Privacy Policy

*Effective Date: August 10, 2026*
*Last Updated: August 10, 2026*

Kantipur Management Private Limited (“KMPL Global,” “KMPL,” “we,” “us,” or “our”) respects your privacy and is committed to protecting the personal information and confidential data entrusted to us.

KMPL Global is a Business Process Outsourcing (BPO), staffing, recruitment, healthcare outsourcing, technology, and managed services company. Through our website *[www.kmplglobal.com](http://www.kmplglobal.com)*, our services, recruitment activities, client engagements, and other business interactions, we may collect and process personal, professional, business, and other information.

This Privacy Policy explains how we collect, use, disclose, store, protect, and otherwise process information relating to visitors, customers, clients, candidates, employees, business partners, vendors, and other individuals who interact with KMPL Global.

By accessing or using our website or services, you acknowledge that you have read and understood this Privacy Policy.

1. Scope of This Privacy Policy

This Privacy Policy applies to information collected through:

•⁠ ⁠Our website, [www.kmplglobal.com](http://www.kmplglobal.com);
•⁠ ⁠Contact forms, inquiry forms, and online applications;
•⁠ ⁠Recruitment and career applications;
•⁠ ⁠Client and prospective-client communications;
•⁠ ⁠BPO and outsourcing service engagements;
•⁠ ⁠Staffing, recruitment, payroll, and Employer of Record (EOR) services;
•⁠ ⁠Healthcare outsourcing and administrative support services;
•⁠ ⁠Customer support and contact center operations;
•⁠ ⁠Email, telephone, messaging, and other business communications;
•⁠ ⁠Events, meetings, business proposals, and other interactions with KMPL Global.

This Privacy Policy does not necessarily apply to information that our clients independently collect or process through their own systems. Where KMPL processes information on behalf of a client, the applicable client agreement, data-processing terms, and applicable law may determine how that information is handled.

2. Information We Collect

Depending on your relationship with KMPL Global, we may collect the following categories of information.

2.1 Personal and Contact Information

We may collect:

•⁠ ⁠Full name;
•⁠ ⁠Email address;
•⁠ ⁠Telephone or mobile number;
•⁠ ⁠Mailing or business address;
•⁠ ⁠Company name;
•⁠ ⁠Job title or designation;
•⁠ ⁠Professional profile information;
•⁠ ⁠Communication preferences.

2.2 Business and Client Information

When you contact us or engage our services, we may collect information relating to:

•⁠ ⁠Your organization and business operations;
•⁠ ⁠Outsourcing requirements;
•⁠ ⁠Service requirements and specifications;
•⁠ ⁠Project information;
•⁠ ⁠Workforce requirements;
•⁠ ⁠Business processes;
•⁠ ⁠Operational information;
•⁠ ⁠Contract and commercial information;
•⁠ ⁠Communication and correspondence;
•⁠ ⁠Information required to deliver contracted services.

2.3 Recruitment and Candidate Information

If you apply for employment or recruitment opportunities through KMPL Global, we may collect:

•⁠ ⁠Name and contact information;
•⁠ ⁠Resume/CV;
•⁠ ⁠Employment history;
•⁠ ⁠Educational qualifications;
•⁠ ⁠Professional certifications and licenses;
•⁠ ⁠Skills and experience;
•⁠ ⁠References;
•⁠ ⁠Interview information;
•⁠ ⁠Work authorization information;
•⁠ ⁠Compensation expectations;
•⁠ ⁠Availability;
•⁠ ⁠Other information voluntarily provided during the recruitment process.

Where required by applicable law or the relevant recruitment process, we may also collect information necessary for background verification, credential verification, onboarding, payroll, or employment administration.

2.4 Employee and Workforce Information

For employees, contractors, consultants, and assigned personnel, we may process information necessary for:

•⁠ ⁠Recruitment and onboarding;
•⁠ ⁠Employment administration;
•⁠ ⁠Payroll and benefits;
•⁠ ⁠Attendance and workforce management;
•⁠ ⁠Performance management;
•⁠ ⁠Training;
•⁠ ⁠Compliance and regulatory requirements;
•⁠ ⁠Access management;
•⁠ ⁠Internal security;
•⁠ ⁠Client assignment and service delivery.

