1. What information we collect and why
When you order hosting, register a domain or contact Baddas Cloud support, we collect only the information needed to set up your account, register your domain name with the relevant registry, issue legal tax invoices in Nepal, and keep our servers secure.
| Data category | Why we collect it | Who receives it | How long we keep it |
|---|---|---|---|
| Account & contact details (name, email, phone, company name, address, PAN/VAT) | To create your client-area account, send renewal reminders and issue compliant VAT invoices. | Internal billing & support systems; tax authorities where required by Nepali law. | While your account is active plus the statutory accounting retention period. |
| Domain registrant details (WHOIS / registry records) | Required by ICANN and domain registries (including .com.np) to record legal domain ownership. | Domain registries and accredited registrar partners. | For the duration of your domain registration. |
| Payment transaction references | To verify payments made via eSewa, Khalti, Fonepay, ConnectIPS or bank transfer. We do not store your wallet PIN or bank password. | Your chosen payment gateway or bank. | Retained with the corresponding invoice record. |
| Support conversations & migration credentials | To troubleshoot issues and copy your website during a free migration. | Baddas Cloud support engineers only. | Support tickets remain in your client area; temporary migration passwords can be rotated immediately after migration. |
| Server & security logs (IP address, request timestamps) | To block brute-force attacks, filter network abuse and diagnose server errors. | Internal infrastructure systems only. | Rotated automatically after short operational log windows. |