Privacy Policy

Sasto Mela Pvt. Ltd. ("Sasto Mela", "we") operates beauty.sastomela.com and sastomela.com from Kathmandu, Nepal. We are the data controller for the personal information described here.

We collect only what is needed to sell and deliver products to you:

• Identity and contact: name, mobile number, email address.
• Delivery details: province, district, area, landmark and any note you leave for the courier.
• Order details: the products you buy, prices, payment method and delivery status.
• Payment confirmation from eSewa, Khalti or your bank. We never receive or store your wallet PIN, card number or bank password.
• Technical data: device type, browser, pages visited and approximate location from your IP address, collected through cookies and server logs.
• Messages you send us on Messenger, WhatsApp, Viber, email or phone.

• To process, pack, deliver and support your order, including sharing your name, phone and address with the courier.
• To confirm cash on delivery orders by phone and send delivery SMS updates.
• To handle returns, refunds and genuine-product claims.
• To keep the site secure, prevent fraud and fix errors.
• To send offers and new-arrival news, only if you opted in. Every message has an unsubscribe link or you can reply STOP.

We do not sell your personal information to anyone.

• Courier partners, to deliver your parcel and collect cash on delivery.
• Payment providers (eSewa, Khalti, banks) to confirm your payment.
• IT providers that host our website and send SMS or email on our behalf.
• Government authorities of Nepal when the law requires it.

Each of these receives only what it needs for its job and may not use your data for anything else.

We use a small number of cookies: one to remember your cart, one for sessions when accounts launch, and basic analytics to see which pages are used. You can block cookies in your browser; the cart may then not work.

Order records are kept for the period required by Nepali tax and company law, currently seven years. Marketing preferences are kept until you unsubscribe. Server logs are deleted within 90 days.

You can ask us to show you the personal data we hold about you, correct it, delete it where we are not legally required to keep it, or stop sending you marketing. Write to privacy@sastomela.com from the email or phone number on your account and we respond within 15 days.

The site is served over HTTPS only. Personal data is stored on servers with restricted access, and staff see customer details only to process orders. No system is perfectly secure; if a breach ever affects your data, we will tell you and the relevant authority promptly.

Our products and site are for adults. We do not knowingly collect data from anyone under 18. If you believe a minor has ordered from us, contact us and we will delete the record.

We may update this policy as the store grows, for example when accounts and card payments launch. The date at the top shows the latest version. Material changes are announced on the site.

Sasto Mela Pvt. Ltd., Kathmandu, Nepal. privacy@sastomela.com, or any channel on our Contact page.