Information Technology and Cyber Security Compliance

This notice describes, on a generalised basis, how NepaleseWorker.com is designed and operated to align with the information technology and cyber security laws that apply to it — principally India's, since the operator is an Indian company, together with Nepal's for users and listed agencies there. It applies to every visitor, employer, and agency user of the platform, alongside our Privacy Policy, Terms and Conditions, and Marketplace Disclaimer.

Green Outdoors Global Pvt Ltd, a company incorporated in India, operates NepaleseWorker.com with regard to, among other law that may apply:

• India's Information Technology Act, 2000, and the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, including their grievance-redressal requirements (see our Grievance and Correction Policy).
• The Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023 as its provisions come into force — see our Privacy Policy.
• The CERT-In Directions of 28 April 2022 under section 70B of the IT Act, including the requirement to report specified cyber security incidents to CERT-In within six hours of becoming aware of them.

For users in Nepal and the Nepal-based agencies listed on the platform, the following Nepali law is also relevant:

• The Electronic Transaction Act, 2063 (2008) — Nepal's principal cyber law, which governs the legal recognition of electronic records and signatures and defines cyber offences.
• The Privacy Act, 2075 (2018) and its regulations — governing the collection and handling of personal information; see our Privacy Policy for the specifics of what we collect and why.
• The Foreign Employment Act, 2064 (2007) and Foreign Employment Rules — governing licensing of foreign-employment and recruitment agencies; see Marketplace Disclaimer §6 for how this applies to agencies listed on this platform.
• Any successor or amending legislation, and directives issued by Nepal's information-technology and telecommunications regulators from time to time.

Because employers, agencies, and other users of this platform are located both inside and outside Nepal, more than one jurisdiction's cyber and data law may separately apply to a given interaction — see §10 below.

Under Nepal's Electronic Transaction Act, records and communications created, submitted, or stored electronically carry the same legal validity as their paper equivalents (as they also do under India's Information Technology Act, 2000), unless a specific law requires physical form. Accordingly, agency profile submissions, claims, manpower requirements, responses, and other information you submit through this platform are treated as valid electronic records and communications between the parties involved.

NepaleseWorker.com lists businesses across the following categories. This list reflects the platform's actual registration form and is kept current with it:

Licensed recruitment

• Foreign Employment Agency
• Recruitment Agency
• Manpower Company
• Sub-agent / Local Representative

Training

• PDOT Provider
• Skill / Vocational Training
• Language Training
• Trade Test Centre

Support services

• Medical Examination Centre
• Insurance Provider
• Travel & Ticketing
• Visa / Document Consultancy

Other

• Education / Study Abroad
• Employer / Foreign Principal
• Other

The following is general awareness information, not a legal determination for any specific business — each listed business is solely responsible for confirming and maintaining whatever licence, registration, or regulatory approval its own category and activity requires under Nepali law.

Businesses in the "Licensed recruitment" group (Foreign Employment Agency, Recruitment Agency, Manpower Company, Sub-agent / Local Representative) are generally the categories most directly subject to Department of Foreign Employment (DoFE) licensing under the Foreign Employment Act, 2064. Businesses in the "Training," "Support services," and "Other" groups (for example PDOT providers, medical examination centres, insurance providers, travel and ticketing agencies, or education consultancies) typically fall — where regulated at all — under separate, sector-specific regulators outside DoFE's scope (for example health-facility standards, insurance regulation, or tourism/travel regulation). NepaleseWorker.com does not independently verify which regulatory regime applies to a given listed business; see Verification Process for what our review actually covers.

We apply the following measures across the platform:

• Encrypted transport (HTTPS/TLS) for all traffic to and from the platform.
• Security response headers on every page, including a Content-Security-Policy that restricts which external origins may load scripts, render frames, or receive connections from the platform.
• Account passwords are stored hashed, never in plain text.
• Role-based access control separating agency owner, agency staff, employer, and internal administrative permissions.
• Rate limiting on registration, login, password reset, and public submission forms (enquiries, requirements, listings, claims) to reduce automated abuse.
• A bot-verification challenge and hidden honeypot fields on public forms, to deter automated and fraudulent submissions.
• Verification documents are stored on private, non-public storage rather than a publicly accessible path.
• An internal audit log records administrative actions on agency and claim records — what changed, by whom, and when.

You are responsible for keeping your account credentials confidential, providing accurate registration information, and notifying us immediately at office@nepaleseworker.com if you suspect unauthorised access to your account — consistent with Terms and Conditions §3. Do not attempt to bypass, disable, or interfere with the protections described in §6, consistent with Terms §5 (Acceptable Use).

Consistent with India's Information Technology Act, 2000, Nepal's Electronic Transaction Act, and our own Acceptable Use terms, you may not: gain or attempt to gain unauthorised access to any account, system, or data on this platform; intercept, alter, or destroy electronic records or communications without authorisation; introduce malware, viruses, or other harmful code; publish or transmit content that is unlawful under applicable law; or use automated means to scrape, harvest, or bulk-extract platform data beyond ordinary browsing. Conduct of this kind may result in account suspension or termination and, where it appears to constitute a cyber offence, may be reported to the relevant Indian or Nepali authorities.

If you believe your account has been compromised, or you have discovered a security vulnerability on this platform, contact us immediately at office@nepaleseworker.com. Reports are handled under our Grievance and Correction Policy, including its response-time targets. Where an incident falls within the CERT-In Directions, we report it to CERT-In as those directions require.

This notice describes Green Outdoors Global Pvt Ltd's approach as the India-based operator of this platform. It does not attempt to catalogue every other jurisdiction's cyber or data-protection requirements that may separately apply to a user located outside India. See our Privacy Policy for how international data transfer is handled.

This notice works alongside, and does not replace, our Privacy Policy (personal data handling), Terms and Conditions (account and acceptable-use obligations), Marketplace Disclaimer (licensing responsibility by business category), and Cookie Policy.

We may update this notice as the platform's features or the applicable legal framework change. Material changes will be reflected in the "Last updated" date above.

Questions about this notice can be sent to office@nepaleseworker.com.