account Deletion

Your Rights and Choices

Children's Privacy

International Data Transfers

Government Requests and Legal Compliance

Changes to this Privacy Notice

Related Policies

Contact Us

§1INFORMATION WE COLLECT

Depending on how you interact with the Services, we may collect the following information.

§AMerchant Information

When a Merchant creates an account or uses the Services, we may collect:

name;

phone number;

optional email address;

alternative contact numbers;

business name;

business category;

VAT or non-VAT status;

PAN number;

VAT number;

company registration documents;

business registration certificates;

citizenship documents;

owner photographs;

identification documents;

social media links;

Merchant location information;

Store Number;

subdomain information;

custom domain information;

store configuration information;

Merchant-created content and settings.

Merchant verification documents are accessible only by authorized administrators and verification personnel and are used solely for:

identity verification;

compliance obligations;

fraud prevention;

account security;

regulatory requirements.

§BCustomer Information

We may collect:

name;

phone number;

optional email address;

profile photograph;

delivery addresses;

saved addresses;

delivery preferences;

recipient information;

marked products;

order history;

comments;

publicly shared content;

customer preferences.

§CTransaction Information

We may collect:

order information;

products purchased;

delivery information;

payment status;

transaction ID;

payment amount;

payment method;

delivery notes;

order history.

Tukaatu does not collect or store:

card numbers;

banking credentials;

e-wallet passwords;

payment PINs;

payment authentication credentials.

§DDelivery Information

To facilitate deliveries and calculate delivery charges, we may collect:

recipient names;

recipient phone numbers;

delivery addresses;

GPS coordinates;

delivery notes;

proof of delivery;

delivery photographs;

delivery signatures;

delivery status information.

§ECommunication Information

We may collect:

Merchant-Customer chat messages;

support requests;

customer support communications;

support tickets;

attachments;

uploaded images;

communications made through the Services.

§FFilms, Creator and Campaign Information

When using Tukaatu Films or creator features, we may collect:

uploaded videos;

captions;

hashtags;

product tags;

campaign participation information;

creator profiles;

bidding information;

commission arrangements;

campaign analytics;

engagement metrics;

reports and moderation information.

§GTechnical and Device Information

We may collect:

IP addresses;

browser information;

operating system information;

device information;

device identifiers;

application version;

crash reports;

diagnostic information;

analytics information;

security logs.

§HMarketing and Usage Information

We may collect:

SMS interactions;

notification interactions;

advertising interactions;

referral activities;

loyalty program participation;

store subscriptions;

engagement information;

usage statistics.

§2HOW WE USE INFORMATION

We may use information to:

create and manage accounts;

verify Merchant identities;

facilitate transactions;

process orders;

provide marketplace services;

provide customer support;

provide delivery services;

calculate delivery charges;

improve products and services;

personalize user experiences;

provide analytics;

recommend products;

detect fraud and abuse;

ensure platform security;

enforce agreements and policies;

comply with legal obligations;

conduct research and analytics;

develop new products and features.

§3LOCATION INFORMATION

We may collect location information when:

Merchants register businesses;

Customers provide delivery locations;

delivery charges need to be calculated;

delivery tracking is enabled.

We do not intentionally collect background location information while the application is not actively being used.

§4COOKIES AND SIMILAR TECHNOLOGIES

We may use:

cookies;

local storage;

analytics technologies;

advertising technologies;

Google Analytics;

Firebase Analytics;

Google Tag Manager;

Meta Pixel;

similar technologies.

These technologies help us:

remember preferences;

maintain login sessions;

improve functionality;

analyze usage;

improve security;

personalize experiences;

measure marketing effectiveness.

Users may manage cookies through browser settings, although disabling cookies may affect functionality.

§5HOW WE SHARE INFORMATION

We may share information with:

Merchants

To facilitate:

orders;

customer support;

deliveries;

communications.

Delivery Providers

To facilitate delivery services.

Payment Service Providers

Including Hamro Pay and other authorized providers.

Service Providers

Including:

hosting providers;

cloud service providers;

SMS providers;

analytics providers;

customer support providers;

email providers;

technical service providers.

Government Authorities

Where required:

by law;

by court order;

by lawful governmental request;

for fraud investigations;

to protect rights and safety.

Advertising and Marketing Partners

Where permitted by law or with user consent.

§6PUBLIC CONTENT AND COMMUNICATIONS

Certain information is publicly visible, including:

public comments;

Merchant store information;

social media links;

public profiles;

Films content;

public campaign information;

publicly shared content.

Users should exercise caution before publishing information publicly.

§7PAYMENT INFORMATION

Payments are processed through authorized payment providers.

Tukaatu generally receives only:

payment status;

transaction ID;

amount;

payment method.

Tukaatu does not receive or store sensitive financial credentials.

Payments between Merchants and creators participating in marketing campaigns may be settled directly through Hamro Pay or other authorized payment providers.