2.5 Website and Technical Information

When you visit our website, certain information may be collected automatically, including:

•⁠ ⁠IP address;
•⁠ ⁠Browser type and version;
•⁠ ⁠Device type;
•⁠ ⁠Operating system;
•⁠ ⁠Referring website;
•⁠ ⁠Pages visited;
•⁠ ⁠Date and time of access;
•⁠ ⁠Website usage information;
•⁠ ⁠Approximate geographic information;
•⁠ ⁠Cookies and similar technologies.

We may use this information for website functionality, security, analytics, performance monitoring, and improvement of our services.

3. Information We Receive From Third Parties

We may receive information from third parties where legally permitted, including:

•⁠ ⁠Clients and business partners;
•⁠ ⁠Recruitment platforms and job boards;
•⁠ ⁠Professional networking platforms;
•⁠ ⁠References;
•⁠ ⁠Service providers;
•⁠ ⁠Background verification providers;
•⁠ ⁠Publicly available professional sources;
•⁠ ⁠Government or regulatory authorities;
•⁠ ⁠Technology and software providers.

We may combine information received from third parties with information collected directly from you where appropriate and legally permitted.

4. How We Use Personal Information

We may use personal information for legitimate business purposes, including:

•⁠ ⁠Providing and managing our BPO and outsourcing services;
•⁠ ⁠Responding to inquiries and service requests;
•⁠ ⁠Preparing proposals, quotations, and contracts;
•⁠ ⁠Managing client relationships;
•⁠ ⁠Delivering staffing and recruitment services;
•⁠ ⁠Processing employment applications;
•⁠ ⁠Managing employee and contractor relationships;
•⁠ ⁠Providing payroll and workforce-management services;
•⁠ ⁠Providing healthcare administrative and support services where contracted;
•⁠ ⁠Managing customer and contact center operations;
•⁠ ⁠Performing accounting, reporting, and administrative functions;
•⁠ ⁠Improving our website, services, and customer experience;
•⁠ ⁠Conducting quality assurance and operational monitoring;
•⁠ ⁠Preventing fraud, misuse, unauthorized access, and security incidents;
•⁠ ⁠Protecting our employees, clients, systems, and business assets;
•⁠ ⁠Complying with applicable laws, regulations, contractual obligations, and legal processes;
•⁠ ⁠Communicating service updates, business information, and relevant marketing communications where permitted;
•⁠ ⁠Performing other purposes disclosed at the time information is collected or otherwise permitted by law.

5. Legal Basis for Processing

Where applicable, KMPL Global may process personal information based on one or more of the following grounds:

•⁠ ⁠Your consent;
•⁠ ⁠Performance of a contract or steps taken before entering into a contract;
•⁠ ⁠Compliance with legal or regulatory obligations;
•⁠ ⁠Protection of legitimate business interests;
•⁠ ⁠Protection of the rights, safety, security, and property of KMPL Global, our clients, employees, or other individuals;
•⁠ ⁠Other lawful grounds permitted under applicable privacy and data-protection laws.

Where processing is based on consent, you may have the right to withdraw that consent, subject to applicable legal or contractual limitations.

6. Cookies and Similar Technologies

Our website may use cookies, pixels, web beacons, analytics tools, and similar technologies to improve website functionality and user experience.

These technologies may help us:

•⁠ ⁠Remember user preferences;
•⁠ ⁠Understand website traffic and usage;
•⁠ ⁠Monitor website performance;
•⁠ ⁠Improve website functionality;
•⁠ ⁠Maintain website security;
•⁠ ⁠Analyze marketing effectiveness.

You may control or disable cookies through your browser settings. However, disabling certain cookies may affect the functionality of some parts of our website.

7. Sharing and Disclosure of Information

KMPL Global does not sell personal information for monetary consideration.

