CLOUDSUITE

Domain Hosting & Email Hosting Services

PRIVACY POLICY

A Ncell Business Product — Your Most Trusted & Preferred Business Partner

This Privacy Policy describes how Ncell Business collects, uses, discloses, retains, and safeguards information in connection with Cloudsuite, our domain registration and business email hosting solution built for enterprises, SMEs, financial institutions, government offices, and the wider ICT ecosystem in Nepal. It applies whenever a customer, authorized administrator, or end user interacts with the Cloudsuite website, sign-up flows, control panel, APIs, support channels, or hosted services.

By registering a domain, activating an email hosting plan, or otherwise using Cloudsuite, your organization and its authorized users acknowledge the practices described in this Privacy Policy. Where our client is a business, this policy should be read together with the applicable Cloudsuite service agreement and any organization-specific data processing terms.

1. Information We Collect

We collect the categories of information below to activate, deliver, secure, and support Cloudsuite services.

We do not access, read, or scan the content of hosted mailboxes for advertising purposes. Mailbox content is treated as confidential business information belonging to the customer and is described further in Section 5.

2. How We Use Information

Ncell Business uses Cloudsuite information strictly for legitimate business and operational purposes, including to:

• Provision, activate, configure, and manage domain and email hosting services
• Process orders, renewals, upgrades, and invoicing
• Verify domain ownership and meet ICANN, registry, and regulatory obligations
• Provide technical support, troubleshooting, and account management
• Monitor platform integrity, detect fraud, and defend against cyber threats and abuse, in line with Ncell Business Cybersecurity Solutions practices
• Send service notifications, renewal reminders, maintenance alerts, and security advisories
• Improve Cloudsuite performance, reliability, and feature roadmap
• Comply with applicable Nepali law, regulatory directives, and lawful requests from competent authorities

3. Legal Basis for Processing

Depending on the nature of the interaction, Ncell Business processes Cloudsuite information on one or more of the following grounds:

• Performance of a contract – to deliver the domain and email hosting services your organization has purchased
• Legitimate business interest – to secure our platform, prevent misuse, and improve service quality
• Legal and regulatory obligation – to comply with ICANN/registry policy, tax, and other statutory requirements in Nepal
• Consent – for optional marketing communications and non-essential cookies, which you may withdraw at any time

4. Domain Registration Data & Registry Compliance

Registering a domain through Cloudsuite requires submission of registrant, administrative, and technical contact information to the relevant domain registry, in accordance with ICANN policy and applicable country-code top-level domain (ccTLD) rules. Some of this information may be published in public WHOIS/RDDS records unless a privacy or proxy protection option is selected and available for the domain extension in question. Ncell Business processes and shares this data only to the extent required to complete registration, renewal, transfer, or dispute-resolution obligations under registry rules.

5. Email Hosting & Communications Data

Access to hosted mailbox content is restricted to your organization's authorized administrators through the Cloudsuite control panel. Ncell Business personnel do not access mailbox content except where:

• Your authorized administrator specifically requests technical assistance requiring such access
• Access is necessary to investigate a security incident, service abuse, or suspected violation of the Cloudsuite service agreement
• Disclosure is required to comply with a lawful order from a competent Nepali authority

All such access is logged, limited in scope, and governed by internal approval controls.

6. Cookies & Tracking Technologies

The Cloudsuite website and control panel use cookies and similar technologies to keep you securely signed in, remember preferences, understand platform usage, and improve performance. These fall into three categories:

• Essential cookies – required for login, session security, and core functionality
• Performance cookies – help us understand how the website and control panel are used so we can improve them
• Preference cookies – remember settings such as language or display options

You can manage or disable non-essential cookies through your browser settings. Disabling essential cookies may affect your ability to sign in or use certain Cloudsuite features.

7. How We Share Information

Ncell Business does not sell Cloudsuite customer information to third parties. We share information only where necessary, including with:

• Domain registries and ICANN-accredited registrars, as required to register or manage a domain
• Licensed payment gateway partners, to process billing and payments securely
• Data center and cloud infrastructure partners that support Cloudsuite delivery, under confidentiality and security obligations
• Regulatory bodies, law enforcement, or courts, where disclosure is required by applicable Nepali law
• Professional advisors (legal, audit, insurance) on a confidential, need-to-know basis

Any third party engaged to support Cloudsuite is contractually bound to protect information consistent with this Privacy Policy.

8. Data Storage & Security

Cloudsuite data is hosted within access-controlled, monitored data center environments operated as part of Ncell Business Cloud & ICT Solutions. We apply layered technical and organizational safeguards, including:

• Encryption of data in transit and, where applicable, at rest
• Role-based access controls and administrator authentication for the control panel
• Continuous infrastructure monitoring and threat detection, supported by Ncell Business Cybersecurity Solutions capabilities
• Regular security reviews, patching, and incident-response procedures

No system can be guaranteed completely secure; however, we work continuously to reduce risk and respond promptly to emerging threats.

9. Data Retention

We retain account, domain registrant, and billing information for as long as your Cloudsuite subscription remains active, and thereafter for the period required to meet contractual, accounting, tax, and regulatory obligations under applicable Nepali law. Upon account closure, mailbox content and non-essential account data are deleted or anonymized within a reasonable period, except where longer retention is required by law or to resolve disputes.

10. Your Rights & Choices

Subject to applicable law and your role as an authorized administrator, you may:

• Access and update your organization's account and contact information through the Cloudsuite control panel
• Request correction of inaccurate domain registrant or account details
• Opt out of marketing communications at any time, without affecting core service delivery
• Request a copy of, or deletion of, account-level data, subject to contractual and statutory retention requirements

Requests can be submitted through your Cloudsuite account or the contact details in Section 15, and will be handled by our support and privacy teams.

11. International Data Transfers

Cloudsuite infrastructure supporting domain and email hosting is primarily operated within Nepal. Where any information is transferred to, or processed by, a service partner located outside Nepal (for example, a registry operator or infrastructure provider), Ncell Business takes reasonable steps to ensure such transfers are subject to appropriate contractual and security safeguards.

12. Children's Privacy

Cloudsuite is a business-to-business service designed for organizations, and is not directed at, or knowingly used to collect information from, individuals under the age of 18. If we become aware that we have inadvertently collected such information, we will take steps to delete it.

13. Third-Party Links & Services

The Cloudsuite website and control panel may contain links to third-party websites or integrations, such as payment gateways. This Privacy Policy applies only to Cloudsuite and does not extend to the privacy practices of any third-party site or service. We encourage you to review the privacy policies of any third party before sharing information with them.

14. Updates to This Policy

We may update this Privacy Policy periodically to reflect changes in our services, technology, or legal requirements. The “Effective Date” at the top of this page indicates when it was last revised. Material changes will be communicated through the Cloudsuite control panel, email notification to registered administrators, or a prominent notice on our website.

15. Contact Us

For questions, requests, or concerns regarding this Privacy Policy or how Cloudsuite handles your information, please contact:

Ncell Business — Your Most Trusted & Preferred Business Partner