Privacy Policy

Last updated: 7 June 2026

This Privacy Policy explains how Kafal Motors ("Kafal Motors", "we", "us") collects, uses, and protects your personal information when you use our website, mobile app, and services (the "Platform"). By using the Platform you agree to this policy.

1. Information we collect

• Account details — name, email, phone number, and password.
• Identity & driver verification — driver's licence, International Driving Permit, and a selfie used to confirm your identity before a rental. These documents are stored in a private, access-controlled store and are never publicly accessible.
• Booking & transaction data — rental dates, vehicles, add-ons, and payment status. Card details are processed by our payment provider (Stripe) and are never stored on our servers.
• Usage data — device, browser, and pages viewed, used to operate and improve the Platform.

2. How we use your information

• To create and manage your account and bookings.
• To verify your identity and eligibility to drive, as required for rentals in Nepal.
• To process payments, deposits, and any agreed damage charges.
• To send booking confirmations, receipts, and service updates.
• To prevent fraud and keep the Platform safe.

3. Sharing

We share data only as needed to provide the service: with payment processors (Stripe), SMS/email providers for notifications, and vehicle hosts strictly for the purpose of fulfilling your booking. We do not sell your personal information. We may disclose information where required by law.

4. Identity documents

Licence and selfie images are retained only as long as needed to verify you and meet legal/insurance obligations, then deleted. We store only the last four characters of a licence number, never the full number in plain text.

5. Your rights

You may access, correct, or request deletion of your personal data by emailing [email protected]. You can opt out of marketing messages at any time; transactional messages (e.g. booking confirmations) are required to use the service.

6. Data security

We use encryption in transit, access controls, and a privacy-by-default design (private storage buckets, row-level security). No system is perfectly secure, but we work hard to protect your data.

7. Cookies

We use essential cookies and local storage to keep you signed in and remember preferences. We do not use non-essential tracking cookies without consent.

8. Changes

We may update this policy; material changes will be posted here with a new "last updated" date.

Questions? Email [email protected].