Jurix Tax Accounting and Legal Hub Pvt. Ltd. (“Jurix Hub”) upholds stringent data privacy benchmarks. This policy outlines how we protect personal and corporate data in compliance with the European Union General Data Protection Regulation (EU GDPR) for international clients, alongside Nepal’s domestic Individual Privacy Act, 2075 (2018).

1. Principles of Data Processing

Whether handling cross-border corporate retainers or domestic matters in Nepal, we process all client data in strict adherence to core data protection principles:

• Lawfulness, Fairness & Transparency: Data is collected solely with informed consent or under legitimate legal/contractual mandates.
• Purpose Limitation: Information is processed strictly for the legal, tax, or corporate services requested.
• Data Minimization: We collect only the data strictly necessary for fulfilling legal retainers and statutory compliance.
• Accuracy & Storage Limitation: Data is maintained accurately and retained only for periods required by the Nepal Bar Council, IRD audit rules, and statutory limitation periods.
• Integrity & Confidentiality: Data is secured against unauthorized processing, loss, damage, or unauthorized disclosure.

2. Lawful Basis for Processing

Under GDPR (Article 6) and Nepali privacy standards, we process your personal and institutional data under the following legal bases:

• Contractual Obligation: To draft agreements, execute statutory filings, manage tax compliance, and fulfill engagement contracts.
• Legal Compliance: To comply with mandatory statutory audits, IRD reporting, court procedures, and anti-money laundering (AML/KYC) obligations.
• Legitimate Interests: To maintain secure digital infrastructure, verify client identities, and prevent legal conflicts of interest.
• Explicit Consent: Where you have opted to receive regulatory circulars or newsletters.

3. Your Data Subject Rights (GDPR & Nepal Privacy Act)

Depending on your jurisdiction, you are entitled to the following enforceable rights regarding your data:

• Right of Access: Request a copy of the personal information we hold regarding your file.
• Right to Rectification: Request correction of inaccurate, incomplete, or outdated personal or corporate records.
• Right to Erasure (“Right to be Forgotten”): Request deletion of data where its retention is no longer required by statutory record-keeping laws or active litigation rules.
• Right to Restrict Processing: Request suspension of data processing under specific legal conditions.
• Right to Data Portability: Request transmission of your digital data in a structured, machine-readable format.
• Right to Object: Object to processing carried out for direct communication or legitimate interests.

4. International Data Transfers & Cross-Border Security

For cross-border advisory, Foreign Direct Investment (FDI) applications, or international corporate structuring, data transmitted across jurisdictions is protected using industry-standard encryption protocols and standard contractual clauses to ensure international data parity.

5. Advocate-Client Privilege & Statutory Disclosure Exemptions

Nothing in this policy limits the protections granted under advocate-client legal privilege recognized by the legal system of Nepal. Records subject to legal professional secrecy remain strictly confidential and will not be disclosed except where mandated by a competent court of law.

Data Protection & Compliance Contact

To submit a data access request, exercise GDPR/privacy rights, or inquire about our data security architecture:

Jurix Tax Accounting and Legal Hub Pvt. Ltd.
Attn: Data Privacy & Compliance Officer
Nayabazar, Balaju, Kathmandu 44600, Nepal
Phone: +977 984-3299609 | Email: info@jurixhub.com