We may disclose information where reasonably necessary for legitimate business purposes, including to:

Service Providers

We may use trusted third-party providers for services such as:

•⁠ ⁠Cloud hosting;
•⁠ ⁠Website hosting;
•⁠ ⁠IT and cybersecurity;
•⁠ ⁠Recruitment and applicant tracking;
•⁠ ⁠Payroll and HR systems;
•⁠ ⁠Communication services;
•⁠ ⁠Customer relationship management;
•⁠ ⁠Analytics;
•⁠ ⁠Accounting and financial services;
•⁠ ⁠Legal and professional services.

These providers may access information only to the extent necessary to provide services to KMPL Global and are expected to maintain appropriate confidentiality and security safeguards.

Clients and Business Partners

Where necessary to provide contracted services, we may share relevant information with clients, prospective employers, business partners, or other authorized parties.

Legal and Regulatory Authorities

We may disclose information when required or permitted by applicable law, regulation, court order, legal process, or governmental request.

Corporate Transactions

Information may be transferred as part of a merger, acquisition, restructuring, financing, sale of assets, or similar corporate transaction, subject to applicable legal requirements.

8. BPO and Client Data Processing

As a BPO and outsourcing service provider, KMPL Global may process information on behalf of its clients.

Depending on the service provided, such information may include:

•⁠ ⁠Customer information;
•⁠ ⁠Employee information;
•⁠ ⁠Business records;
•⁠ ⁠Contact information;
•⁠ ⁠Transaction information;
•⁠ ⁠Operational data;
•⁠ ⁠Financial or accounting information;
•⁠ ⁠Recruitment information;
•⁠ ⁠Healthcare administrative information;
•⁠ ⁠Other information defined by the applicable client engagement.

Where KMPL processes information on behalf of a client, we generally process such information according to the client’s documented instructions, contractual requirements, applicable law, and agreed security controls.

Our clients may remain the data controller or business owner of information provided to us, depending on the nature of the engagement.

9. Healthcare Information

Certain KMPL Global services may involve healthcare-related administrative, billing, coding, documentation, customer support, or other business-process activities.

Where healthcare information is processed on behalf of a client, KMPL Global applies contractual, organizational, technical, and security measures appropriate to the applicable engagement and legal requirements.

Where applicable, healthcare information may be processed under contractual data-protection arrangements, confidentiality obligations, and relevant healthcare privacy and security requirements.

KMPL Global does not use healthcare information for purposes unrelated to the applicable service engagement unless authorized or legally permitted.

10. International Data Transfers

Because KMPL Global provides outsourcing and international business services, information may be accessed, processed, or transferred across different countries where necessary to provide services, manage operations, or support our clients.

Where required by applicable law, KMPL Global will implement appropriate contractual, organizational, or technical safeguards for international data transfers.

11. Data Security

KMPL Global takes information security seriously and maintains organizational, technical, and administrative safeguards designed to protect information against unauthorized access, disclosure, alteration, loss, misuse, or destruction.

Our security practices may include:

•⁠ ⁠Access controls and role-based permissions;
•⁠ ⁠Multi-factor authentication where appropriate;
•⁠ ⁠Data encryption and secure transmission;
•⁠ ⁠Network and endpoint security;
•⁠ ⁠Security monitoring;
•⁠ ⁠Backup and recovery controls;
•⁠ ⁠Employee security awareness and training;
•⁠ ⁠Confidentiality obligations;
•⁠ ⁠Secure data handling procedures;
•⁠ ⁠Incident response procedures;
•⁠ ⁠Vendor and third-party security controls;
•⁠ ⁠Physical security measures;
•⁠ ⁠Periodic security assessments and improvements.

KMPL Global maintains information-security practices aligned with applicable contractual requirements and recognized information-security principles.

However, no method of electronic transmission, storage, or processing can be guaranteed to be completely secure.

12. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including:

•⁠ ⁠Providing services;
•⁠ ⁠Maintaining business and contractual records;
•⁠ ⁠Recruitment and employment administration;
•⁠ ⁠Meeting legal and regulatory requirements;
•⁠ ⁠Resolving disputes;
•⁠ ⁠Enforcing agreements;
•⁠ ⁠Maintaining security and audit records;
•⁠ ⁠Protecting legitimate business interests.

