This policy explains what personal data Apex Law Chamber collects through this website, why we collect it, how long we keep it, and how you can ask us to change or remove it. It covers the website only. Information you give us in the course of a professional engagement is governed by our retainer terms and by our professional duty of confidentiality.
Who is responsible for your data
Apex Law Chamber Pvt. Ltd. is the data controller for this website.
- 8th Floor, Trade Tower, Thapathali, G.P.O. Box 24668, Kathmandu, Nepal
- Email: info@apexlaw.com.np
- Telephone: +977-1-5111154
What we collect, and why
Enquiries
When you submit the contact form we collect your name, email address, telephone number, company name, the enquiry type and practice area you select, and the content of your message. We use this only to respond to you and to keep a record that your enquiry was received and answered.
We store each enquiry in the website database as well as sending it to us by email. We do this deliberately: email delivery can fail silently, and a stored record means an enquiry cannot be lost without trace.
Career applications
When you apply for a position we collect your name, email address, telephone number, any portfolio link you provide, your covering note, and the CV file you upload. We use this to assess your application and to contact you about it. The website holds an uploaded PDF CV temporarily while it is checked and attached to the application email. The temporary file is deleted after the mail attempt, with shutdown cleanup as a safeguard. The website database keeps the application details and CV filename, rather than a retained copy of the CV. A copy sent successfully to our staff remains in our email system. If delivery fails, the form asks you to resubmit because the temporary CV has been deleted.
Newsletter
If you subscribe to our newsletter we collect your email address, and optionally your first name, the topics you choose and your language preference. At the moment you subscribe, and again when you confirm, we also record the date and time, your IP address, your browser’s user agent string, the page you subscribed from, and the exact wording of the consent statement shown to you.
We record the consent wording because if consent is ever questioned, the relevant answer is what you agreed to, not merely that a box was ticked.
Subscription uses double opt-in. Nothing is sent to you beyond a single confirmation message until you click the link in it. If you never confirm, the record is deleted automatically after 30 days.
Newsletters we send contain a small tracking image and links that pass through our own server, so we can see whether a message was opened and which links were followed. This tells us which topics are useful. It is not linked to anything you do elsewhere on the internet, and it is never shared. Open figures are unreliable in any case, because some mail providers load tracking images automatically whether or not you read the message.
If a message to you bounces permanently, or you report one of our messages as spam, we add a one-way cryptographic hash of your address to a suppression list so that we never contact you again. We keep that hash indefinitely and it survives deletion of your subscriber record. It is the only reliable way to guarantee that a later import cannot accidentally re-add you.
Security and abuse prevention
Our forms record the submitting IP address briefly in order to apply rate limits and to prevent the newsletter form being used to send unwanted confirmation email to somebody else’s address. Our web server keeps standard access logs.
What we do not do
- We do not use advertising networks, analytics services, social media pixels or any other third-party tracking on this website.
- All fonts, scripts and other assets are served from our own server. Loading a page here does not send a request to any other company.
- We do not set cookies for ordinary visitors. Cookies are used only for staff who log in to administer the site.
- The website does not accept public comments.
- We do not sell, rent or trade personal data, and we do not buy contact lists.
Who your data is shared with
Enquiries and applications are seen by the lawyers and staff at Apex Law Chamber who need to deal with them. Email we send and receive passes through our email provider in the ordinary course of delivery.
We may disclose personal data where we are required to by law, by a court or by a regulator, or where it is necessary to establish or defend a legal claim.
How long we keep it
- Unconfirmed newsletter signups — deleted automatically after 30 days.
- Newsletter subscribers — kept until you unsubscribe, and for a reasonable period afterwards so we can evidence that consent existed and was withdrawn.
- Consent records — kept as a legal record for as long as we may need to demonstrate the basis on which we contacted you.
- Suppression hashes — kept indefinitely, so that a permanent bounce or a spam complaint is never undone.
- Enquiries and career applications — kept for as long as needed for the purpose they were sent for, and reviewed periodically.
Your choices
Every newsletter carries a one-click unsubscribe link and a link to a preference page where you can change your topics, reduce how often you hear from us, pause for a period, or leave entirely. None of these require you to log in or to contact us first. Unsubscribing takes effect immediately.
You may also ask us to tell you what personal data we hold about you, to correct it if it is wrong, or to delete it. Write to info@apexlaw.com.np and we will respond.
Two limits apply to deletion. We cannot delete records we are required to keep by law or by our professional obligations. And where an address is on our suppression list, we retain the one-way hash even after deleting everything else, because removing it would put you back at risk of being contacted.
Changes to this policy
If we change how we handle personal data we will update this page. Where a change is significant and affects people already on our newsletter list, we will say so in a newsletter rather than relying on you to check.