Public website notice

Privacy policy

This draft describes the limited data handling of this informational public website. It is not a merchant agreement or a payment-service privacy notice.

Draft pending legal/privacy approval.

The named controller, retention periods, cross-border processing facts, and privacy contact must be completed and approved before external publication.

Scope

This policy applies to the public FenFen Pay Nepal website at fen.upipay.com.cn. It does not apply to third-party sites, merchant agreements, a future payment product, or any separate authenticated application that may have its own privacy notice.

Information this website may process

As an informational site without a public form, account registration, checkout, QR payment, or analytics tool, the expected information processing is limited to:

  • ordinary server and security logs, such as IP address, request time, requested page, user-agent information, and diagnostic/error information;
  • information a person chooses to include when contacting an official email address listed on the website; and
  • information required to investigate abuse, protect the site, or comply with a valid legal obligation.

Purpose and basis

Information is processed only as needed to operate and secure the public site, respond to a direct inquiry, prevent abuse, diagnose faults, and meet applicable legal obligations. The applicable legal basis and Nepal-specific privacy wording must be confirmed by the authorized legal/privacy owner before publication.

Cookies and third parties

This initial site is designed without non-essential cookies, audience analytics, advertising tags, embedded maps, external fonts, social widgets, or third-party scripts. If these practices change, this policy and any required consent mechanism must be reviewed and updated before deployment.

Retention, access, and sharing

Insert approved log-retention criteria, email-retention criteria, access-control information, service-provider categories, and any cross-border storage/processing details here. Do not state a retention period, encryption standard, certification, or regulatory compliance claim unless it is verified and approved.

Privacy requests

Insert the approved privacy contact email, company legal name, registered address, and request-handling process before publication.

Updates

We may update this policy when website practices or applicable requirements change. Material changes will be posted on this page with a revised effective date.