When information is no longer required, we may securely delete, anonymize, or otherwise dispose of it in accordance with our policies and applicable legal requirements.

13. Your Privacy Rights

Depending on your location and applicable law, you may have rights relating to your personal information, including the right to:

•⁠ ⁠Request access to personal information we hold about you;
•⁠ ⁠Request correction of inaccurate or incomplete information;
•⁠ ⁠Request deletion of personal information where legally permitted;
•⁠ ⁠Request restriction of certain processing;
•⁠ ⁠Object to certain processing;
•⁠ ⁠Withdraw consent where processing is based on consent;
•⁠ ⁠Request information about how your personal information is processed;
•⁠ ⁠Request portability of certain information where applicable;
•⁠ ⁠Lodge a complaint with an appropriate privacy or data-protection authority.

These rights may be subject to legal, contractual, security, and other applicable limitations.

To exercise applicable rights, please contact us using the details provided in the “Contact Us” section.

14. Marketing Communications

Where permitted by law, KMPL Global may send information about our services, solutions, company updates, events, or other relevant business communications.

You may opt out of marketing communications by using the unsubscribe option included in the communication or by contacting us directly.

Opting out of marketing communications will not necessarily prevent us from sending important service, contractual, security, or administrative communications.

15. Third-Party Websites and Services

Our website may contain links to third-party websites, platforms, social-media pages, or services.

KMPL Global is not responsible for the privacy practices, security, or content of third-party websites.

We encourage users to review the privacy policies of third-party websites before providing personal information.

16. Children’s Privacy

Our website and services are primarily intended for businesses, professionals, job seekers, employees, and other adults.

We do not knowingly collect personal information from children where prohibited by applicable law.

If you believe that a child has provided personal information to us without appropriate authorization, please contact us so that we can take appropriate action.

17. Confidentiality of Client Information

As an outsourcing service provider, KMPL Global may receive confidential information belonging to clients and their customers.

We treat confidential client information in accordance with applicable contractual obligations, confidentiality agreements, internal policies, and applicable law.

Client information is not used for purposes unrelated to the applicable business engagement except where authorized or legally required.

18. Data Breach and Security Incidents

KMPL Global maintains procedures for identifying, assessing, containing, investigating, and responding to suspected security incidents.

Where required by applicable law or contractual obligations, KMPL Global will provide appropriate notifications to affected clients, individuals, regulators, or other relevant parties within the applicable timeframe.

19. Changes to This Privacy Policy

KMPL Global may update this Privacy Policy periodically to reflect:

•⁠ ⁠Changes in our services;
•⁠ ⁠Changes in technology;
•⁠ ⁠Changes in applicable laws or regulations;
•⁠ ⁠Changes in our privacy and security practices;
•⁠ ⁠Changes in business operations.

When we make material changes, we may update the “Last Updated” date and, where appropriate, provide additional notice.

We encourage you to review this Privacy Policy periodically.

20. Contact Us

If you have questions, concerns, requests, or complaints regarding this Privacy Policy or the way KMPL Global handles personal information, please contact us.

*Kantipur Management Private Limited (KMPL Global)*
*Website:* [www.kmplglobal.com](http://www.kmplglobal.com)
*Location:* Kathmandu, Nepal
*Email:* [info@kmplglobal.com](mailto:info@kmplglobal.com)

For privacy-related requests, please include sufficient information to help us identify your request and respond appropriately.

21. Acceptance of This Privacy Policy

By accessing or using [www.kmplglobal.com](http://www.kmplglobal.com) or interacting with KMPL Global through our services, you acknowledge that you have read and understood this Privacy Policy.

Where applicable law requires consent or another legal basis for processing personal information, KMPL Global will obtain or rely upon the appropriate legal basis before processing such information.

©️ 2026 Kantipur Management Private Limited (KMPL Global). All Rights Reserved.