This Policy is regulated and governed under the exclusive jurisdiction of the courts of Nepal. It complies with the prevailing laws of Nepal, including:

• The Individual Privacy Act, 2075 (2018)
• The Electronic Transactions Act, 2063 (2006)

Where MarpaMail processes international email communications or data originating from the European Economic Area (EEA), our data architecture incorporates global privacy standards aligned with the EU GDPR.

• Data Controller:
  The business entity or individual subscribing to MarpaMail who controls domain configurations and manages client email mailboxes.
• Data Processor:
  Marpa Infotech Pvt. Ltd., which stores, transmits, and routes email communications strictly on behalf of, and under written instruction from, the Data Controller
• Hosted Communications Data:
  Email text, headers, attachments, address books, and log files hosted on MarpaMail servers.

3.1 Website Browsing & Direct Inquiries

You can visit Marpa Infotech on the Web without revealing your identity. When subscribing to newsletters, attending events, or filling out contact forms, we collect your name, email, contact details, and preferences.

3.2 Registration & Identity Verification Data

To provision MarpaMail accounts, prevent illicit service usage, and fulfill Nepali statutory obligations, we collect:

• Authorized representative name, official corporate name, district/state address, phone number, and primary billing email.
• Business registration certificates, PAN/VAT documents, or national ID (Citizenship/Passport) for corporate verification.
• Domain names hosted on MarpaMail (subject to WHOIS public domain registry regulations).

3.3 Telemetry, Infrastructure Logs & Cookies

• Cookies: We use traffic log cookies to analyze web traffic, remember user preferences, and secure client areas. Accepting cookies does not grant access to your computer.
• Infrastructure Logs: Server logs record IP addresses, authentication timestamps, protocol activity (IMAP, SMTP, POP3, Webmail), storage consumption, and bandwidth metrics.

Marpa Infotech uses your information to deliver hosting services, fulfill orders, process payments, and provide technical support.

From time to time, we may contact you regarding system updates, new features, or market research. You maintain the absolute Choice to opt out of receiving direct marketing materials at any time by utilizing the unsubscribe link or contacting our support team.

Marpa Infotech will never sell, rent, or lease your personally identifiable information to others.

We share data strictly with vetted technical partners and subprocessors acting on our behalf (such as secure data centers, IP reputation filters, and PCI-DSS compliant payment gateways). All such partners are bound by strict confidentiality agreements matching our privacy policies.

We do not voluntarily share client data or email communications with third parties or law enforcement agencies.

Procedure for Official Demands in Nepal

If served with an official court order, warrant, or subpoena issued under the Electronic Transactions Act, 2063 or applicable Nepali laws:

1. We thoroughly verify the legal validity and authority of the order.
2. We notify the client (Data Controller) prior to disclosure, unless legally prohibited by a court order.
3. We limit disclosures strictly to the specific data elements required by law.

Marpa Infotech maintains physical, electronic, and managerial controls to safeguard collected data. All web connections and mail server communications enforce modern TLS encryption.

• 72-Hour Breach SLA: In the event of a confirmed security incident affecting Personal Data or Hosted Email databases, Marpa Infotech will notify affected clients within 72 hours, providing an incident summary and remediation plan.

8.1 Accuracy & Access

Clients can access, view, and update their registration information at any time by logging into the secure Marpa Infotech client portal.

8.2 Permanent Data Deletion

Upon service termination or cancellation:

• Active Production Data:
  All mailboxes, email files, and server configurations are queued for immediate unrecoverable destruction.
• Backup Vault Purge:
  Encrypted automated system backup vaults are completely overwritten within 30 calendar days.

8.3 Verification for Active Account Deletion

To prevent unauthorized or malicious data destruction, active corporate account cancellation requests require authenticated client area tickets.

For active corporate accounts, Marpa Infotech reserves the right to request a formal corporate letter (signed on letterhead with official rubber stamp) prior to executing permanent server purges.

• Jurisdiction:
  This Policy is governed exclusively by the courts of Nepal.
• Mandatory Mediation:
  Users agree to attempt dispute settlement through good-faith negotiation or mediation prior to filing court proceedings.
• Severability & Supremacy:
  This Policy supersedes all prior written or oral agreements regarding privacy. If any section is held invalid, the remaining provisions remain in full force.
• Updates:
  Marpa Infotech reserves the right to update this policy. Material updates will be communicated at least 14 days prior to taking effect.

• Entity:
  Marpa Infotech Pvt. Ltd. (Product: MarpaMail)
• Location:
  Kathmandu, Nepal
• Support Email:
  support@marpamail.com