1. Information We Collect
We may collect and process various categories of data to provide our payment gateway solutions safely and efficiently:
- Business and merchant information (registration documents, legal structure, ownership info).
- Personal identification and Know Your Customer (KYC) details of authorized representatives.
- Transaction details (amount, payment method used, timestamp, merchant details).
- Device and browser information (IP addresses, OS details, browser types, screen sizes).
- System access logs, API usage data, and authentication events.
2. How We Use Information
Information collected is strictly utilized to deliver secure services in compliance with Nepalese laws:
- Processing and facilitating transactions seamlessly across banks and digital wallets.
- Verifying merchant identities during sign-up and onboarding phases.
- Preventing fraud, money laundering, cyber attacks, and unauthorized activities.
- Complying with regulatory directiveness and audit requirements of Nepal Rastra Bank.
- Analyzing API statistics to improve gateway availability, response time, and security.
- Resolving transactional disputes and delivering operational customer support.
3. Information Sharing
We may share operational information with verified third parties strictly under strict compliance regulations:
- Participating bank partners, card networks, and digital wallet providers.
- Law enforcement bodies, judicial systems, or regulatory authorities like NRB when legally mandated.
- Accredited fraud mitigation partners and KYC validation service agencies.
- Technology platforms and hosting providers that legally host our platform framework.
CellPay does not sell, lease, or distribute merchant or consumer personal information to third parties for marketing purposes.
4. Data Security
We implement industry-standard technical, administrative, and physical security measures. All transactional channels are encrypted with SSL protocols. Access controls are audited regularly to guard against unauthorized retrieval, alteration, leakage, or loss of critical merchant data.
5. Data Retention
We retain collected information for as long as your merchant profile remains active, and for any mandatory periods required by the Payment System Directives of Nepal Rastra Bank, relevant taxation laws, and auditing requirements in Nepal.
6. Your Rights
You hold rights to query, access, update, or correct the KYC details and business information stored in your profile. Please contact our onboarding support desk to process modifications to critical business data.
7. Contact
For any privacy-related queries, security reports, or concerns on how your data is processed, feel free to reach out to our legal compliance unit at support@cellcom.net.np.
Have concerns regarding your personal data?
Our specialized data compliance unit is available to address any security concerns, regulatory compliance questions, or data access requests.