Principles
Data is retained for a defined business, contractual, accounting, tax, security or legal purpose and securely deleted or anonymized when no longer required.
Operational schedule
- Unqualified website inquiries: normally up to 24 months.
- Unsuccessful course or career applications: normally up to 24 months unless consent or law supports longer retention.
- Customer contracts, invoices, journals and tax evidence: retained for the legally required Nepal period and any active dispute period.
- Security and application logs: normally 30–365 days according to risk and operational need.
- Backups: rotated under the documented backup schedule and protected from ordinary user access.
Legal hold
Deletion is suspended for records required for investigation, audit, litigation or regulatory duty.