Who runs this
Top Rated Nepal is an independent ranking site for businesses in Nepal. It is operated by Bhuwan Kshetri. This policy covers this site only. It does not cover any other product or website he runs.
For privacy questions, a correction, or a request to delete something you sent us, use the for businesses page and say that it is a privacy request, or write to hbdigitalpresence@gmail.com.
If we cannot resolve it, the Individual Privacy Act, 2075 (2018) lets an aggrieved person apply to the District Court.
What this site publishes about businesses
Ranking pages are built from public data taken from Google's Places service:
- business name
- address
- public phone and map links where Google already shows them
- average star rating and review count
- a small number of recent review snippets
How those fields become a score is on how we rank. No business pays to be added, removed, or ranked higher.
That data is public on Google. Some of it still identifies people: a sole trader, a named clinician, a reviewer who signed a comment. We did not collect it from those people. We do not add private facts found elsewhere. We do not use review text to contact reviewers.
Review text on a physiotherapy listing can mention treatment. We do not ask for health details in order to publish a ranking.
Google's rules for Places data also apply. Use of the ranking pages is subject to Google's Privacy Policy and the Google Maps / Places terms. We do not own Google's data. Most Places fields are refreshed on a schedule rather than kept as a permanent private file. We may store Google place IDs so the same listing can be fetched again.
If something about a listing is wrong, use the for businesses page or hbdigitalpresence@gmail.com. If the error sits in Google's own profile, it has to be fixed there. We will say which of the two it is.
What you send us
There is no public sign-up and no account system today.
The one form on this site is on for businesses. It asks for:
- a business name
- a way to reach you
- what you are asking for (the free score report, help with paid work, or not sure yet)
- anything you add in the note
That is used only to reply to that request: a score breakdown, a reply about the work, or a correction. It is not added to a marketing list. It is not sold. It is not used to change a ranking.
Submitting the form is consent to that use, for that purpose, for the period set out below.
Do not send citizenship numbers, passwords, or a patient's medical file. If a note includes health details, we use them only to answer you and then apply the same retention rule.
If you message us on WhatsApp
Some replies continue on WhatsApp. If you use it, WhatsApp handles that conversation under its own privacy policy, not this one. The message reaches an operator device the same way any WhatsApp message does.
What you send is kept only to answer you. It is not added to a marketing list and it is not shared with anyone except the tools listed below that carry the message.
Clicks on Map, Call and WhatsApp
When somebody taps Map, Call or WhatsApp on a ranking card, the site records that a tap happened, which business it was on, which button it was, and the time. That is the entire record. No IP address, no device or browser details, no cookie, and no identifier that could tie one tap to another or to you.
The point is to know whether these pages send anybody to the businesses on them. Who you are is not part of the question.
Tapping Call opens the phone dialler. Tapping WhatsApp opens a chat with the business. Neither reports back whether you called, what was said, or whether you booked.
The WhatsApp button opens a draft that says you found the business here. You can edit or delete that line before sending.
Hosting logs
Like any website, the host (Vercel) keeps standard server logs for requests it serves — IP address, browser, and timing — to operate and secure the infrastructure. That is ordinary hosting, not a tracker we added. Beyond the click counting above, this site does not run an analytics product, advertising pixels, or third-party trackers. If that changes, this page changes with it.
Cookies
No cookies are set for tracking or advertising.
The site loads a Supabase client library in preparation for a future business-owner login. Supabase's session-cookie mechanism will be used once that login is real, only to keep a signed-in owner signed in. No login exists yet, so no session cookie is being used to identify you today.
Who else sees data
Three outside services sit behind this site:
| Job | What they see | |
|---|---|---|
| Source of the public listing and review fields on ranking pages | What Google already holds about the place | |
| Vercel | Hosting | Ordinary server logs |
| Supabase | Database for this site only, in its own project, separate from any other product run by the same person | What you type into the enquiry form; later, claim and login data when that flow ships |
| WhatsApp / Meta | Only if you message us there | The chat you start |
Vercel, Google and Supabase process data outside Nepal. Sending the form means your message is stored and read outside Nepal in order to answer you.
We do not sell data, to anyone, ever.
How long we keep it
- Enquiries and reply threads: until the request is finished, then up to 12 months in case you write back about the same listing. Then deleted from the mailbox and database.
- Click records: each tap is one row — the business, the button, and the time — with nothing that identifies who tapped it. There is no automatic deletion for these yet; this line will state a schedule once one exists.
- Vercel logs: for whatever period Vercel retains them for security.
- Google listing fields: overwritten on each refresh. Place IDs may be kept so a listing can be fetched again.
Your requests
You can ask:
- what we hold that came from you
- that we correct it
- that we delete an enquiry you sent
Use the for businesses page, or write to hbdigitalpresence@gmail.com, and name the business and the contact you used. We will not pretend we can erase a Google review or a public Google listing.
Under the Individual Privacy Act, 2075, personal information we collect from you is used only for the purpose you were told, and you may ask for correction of what we hold.
Listing claims (not live)
If an owner later claims a listing, whatever they submit to prove they run it (for example a phone or WhatsApp number) will be used only to check that claim. That flow is not live. This section will be rewritten with the specifics before it turns on, including how long proof is kept.
Changes to this policy
This site is early and still being built, phase by phase, as described on the about page. As real accounts, a real claim flow, and real data storage come online, this policy will be updated to match what is actually true at the time.