LEGAL FRAMEWORK

Privacy Policy

Effective: 22 September 2025 • Jurisdiction: Federal Democratic Republic of Nepal

This Privacy Policy explains how AKUIRA collects, stores, and protects personal data in compliance with the Constitution of Nepal 2015, the Privacy Act 2018, the Electronic Transactions Act 2006, and other applicable Nepali laws and directives issued by the National Information Commission.

1. Definitions

"AKUIRA", "we", or "our" refers to AKUIRA Investigations, an independent investigative collective operating in Nepal while finalising formal incorporation. "Personal Data" includes any information that identifies or relates to an identifiable person, as described under Article 28 of the Constitution of Nepal and Section 3 of the Privacy Act 2018.

2. Data We Collect

2.1 Direct submissions

Names, phone numbers, email addresses, organisation details, evidence files, and statements supplied through secure forms, email, encrypted channels, or interviews.

2.2 Investigative sourcing

Verified public records, court orders, audit reports, RTI responses, and whistleblower documents obtained under the Right to Information Act 2007.

2.3 Technical telemetry

IP addresses, device identifiers, and minimal analytics collected via privacy-centric tooling for security and service continuity. We do not use interest-based advertising cookies.

3. Legal Basis for Processing

  • Consent: When you voluntarily submit form data, tip-offs, or subscribe to newsletters.
  • Legitimate interest: Pursuant to Article 19 (Freedom of Expression) and Article 28 (Right to Privacy) of the Constitution, we process personal data to publish matters of public interest while safeguarding individual dignity.
  • Legal obligation: Compliance with court orders, RTI appeals, regulatory directives, or law-enforcement requests that meet due process.
  • Public record: Information already lawfully available to the public (e.g., gazette notices, audit reports) is processed without additional consent as permitted by Section 7 of the Privacy Act 2018.

4. Use of Personal Data

We use personal data to verify claims, publish investigative reports, respond to correction requests, maintain security, and comply with Nepali law. We do not sell or monetise personal data.

Editorial Integrity

Source identities are compartmentalised. Access to grievance submissions and whistleblower tips is restricted to assigned editors bound by confidentiality contracts.

Security Measures

Data is encrypted in transit (TLS 1.2+) and stored securely. Sensitive evidence is moved to offline storage compliant with Section 12 of the Privacy Act 2018.

5. Corrections & Right of Reply

Parties asserting inaccuracies may invoke the grievance protocol. Upon verified evidence, we will update, annotate, or retract material in line with the Working Journalist Act and Press Council directives.

6. Data Retention

Personal data is retained only as long as necessary to fulfil the investigative purpose or legal obligation. Evidence relating to ongoing legal proceedings may be kept until final disposition.

7. Cross-Border Transfers

If we collaborate with overseas partners, data is pseudonymised and transferred under written agreements that meet Article 28 of the Constitution and Section 10 of the Privacy Act. Explicit consent is obtained when required.

8. Individual Rights

  • Access: Request a copy of personal data we hold about you.
  • Rectification: Ask us to correct or update inaccurate information.
  • Deletion: Request erasure where processing is unlawful or no longer necessary.
  • Restriction: Seek temporary suspension of processing during dispute resolution.

To exercise these rights, email [email protected] or submit a request through our grievance portal. We respond within 30 days, as required by the Privacy Act 2018.

9. Disclosures to Authorities

We only disclose personal data to Nepali authorities upon receipt of a lawful order issued by a competent court or regulatory body. We notify affected parties unless prohibited by the order itself.

10. Changes to this Policy

Any material amendments will be published with a revised "Effective" date and a summary of key changes. Continuation of services after updates constitutes acknowledgment of the revision.

11. Contact & Escalation

We are finalising our data protection office. Until then, please use the grievance form for privacy requests. Escalation details will be published here once designated officials are appointed.