Privacy Policy

1. Introduction and Data Controller

Nepal Test Prep is an online English language examination preparation platform available at www.nepaltestprep.com. The Platform is owned, operated, and maintained by Shresh Biz Pvt Ltd ("we", "us", "our"), a company registered in Nepal (www.shreshbizz.com). Nepal Test Prep is a trading platform name and product of Shresh Biz Pvt Ltd; it is not a separately registered legal entity.

Shresh Biz Pvt Ltd, trading as Nepal Test Prep, is the primary data controller for all personal data collected through the Platform. All data controller rights, responsibilities, and obligations described in this Policy are held by and vest in Shresh Biz Pvt Ltd.

This Privacy Policy explains what personal data we collect, why we collect it, how we use and share it, how long we retain it, and the rights you hold with respect to your data. It applies to all users of the Platform, including direct (B2C) students, organisation-enrolled (B2B) students, partner organisations, tutors, and visitors.

By using the Platform, you consent to the data practices described in this policy. If you do not agree, please discontinue use of the Platform. This policy should be read alongside our Terms of Service and, where applicable, our B2B Partner Agreement.

2. Categories of Personal Data We Collect

We process three distinct categories of users, each with a different data profile.

3. How We Use Your Personal Data

We process personal data for the following purposes:

• •To create, verify, and manage your account on the Platform.
• •To provide, operate, and improve our test preparation services, including AI-powered scoring and feedback.
• •To track and display your test progress, scores, and learning analytics.
• •To process payments and manage your subscription (direct students).
• •To manage quota allocations and organisation accounts (partner organisations).
• •To share relevant academic progress and subscription status with the student's Host Organisation, where the student is enrolled via an Organisation Code and has consented to such sharing.
• •To respond to your enquiries and provide customer and technical support.
• •To send important service notifications, security alerts, and policy updates.
• •To send promotional or marketing communications where you have opted in.
• •To detect and prevent fraud, abuse, and other unauthorised activity.
• •To comply with applicable legal obligations under the laws of Nepal.
• •To analyse usage trends and improve the Platform's features and user experience.

4. Data Sharing and Disclosure

Nepal Test Prep does not sell, rent, or trade your personal data. We share data only in the following limited and defined circumstances:

5. Organisation-Enrolled Students — Data Controller Relationship

This section is important for students who access the Platform via an Organisation Code.

Nepal Test Prep is the primary data controller for all student personal data collected through the Platform. The partner organisation (Host Organisation) acts as a data recipient for defined academic data, and — depending on how it uses that data for its own counselling or administrative services — may act as an independent data controller for those limited purposes.

Nepal Test Prep determines what data is collected, how it is processed, how long it is retained, and what platform features exist. The Host Organisation does not have access to raw personal data beyond the academic and subscription information described in Section 4.

Students who register using an Organisation Code authorise Nepal Test Prep to share relevant academic progress, test scores, and subscription status with the organisation associated with that code, solely for educational management and administrative purposes.

6. Data Collected Automatically

When you use the Platform, certain technical data is collected automatically:

• •Browser type, version, and operating system
• •Device type and approximate geographic location (derived from IP address)
• •IP address
• •Pages visited, navigation paths, and time spent on the Platform
• •Test attempt data including start time, answer selections, and completion time
• •Referral source (how you arrived at the Platform)
• •Cookies and similar tracking technologies (see our Cookie Policy)

This data is used for security, fraud prevention, performance monitoring, and improving the user experience. It is not used to build personal profiles for third-party advertising.

7. Data Retention

We retain personal data for as long as your account is active or as long as is necessary to provide our services, fulfil legal obligations, resolve disputes, or enforce our agreements.

Audio recordings submitted during speaking tests are retained for up to 90 days for scoring and feedback purposes, after which they are permanently deleted from our systems.

Following account deletion, we may retain anonymised, aggregated data — with no personally identifiable information — indefinitely for research and platform improvement purposes.

If you request deletion of your account, we will process your request within 30 days, subject to any legal retention requirements.

8. Data Security

We implement robust technical and organisational measures to safeguard your personal data:

• •TLS/SSL encryption for all data transmitted between your browser and our servers.
• •Passwords hashed using industry-standard algorithms — plain-text passwords are never stored.
• •Row-level security policies ensuring users can only access their own data.
• •Strict access controls limiting data access to authorised personnel only.
• •Regular security reviews and monitoring for unauthorised access or breaches.

No method of electronic transmission or storage is entirely secure. Whilst we take all reasonable precautions, we cannot guarantee the absolute security of data transmitted to or stored on the Platform. In the event of a data breach affecting your rights, we will notify you in accordance with applicable law.

9. Your Rights

You have the following rights with respect to your personal data, consistent with the Privacy Act, 2075 (2018) of Nepal and applicable international standards:

• •Right of Access: Request a copy of the personal data we hold about you.
• •Right to Rectification: Request correction of inaccurate or incomplete personal data.
• •Right to Erasure: Request deletion of your personal data, subject to legal retention obligations.
• •Right to Portability: Request your data in a structured, commonly used, machine-readable format.
• •Right to Object: Object to processing of your data for direct marketing at any time.
• •Right to Withdraw Consent: Withdraw consent for optional data processing (such as marketing communications) at any time, without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at csd@nepaltestprep.com. We will acknowledge your request within 5 business days and respond in full within 30 days. Complex requests may be extended by a further 30 days where we notify you of the extension.

10. Student Registration Consent

During registration, all users are required to agree to our Terms of Service and this Privacy Policy.

Students registering via an Organisation Code are additionally presented with a clear, specific consent notice:

"I understand that my registration through an Organisation Code allows the associated organisation to view my subscription status, test scores, and academic progress on Nepal Test Prep."

This consent can be withdrawn at any time by contacting us at csd@nepaltestprep.com, which will result in data sharing with the Host Organisation being ceased. Note that this may affect your subscription access if it is managed by the organisation.

11. Children's Privacy

The Platform is not directed to children under the age of 13. We do not knowingly collect personal data from children under 13. If we become aware that we have inadvertently collected such data, we will take prompt steps to delete it.

Users aged 13 to 17 must have obtained parental or guardian consent before purchasing a paid subscription or submitting audio recordings.

12. International Data Transfers

Our servers and third-party service providers may be located in countries outside Nepal, including countries whose data protection laws may differ from those of Nepal. By using the Platform, you consent to your personal data being transferred to and processed in those countries.

We take reasonable steps to ensure any international transfer is subject to adequate safeguards, including contractual protections with our service providers, to ensure your data remains protected to a standard consistent with this Privacy Policy.

13. Third-Party Links

The Platform may contain links to third-party websites. Nepal Test Prep is not responsible for the privacy practices or content of those sites. We encourage you to review the privacy policies of any third-party services before providing your personal data.

14. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our data practices, legal requirements, or business operations. We will notify you of material changes by email or by posting a prominent notice on the Platform at least 14 days before the changes take effect.

Your continued use of the Platform after the effective date of any update constitutes your acceptance of the revised Privacy Policy.

15. Contact Us

For questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact Shresh Biz Pvt Ltd, trading as Nepal Test Prep: