Introduction

Welcome to Himalayan Treasures. This Privacy Policy describes how Himalayan Treasures - owned by Surya Nepal Private Limited (“we”, “us”, or “our”) collects, uses, processes, and discloses your information in connection with your access to and use of our website himalayantreasures.com, and the services we offer (collectively, the “Services”). We are committed to protecting your privacy and handling your data in an open and transparent manner.


Information We Collect

We collect information that you provide directly to us, information collected automatically, and information from third parties.

a)      Information You Provide to Us: We collect information directly from you when you make a purchase with us, register on our site, join our loyalty program(s), sign up for our email newsletters and/or other notifications, fill out a survey, contact us, or otherwise submit it to us. Information collected directly from you include:

·         Personal and Contact Information: Name, shipping address, billing address, email address, and phone number.

·         Account Information: If you create an account, your username, password, and order history.

·         Communications: Information you provide when you contact us with questions, feedback, or otherwise correspond with us.

b)      Information Collected Automatically: We use tracking tools like browser cookies and mobile device IDs. We do this on our websites, in emails that we send to you, and in media advertising. We collect information about usage and browser information over time. We may have third parties collect personal information this way. Information collected automatically include:

·         Technical Data: Your IP address, browser type and version, operating system, device information, and login data.

·         Usage Data: Information about how you use our website, such as the pages you viewed, the time spent on pages, and links clicked. This is collected via cookies and similar technologies (see our Cookie Policy for details).

·         Payment Information: We do not collect or store your full payment card details. All transactions are processed through our secure third-party payment gateways, such as Shopify Payment, which are compliant with PCI-DSS standards. We receive confirmation of payment from these gateways.

·         Online Identifiers: If you engage with us through a social media site, we may collect your social media user identifier.

c)      Information collected from third parties: For example, our business partners may give us information about you. We may receive information from companies who compile information about shoppers and their preferences. Social media platforms may also give us information about you, and we may get information about your interactions with our ads on third-party sites.

d)      Combining of Information: For example, we may combine information we have collected offline with information we collect online. We combine information we have collected across third-party sites, including social media sites. We combine information across devices such as computers and mobile devices. We may also combine information from third parties with information we already have.


How and Why We Use Your Information (Purpose of Processing)

We use your personal data on the basis of lawful processing, including your consent and the necessity to perform a contract with you. The purposes for which we use your information include:

·         To Fulfill Our Contract With You: To process your registration with our site and to process your orders, manage payments, and arrange for shipping and delivery.

 ·         To Communicate With You: To send order confirmations, shipping notifications, and respond to your service-related requests.

 ·         For Marketing Purposes: With your explicit consent, for sending you emails and/or push notifications about new products, special offers, and our brand stories. You may withdraw your consent at any time.

 ·         To Improve Our Services: To analyze website usage to improve our site design, user experience, including by personalizing your experience, and product offerings.

 ·         For Security and Safety Purposes: To help protect you, our sites, our customers, and our consumers.

Sharing and Disclosure of Information

We do not sell your personal data. We may share your information with the following categories of third parties:

·         Our Distribution Partner: We share your name, shipping address, phone number, payment receipt information, and order details with our designated third-party distributor, for the sole purpose of order fulfillment, logistics management, and delivery.

 ·         Service Providers: We engage third parties to perform services on our behalf, such as website management, payment processors, web hosting companies, analytics providers, and email marketing services. Certain information obtained through your use of our site may be disclosed to such Service Providers, provided that, we shall take reasonable precautions to ensure adequate protection of any personal and payment related information that is shared with such Service Providers.

 ·         Legal Compliance: We may disclose information where we are legally required to do so in order to comply with applicable law, governmental requests, or legal process.

 ·         Successor to all or part of our business: In the event that our business is sold in whole or in part to any other entity, we may include your information as part of that transaction.


Your Data Protection Rights

Depending on your location, you may have the following rights regarding your personal data:

•                     The Right to Access: You have the right to request copies of your personal data.

•                     The Right to Rectification: You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.

 •                     The Right to Erasure (Right to be Forgotten): You have the right to request that we erase your personal data, under certain conditions.

 •                     The Right to Withdraw Consent: Where we have relied on your consent to process your personal data, you have the right to withdraw that consent at any time.

 •                     Right to Grievance Redressal and Nomination: You have the right to grievance redressal and the right to nominate an individual to exercise your rights in the event of your death or incapacity.

