Legal
Privacy Policy
Last updated 5 August 2026
We are a bookshop, not an advertising business. We collect what we need to get a book to your door and to let you back into your account — nothing else — and we do not sell any of it.
What we collect
Only two things generate personal data here: making an account, and placing an order.
- Account
- Your name, email address and — if you add one — a phone number and profile picture. If you sign in with Google we receive your name, email address and profile picture from Google; we never see your Google password.
- Orders
- Your delivery name, phone number, street address, city and province, plus what you bought and when. Cash on delivery means we never handle card or bank details at all.
- Sign-in
- A password, stored only as a bcrypt hash — we cannot read it — and a session cookie so you stay signed in. The session cookie is
httpOnly, which means scripts on the page cannot read it. - Usage
- If analytics are switched on, Google Analytics records which pages get visited, in aggregate. Reviews and questions you post are shown publicly under your display name.
Why we hold it
To take payment on delivery, to hand the courier an address they can actually find, to show you your own order history, to reply when you write to us, and to keep the shop working. We do not build advertising profiles and we do not run ads.
Who else sees it
A small number of services we depend on, each seeing only what their job requires. None of them are permitted to use your data for their own purposes:
- The courier — your delivery name, address and phone, so they can reach you.
- MongoDB Atlas — the database the shop runs on.
- Cloudinary — hosts book covers and profile pictures.
- Google — sign-in, and analytics where enabled.
- Our email provider — order confirmations and password resets.
We do not sell, rent or trade your personal data. We would only hand it to anyone else if the law required it.
How long we keep it
Order records are kept as long as we need them for accounts and returns. Everything else lives for as long as your account does — close it and we delete your personal details, keeping only what we are legally obliged to retain against past orders.
Your choices
Write to hello@bookstemplenepal.com and we will, within a reasonable time: send you a copy of what we hold, correct anything wrong, delete your account, or stop emailing you. You can edit your own details any time under account settings. You never have to make an account to buy — guest checkout asks only for a delivery address.
Children
The shop is not aimed at children under 13, and we do not knowingly create accounts for them. If you believe a child has given us their details, tell us and we will remove them.
Changes
If this policy changes we will update the date at the top. Material changes will be announced on the site rather than slipped in quietly.
Contact
Books Temple Nepal, Kathmandu, Nepal · hello@bookstemplenepal.com
Questions about any of the above are welcome through the contact page.
