Your data, kept small.

01Who we are

Ankora Labs (“Ankora Labs”, “we”, “us”) is a web design and development studio based in Kathmandu, Nepal. This policy explains what personal information we collect through ankoralabs.com and when you contact us, why we collect it, and what you can ask us to do with it.

For the information described here, we decide how and why it is used. You can reach us about anything in this policy at hello@ankoralabs.com or on WhatsApp at +977 9840171882.

02What we collect

We only collect what you give us, and the minimum a website needs to run:

• When you book a call: your name, email address, the time you pick and anything you write in the booking notes.
• When you message us on WhatsApp: your phone number, profile name and the messages and files you send.
• When you email us: your email address, your message and any attachments.
• When you use our contact form: your name, email address, phone number if you give it, the options you pick and your message. We send you one email confirming we received it.
• When you apply for a role: your name, email, phone number if you give it, CV, portfolio or profile links and anything you write in the form.
• When you visit the site: our host records standard server logs: IP address, browser type, the page requested and the time.

We don’t use cookies, analytics, advertising pixels or any other tracking on this site. The only thing the site stores in your browser is a small note in session storage so the loading animation plays once per visit. It holds no personal information and disappears when you close the tab.

03Why we use it

We use your information only to:

• reply to your message and hold the call you booked;
• understand your project and prepare a proposal and quote;
• deliver, invoice and support the work if you become a client;
• consider your application if you apply to work with us;
• keep the website secure and working.

Where a legal basis is required, we rely on your consent (when you contact us), on taking steps you’ve asked for before a contract, on performing our contract with you, on our legitimate interest in running and protecting our business, and on our legal obligations, such as keeping accounting records.

We don’t sell your information, use it for advertising, or add you to a mailing list you didn’t ask to join.

04Who handles it

We use a small number of service providers to run the studio. Each handles your data only to provide its service:

• Vercel hosts this website and keeps its server logs.
• Cal.com runs our booking calendar; Google (Calendar and Meet) holds the meeting and sends the invite.
• Cloudflare routes email sent to our domain, and Google (Gmail) stores our inbox.
• WhatsApp (Meta) carries chats you start with us.
• Brevo delivers messages and job applications sent through our website forms to our inbox, and sends you the email confirming we got them.

The LinkedIn link on this site is a plain link. LinkedIn only receives information if you click it and use their site, under their own policy. We may also share information if the law requires it, for example with a tax authority or a court.

05International transfers

Several of the providers above store data outside Nepal, mainly in the United States and the European Union. We choose established providers that protect data with security measures and contractual safeguards, and we only send them what their service needs.

06How long we keep it

• Enquiries and calls that don’t become a project: deleted 12 months after our last conversation.
• Client projects: kept for the length of the project and our support period, and invoices and accounting records for as long as Nepali tax law requires.
• Job applications: kept for 12 months so we can contact you about future roles, unless you ask us to delete them sooner.
• Server logs: kept by Vercel for a short period, usually a few days.

07How we protect it

The site is served only over HTTPS. Our accounts use strong passwords and two-factor authentication, and only the people working on your enquiry or project can see your information. No method of sending or storing data is perfectly secure, but if we ever learn of a breach that affects you, we will tell you promptly.

08Your rights

Under Nepal’s Individual Privacy Act, 2075 (2018), and, if you are in the EU or UK, the GDPR, you can ask us to:

• tell you what information we hold about you and give you a copy;
• correct anything that’s wrong or out of date;
• delete your information, unless we have to keep it by law;
• stop or limit how we use it, or withdraw consent you gave earlier.

Email hello@ankoralabs.com or message us on WhatsApp. We’ll reply within 30 days, usually much sooner, and we won’t charge you. If you’re unhappy with our answer, you can also complain to the data protection authority where you live.

09Data in client projects

When we build or maintain a website or app for a client, we may have access to that client’s data, including information about their own customers. In that case we act only on the client’s instructions, keep it confidential, use it only for the project, and return or delete it when the work ends. The client’s own privacy policy covers how they use their users’ data.

10Children

Our services are for businesses and adults. We don’t knowingly collect information from anyone under 16. If you think a child has sent us their information, tell us and we will delete it.

11Changes to this policy

We’ll update this page if the way we handle data changes, for example if we start using analytics. The date at the top shows the latest version. If a change matters to you as a client, we’ll tell you directly.