Privacy Policy

Who we are

Ten Tech Solutions is operated by Ten Tech Solutions Pvt Ltd, Mahalaxmi Municipality, Lamatar, Lalitpur, Nepal.

In these policies, "Ten Tech", "we", "us" and "our" mean Ten Tech Solutions Pvt Ltd.

What we collect

Information you give us

Account details: name, email address, password (stored only as a secure hash), company name and phone number.
Contact and billing details: postal address, city, state, postal code, country and phone number. Domain registries require these details for every domain registration.
Enquiries and requests: what you write in enquiry forms, service requests and messages to our team, and any files or information you share for a project.
Extra registry information: some domain extensions need more, for example the purpose and nexus category required for .us domains.

Information created when you use our services

Orders and payments: what you ordered, the amounts, the VAT, and the Khalti transaction and payment references. We never see or store your Khalti PIN, password or wallet credentials. Khalti handles them.
Services: domain names, name servers, hosting and email account details, expiry dates and the order numbers given by our providers.
Technical data: IP address, browser type, the pages you request and security logs (for example sign-in attempts). We use these to keep the service secure and to fix problems.

Cookies

We use only the cookies that are needed for the website to work: a session cookie that keeps you signed in, and security cookies that protect forms. We do not use advertising or tracking cookies on this website. Your cart is kept in your own browser's storage and is not sent to us until you check out.

Why we use your data

To provide what you ordered: registering and renewing domains, setting up hosting and business email, building websites and running marketing campaigns. This is necessary for our contract with you.
To take payment and keep accounting records: this is necessary for the contract and required by tax law (including VAT).
To talk to you: order confirmations, renewal reminders, replies to your enquiries and service updates.
To keep services safe: preventing fraud, abuse, spam and unauthorised access, and meeting our anti-money-laundering duties (see our AML Policy).
To meet legal obligations: registry and ICANN rules, tax and company law, and lawful requests from authorities.

We do not sell your personal data, and we do not use it for automated decisions that have legal effects on you.

We share only what each party needs:

Domain registrar and hosting partner: our upstream wholesale provider (Resell.biz / LogicBoxes) receives your contact details and order information so that it can register domains and create hosting and email accounts in your name.
Domain registries and ICANN: registrant details go to the registry for the extension you choose. Depending on the extension and the privacy protection available, some details may appear in public WHOIS/RDAP records. Where privacy protection is offered, you can turn it on in your client area.
Payment provider: Khalti processes online payments. We send the amount, order reference and your name, email and phone so Khalti can show the payment and send you a receipt.
Email delivery: our email service provider delivers account and order emails.
Advertising platforms: for marketing clients only, campaign information is shared with platforms such as Meta and Google as needed to run your campaigns.
Professional advisers and authorities: accountants, auditors and lawyers under confidentiality, and government, tax or law-enforcement authorities when the law requires it.

International transfers

We work from Nepal, and our providers run servers in other countries, including the United States and India. Your data may therefore be processed outside your own country. When it is, we use providers that protect it with security measures appropriate to the data.

How long we keep it

Account and service records: while your account is open, and for up to 2 years after your last service ends, so we can answer questions and handle renewals or transfers.
Invoices, payment and VAT records: for the period required by tax law (usually 5 to 7 years).
Records kept under our AML Policy: at least 5 years after the business relationship ends.
Security logs: usually up to 12 months.

How we protect it

Connections to the website use HTTPS.
Passwords are stored only as hashes.
API keys and other credentials for our providers are encrypted.
Administrator accounts require two-factor authentication.
Access to customer data is limited to staff who need it, and important changes are recorded in an audit log.

No system is perfectly secure, but we work to protect your data and will tell you without undue delay if a breach is likely to affect you.

Your rights

Depending on where you live, you may have the right to:

see the personal data we hold about you
correct it
have it deleted
object to or restrict how we use it
receive a copy in a portable format

You can update most details yourself in the client area. For anything else, contact us using the details on our Contact page. We may need to confirm your identity first.

Some data cannot be deleted while a service is active. For example, a domain's registrant details must stay with the registry while the domain is registered. Some data must also be kept for legal reasons.

Children

Our services are for businesses and adults. We do not knowingly collect data from children under 16.

Changes

We may update this policy as our services or the law change. The date at the top shows the latest version, and we will tell account holders about important changes by email or in the client area.

Contact

For questions about privacy, use the details on our Contact page, or write to us at the address above.