§8MERCHANT PRIVACY AND RESPONSIBILITIES

Each Merchant is an independent business and is solely responsible for:

customer information collected through its store;

communications with Customers;

marketing activities;

customer support;

after-sales services;

compliance with applicable laws.

Merchants may access customer information only for:

fulfilling orders;

customer support;

communications regarding transactions;

legal compliance.

Merchants shall not:

sell customer information;

misuse customer information;

unlawfully disclose customer information.

Merchants may create employee accounts and additional store users and remain solely responsible for:

access permissions;

employee activities;

protection of customer information.

§9FILMS, CREATORS AND MARKETING CAMPAIGNS

Tukaatu may provide social commerce features including:

Films;

creator profiles;

product videos;

marketing campaigns;

creator commission programs.

Creators and Merchants may voluntarily publish content that becomes publicly accessible.

Campaign participation information, bidding information, commission information, and campaign analytics may be collected and processed to:

operate campaigns;

calculate commissions;

facilitate settlements;

prevent fraud;

improve services.

Content uploaded to Films may be:

moderated;

reviewed for policy compliance;

removed if unlawful or harmful.

Public interactions including:

likes;

comments;

shares;

engagement metrics;

may be visible to other users.

§10AI AND AUTOMATED SERVICES

Tukaatu may provide AI-powered services.

Current AI services are limited to:

recommending products;

helping Customers discover products within a Merchant's store.

The AI assistant:

does not access private messages;

does not access orders;

does not make purchasing decisions;

does not make legal, financial, or personal decisions.

The current AI assistant is powered by Google's Gemini technologies.

Future AI services may be introduced and this Privacy Notice may be updated accordingly.

§11DATA SECURITY

We implement reasonable administrative, technical, and organizational safeguards, including:

encryption;

HTTPS;

role-based access controls;

authentication mechanisms;

OTP verification;

document verification;

monitoring systems;

security procedures.

No system can guarantee absolute security.

§12DATA RETENTION AND ACCOUNT DELETION

We retain information only as long as necessary:

to provide Services;

comply with legal obligations;

resolve disputes;

enforce agreements;

prevent fraud and abuse;

maintain platform integrity.

Delivery photographs and proof of delivery may be retained until the associated order is deleted or longer if legally necessary.

Account Deletion

Users may request deletion of their accounts.

Upon deletion:

account information may be removed from active systems;

access to Services may terminate;

public content may become unavailable.

However, certain information may be retained where required:

by law;

for legal compliance;

for fraud prevention;

for dispute resolution;

for security purposes.

Store Numbers and subdomains may remain reserved for deleted Merchant accounts and may not necessarily be reassigned.

§13YOUR RIGHTS AND CHOICES

Subject to applicable law, users may have the right to:

access personal information;

update information;

correct information;

request account deletion;

withdraw certain consents;

object to certain processing activities where legally available.

Marketing consent is currently managed on an opt-out basis and additional controls may be introduced in the future.

Data portability features may be introduced in future versions of the Services.

§14CHILDREN'S PRIVACY

The Services are intended only for individuals aged sixteen (16) years or older.

We do not knowingly collect information from children under sixteen (16).

If we become aware that information has been collected from a child under sixteen (16), we may remove such information and terminate the account.

§15INTERNATIONAL DATA TRANSFERS

At present, Tukaatu primarily stores and processes information within Nepal.

If our Services expand internationally, information may be processed in other jurisdictions in accordance with applicable laws and appropriate safeguards.

§16GOVERNMENT REQUESTS AND LEGAL COMPLIANCE

We may disclose information where necessary to:

comply with applicable laws;

comply with court orders;

respond to lawful governmental requests;

investigate fraud or unlawful activity;

protect rights and safety;

enforce agreements and policies.

Where legally permitted, Tukaatu may notify affected users before disclosure.

§17CHANGES TO THIS PRIVACY NOTICE

We may amend this Privacy Notice from time to time.

Material changes may be communicated through:

publication of an updated notice;

updating the Last Updated date;

application notices;

SMS notifications;

additional notices where required.

Continued use of the Services constitutes acceptance of the revised Privacy Notice.

§18RELATED POLICIES

This Privacy Notice should be read together with:

Terms of Service;

Refund, Return, Exchange, Warranty and Delivery Policy;

Merchant Terms of Service;

Acceptable Use Policy;

Community Guidelines;

Films and Creator Guidelines;

Advertising and Promotions Policy;

Consumer Complaint and Dispute Resolution Policy;

Any additional policies published by Tukaatu.

§19CONTACT US

Tukaatu Services Private LimitedItahari-6, Sunsari, Nepal

Email: info@tukaatu.comPhone: +977 9805692517

If you have questions regarding this Privacy Notice or our privacy practices, please contact us using the information above.

By accessing or using the Services, you acknowledge that you have read, understood, and agreed to this Privacy Notice and consent to the collection, use, disclosure, and processing of information as described herein, subject to applicable laws and regulations.