Privacy policy.

Last Door Solutions Pvt. Ltd. is a design and engineering company registered in Kathmandu, Nepal with the Office of the Company Registrar, company number 79606. It was registered on 13 January 2011 (2067-09-30 BS), and its status on the register is approved. You can check that yourself on the registrar's public data portal at company.ocr.gov.np. Our team is distributed across Nepal, India, the UK and the US.

This policy covers lastdoorsolutions.com and its subdomains. It does not cover client products we build, which have their own policies.

We collect personal data only when you send it to us:

• Contact form: name, work email, company, and your message.
• Case study access request: name, company, company email, what you are evaluating us for, a short description of your project, and your agreement to keep the case studies confidential.
• Email you send us: whatever you include.

We do not run analytics, advertising pixels, session recording or social media trackers on this site, and we have decided not to add any. We do not buy or enrich data about you.

• To reply to your inquiry and, if you ask, to prepare a proposal.
• To decide whether to grant access to confidential case studies, and to send you a personal access link.
• To keep a record of who has seen material shared under NDA.

The legal basis under the GDPR and UK GDPR is our legitimate interest in responding to business inquiries and protecting confidential material. For case study access, it is your consent to the confidentiality terms.

We keep inquiry emails in our mailbox indefinitely, with no deletion schedule. A business conversation can resume years later, and some of these emails carry invoices, quotes and agreements that we are required to keep as accounting records.

You can have yours deleted at any time by asking. Email hello@lastdoorsolutions.com and we will remove the correspondence, except anything we are legally obliged to retain as a financial record, which we will tell you about if it applies to you.

The email of a case study access request is kept in our mailbox for as long as the material it unlocks is confidential. The access database record is kept as described below.

The access database keeps this:

• An access link record is kept indefinitely, as the record of who was sent material shared under NDA. It holds your name, company and email, which case study the link opened, who issued it, when it was issued, opened and ended, and whether it was disabled because it was opened in a second browser. It never holds the link itself or your browser's id, only hashes of them.
• You can ask us to delete your access record. We will, unless we still need it as evidence under the confidentiality undertaking you accepted, in which case we will tell you.
• The record that an approval was used is deleted 30 days after the approval link expires, which is 37 days after the request.
• A rate-limit count is deleted one day after its hour or day is over.

Deletion runs automatically when the access forms are next used, so a record can stay past these dates while nobody uses them.

You can ask what we hold about you, ask for a copy, ask us to correct it or delete it, and object to our using it. Email hello@lastdoorsolutions.com. We answer within one working day and act within 30 days. If you are in the EU or UK you can also complain to your data protection authority.

This section is about personal data about you. Client business data and subscription data are covered on the terms page.

This site is for businesses. We do not knowingly collect data from anyone under 16.

We are a Nepali company and we operate under Nepali law. This policy, and any dispute about the personal data it describes, is governed by the laws of Nepal, and the courts of Kathmandu have jurisdiction. Anything about using this site or the work we build sits on the terms page, which says the same.

That does not take away rights you hold where you live. If you are in the EU or the UK, the protections of your own data protection law still apply to you, and you can still complain to your own data protection authority, as the section above says.

We update this page when something changes and put the date at the top.