Privacy Policy

At CME EV Bike ("CME," "we," "us," or "our"), we are committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website, interact with our services, or communicate with us. By using our website, you agree to the practices described in this policy.

1. Information We Collect

Personal Information

When you fill out forms on our website — such as inquiry forms, test ride requests, or newsletter sign-ups — we may collect the following personal information:

• Full name
• Email address
• Phone number
• City or region of residence
• Any additional information you choose to provide in message fields

Device and Browser Information

We automatically collect certain technical information when you visit our website, including your IP address, browser type and version, operating system, device type, screen resolution, and referring URL. This information helps us optimize your browsing experience and diagnose technical issues.

Usage Data

We collect information about how you interact with our website, including pages visited, time spent on each page, click patterns, scroll depth, and navigation paths. This data is collected in aggregate form and is used to improve our website's content and usability.

Cookies and Tracking Technologies

We use cookies, web beacons, and similar tracking technologies to collect information about your browsing activity. For detailed information about the specific cookies we use and how to manage your preferences, please see Section 8 below.

2. How We Use Your Information

We use the information we collect for the following purposes:

• Processing Inquiries: To respond to your questions, feedback, and requests submitted through our contact and inquiry forms.
• Test Ride Requests: To schedule and coordinate test ride bookings at your preferred location.
• Communications: To send you product updates, promotional materials, and newsletters — only with your explicit consent. You may opt out at any time.
• Website Improvement: To analyze usage patterns and optimize our website's design, content, performance, and user experience.
• Analytics and Reporting: To generate aggregated, anonymized reports on website traffic and user behavior for internal business purposes.
• Security: To detect and prevent fraudulent activity, unauthorized access, and other security threats.

3. Legal Basis for Processing

We process your personal data under the following legal bases:

• Consent: Where you have given us explicit consent to process your personal data for specific purposes, such as receiving marketing communications or enabling non-essential cookies.
• Legitimate Interest: Where processing is necessary for our legitimate business interests, such as improving our website, understanding customer needs, and ensuring the security of our services — provided these interests are not overridden by your rights and freedoms.
• Contractual Necessity: Where processing is necessary to fulfill a contract with you, such as responding to a test ride booking request or processing a product inquiry that may lead to a purchase.

4. Information Sharing

We do not sell, rent, or trade your personal information to third parties for their own marketing purposes. We may share your data only in the following limited circumstances:

• Service Providers: We may share information with trusted third-party service providers who assist us in operating our website, conducting our business, or providing services to you. These providers include web hosting companies, analytics platforms (such as Google Analytics), email service providers, and customer relationship management tools. All service providers are contractually obligated to protect your data and use it solely for the purposes we specify.
• Legal Requirements: We may disclose your information if required by law, regulation, legal process, or enforceable governmental request, or to protect the rights, property, or safety of CME EV Bike, our users, or the public.
• Business Transfers: In the event of a merger, acquisition, reorganization, or sale of assets, your personal information may be transferred as part of that transaction. We will notify you of any such change and the choices you may have regarding your information.

5. Data Retention

We retain your personal information only for as long as is necessary to fulfill the purposes for which it was collected:

• Inquiry and Contact Data: Retained for up to 2 years from the date of your last interaction with us, unless a longer retention period is required by law or for ongoing business purposes.
• Analytics Data: Aggregated and anonymized analytics data is retained for up to 1 year. Individual-level analytics data is deleted or anonymized within 14 months.
• Deletion Upon Request: You may request the deletion of your personal data at any time by contacting us at the email address provided below. We will process your request within 30 days, subject to any legal obligations that may require us to retain certain information.

6. Data Security

We take the security of your personal data seriously and implement appropriate technical and organizational measures to protect it against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption: All data transmitted between your browser and our servers is encrypted using industry-standard SSL/TLS protocols.
• Access Controls: Access to personal data is restricted to authorized personnel on a need-to-know basis, with multi-factor authentication and role-based access controls.
• Regular Audits: We conduct periodic security assessments and vulnerability scans to identify and address potential risks.
• Secure Infrastructure: Our website is hosted on infrastructure that complies with industry security standards and best practices.

While we strive to protect your personal information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security, but we continuously work to enhance our security posture.

7. Your Rights

Depending on your location and applicable data protection laws, you may have the following rights regarding your personal data:

• Right of Access: You may request a copy of the personal data we hold about you.
• Right to Rectification: You may request that we correct any inaccurate or incomplete personal data.
• Right to Deletion: You may request that we delete your personal data, subject to certain legal exceptions.
• Right to Restriction: You may request that we restrict the processing of your personal data under certain circumstances.
• Right to Data Portability: You may request a copy of your data in a structured, commonly used, and machine-readable format.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days.

8. Cookies

Our website uses cookies and similar tracking technologies to provide essential functionality, analyze site usage, and deliver personalized content. Cookies are small text files stored on your device that help us recognize your browser and remember certain information.

We categorize our cookies into three types: essential cookies (required for site functionality), analytics cookies (to understand usage patterns), and marketing cookies (to deliver relevant content and advertisements).

For detailed information about the cookies we use, their purposes, and how to manage your preferences, please visit our Cookie Settings page.

9. Children's Privacy

Our website and services are not directed at individuals under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have inadvertently collected personal data from a child under 16, we will take immediate steps to delete that information from our records. If you believe we may have collected information from a child under 16, please contact us at [email protected].

10. International Data Transfers

Your personal data may be transferred to, stored, and processed in countries other than the country in which it was originally collected. These countries may have data protection laws that differ from the laws of your jurisdiction. When we transfer your data internationally, we take appropriate safeguards to ensure that your personal information receives an adequate level of protection, including the use of standard contractual clauses approved by relevant regulatory authorities and ensuring that our service providers comply with applicable data protection standards.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you through a prominent notice on our website or by email. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: [email protected]
• Company: CME EV Bike
• Address: 123 Innovation Drive, Suite 400, Kathmandu, Nepal
• Phone: +977 9801309150

We are committed to resolving any complaints about our collection or use of your personal data. If you are not satisfied with our response, you may have the right to lodge a complaint with your local data protection authority.