1. Introduction
Lacspace Corporation Pvt. Ltd. (“CargoYatra”, “we”) respects your privacy. This Policy explains what personal data we collect through the Service, how we use it, and the rights you have. It is designed to be consistent with Nepal’s Electronic Transactions Act, 2063 (2008) and the Individual Privacy Act, 2075 (2018), and, where applicable, the data-protection laws of the markets we serve (including the GDPR).
2. Data we collect
We collect the following categories of data:
- Account data — name, business name, email, phone and login credentials.
- Operational data — shipments, customers, drivers, vehicles, invoices and related records you enter to run your logistics operation.
- Payment data — billing details processed by our payment partners; we do not store full card numbers.
- Usage data — log data, device and browser information, IP address and analytics about how the Service is used.
- Communications — messages you send to support and your preferences.
3. How we use data
We use personal data to:
- provide, operate, secure and improve the Service;
- authenticate users and manage subscriptions and billing;
- provide customer support and respond to enquiries;
- send service, security and (where permitted) marketing communications;
- comply with legal obligations and enforce our terms.
4. Legal bases
Where required, we process personal data on the basis of your consent, the performance of our contract with you, our legitimate business interests, or compliance with a legal obligation.
5. Roles: controller and processor
For data about your own account and our website visitors, we act as a data controller. For the operational and personal data you upload about your customers and end-recipients, you are the controller and we act as your processor under our Data Processing Agreement.
6. Sharing & disclosure
We do not sell personal data. We share it only with:
- service providers and sub-processors who host and support the Service under confidentiality obligations;
- third-party integrations you choose to connect (for example carriers and payment processors);
- authorities where required by law or to protect rights, safety and security;
- a successor entity in connection with a merger, acquisition or asset sale.
7. International transfers
Data may be processed in locations outside your country. Where we transfer personal data across borders, we use appropriate safeguards consistent with applicable law.
8. Security
We apply technical and organisational measures including encryption in transit, encryption of sensitive credentials at rest, role-based access control, tenant data isolation and audit logging. See our Security page for more. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
9. Retention
We retain personal data for as long as your account is active and as needed to provide the Service, then for the period required to meet legal, accounting and dispute-resolution needs. On termination, Customer Data is available for export for a limited window before deletion.
10. Your rights
Subject to applicable law, you may have the right to access, correct, update, delete, restrict or object to the processing of your personal data, to data portability, and to withdraw consent. To exercise these rights, contact us at the address below. End-users whose data is uploaded by a customer should contact that customer (the controller).
12. Children
The Service is intended for businesses and is not directed to children. We do not knowingly collect personal data from children.
13. Grievance officer & contact
For privacy questions, requests or complaints, contact our grievance officer:
- Lacspace Corporation Pvt. Ltd.
- Bhimsengola-31, Sinamangal, Kathmandu 44600, Nepal
- Email: hello@lacspace.com
- Phone: +977 9705300600
We will respond within the timelines required by applicable law.
14. Changes
We may update this Policy from time to time and will post the revised version with a new “last updated” date.
Questions?
If anything here is unclear, reach our team at hello@lacspace.com.