 •                     Right to Know & Opt-Out: You may have the right to know what personal information is being collected, the right to "opt-out" of the sale or sharing of your personal information, and the right to non-discrimination for exercising your privacy rights.

We disclaim that these rights may be subject to exceptions under applicable laws of relevant jurisdiction(s). For instance, we may not be able to honor certain requests without first taking reasonable steps to verify your identity.

To exercise any of these rights, please contact us at privacy@himalayantreasures.com

International Data Transfers

Our business operates in the United States, India and Nepal. As such, your personal information may be transferred to, stored, and processed in a country that is not your own. We take appropriate safeguards to ensure that your personal data remains protected in accordance with this Privacy Policy.


Data Retention

We will retain your personal data only for as long as is necessary for the purposes set out in this Privacy Policy, including for the purposes of satisfying any legal, accounting, or reporting requirements.

Security

We use reasonable administrative, logical, physical and managerial measures to safeguard your personal information against loss, theft and unauthorized access, use and modification and are committed to continuously enhancing such measures with technological advancement. However, by accepting this Privacy Policy you understand that there are no absolute internet measures, hence, we cannot guarantee complete security. Furthermore, we shall not be responsible for any breach in relation to the information you choose to make public.

We and our Service Providers may disclose and otherwise use your personal and other information where we or they reasonably believe such disclosure is needed to (a) satisfy any applicable law, regulation, legal process, or governmental request, (b) enforce applicable terms of use, including investigation of potential violations thereof, (c) detect, prevent, or otherwise address illegal or suspected illegal activities (including payment fraud), security or technical issues, or (d) protect against harm to the rights, property or safety of us, our users or the public, as required or permitted by law.

Our Commitment to Data Security

At Himalayan Treasures, we take the security of your personal information seriously and have implemented appropriate technical and organizational measures to protect it from unauthorized access, use, alteration, or disclosure.

  • Encryption in Transit: Our website uses Secure Sockets Layer (SSL) encryption to protect the data you transmit to us. This is indicated by the "https://" protocol and the padlock icon in your browser's address bar.
  • Payment Security: We are fully committed to protecting your payment information. We do not store, process, or have access to your full credit or debit card numbers. All payments are securely handled by our PCI DSS Level 1 compliant payment partner, Shopify Payment.
  • Access Control: Access to personal customer data is restricted to authorized personnel of Himalayan Treasures and our trusted third-party partners (such as our distributor and brand agency) on a "need-to-know" basis to perform their designated functions.
  • Vendor Security: We conduct due diligence on our third-party vendors and partners to ensure they maintain security standards that are commensurate with our own.

While we strive to use commercially acceptable means to protect your Personal Data, no method of transmission over the Internet or method of electronic storage is 100% secure. 


Changes to This Privacy Policy

We will update this Privacy Statement from time to time in response to changing legal, regulatory or operational requirements. We will provide notice of any such changes (including when they will take effect) in accordance with law. Your continued use of our service after any such updates take effect will constitute acceptance of those changes. If you do not accept any updates to this Privacy Statement, you may cancel your use of our service. To see when this Privacy Statement was last updated, please see the "Last Updated " section below.

Business transfers

 In connection with any reorganization, restructuring, merger or sale, or other transfer of assets, we will transfer information, including personal information, provided that the receiving party agrees to respect your personal information in a manner that is consistent with our Privacy Policy.

Children’s Privacy

It is not our intention to collect personal information from children under age 13. If you are a parent or legal guardian and think that your child under 13 has given us information, you can contact us at Contact Us. Please mark your inquiries “COPPA Information Request.”

Our Services are intended for a United States audience. We process personal information in the United States. While our website is accessible globally, we do not intentionally offer our goods or services to residents of the European Union, the United Kingdom, or any other jurisdiction outside of the United States. If you are a non-U.S. user, by accessing or using our services, you acknowledge and agree that your personal information will be transferred to and processed in the United States, and you waive any claims based on the laws of your home country.


Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please click on Contact Us or you may also contact us at:

Email: privacy@himalayantreasures.com

Address: Surya Nepal Pvt. Ltd., Kantipath-01, Kathmandu, Nepal

Please note that if you contact us to assist you, for your safety and ours we may need to authenticate your identity before fulfilling your request.

Last Updated On : 25 November 2025