PRIVACY POLICY

1. Overview & Commitment

MuscleWorks Supplements (“we,” “our,” or “us”) operates the website https://muscleworksnepal.com and the physical retail store located at Golfutar Main Road, Budha-Nilkantha, Kathmandu, Nepal. We respect your personal privacy and are committed to protecting the personal information you share with us through our website, WhatsApp hotline, phone calls, and in-store consultations.

2. Information We Collect

When you browse our catalog or submit an inquiry, we may collect:

• Contact Details: Full name, Nepal mobile phone number (+977), and optional email address.
• Delivery Information: Delivery city, recipient address, and landmark notes in Kathmandu Valley or nationwide courier locations.
• Inquiry & Order Preferences: Supplement preferences, requested flavors, container sizes, and questions submitted via our forms or WhatsApp links.
• Technical Device Data: Anonymized IP addresses for rate limiting and spam defense, browser user agent, and basic analytics cookies.

3. How We Use Your Information

Your information is used strictly to:

• Fulfill customer inquiries, verify stock availability, and coordinate direct WhatsApp / phone orders.
• Dispatch delivery riders within Kathmandu, Lalitpur, and Bhaktapur, or arrange nationwide courier delivery.
• Verify product authenticity hologram codes upon customer request.
• Prevent automated bot spam, protect server infrastructure, and enforce rate limits.

We NEVER sell, rent, trade, or share your personal phone number or email with third-party marketing companies.

4. WhatsApp & Third-Party Services

When you initiate an inquiry via WhatsApp, communications take place across WhatsApp's end-to-end encrypted messaging infrastructure. We do not store credit card or payment credentials on our web servers. Payments in Nepal are settled upon Cash on Delivery (COD) or via direct QR transfer (eSewa / Khalti / Fonepay) during dispatch.

5. Data Security & Retention

Inquiry submissions are transmitted over encrypted HTTPS (TLS 1.3). We employ honeypot traps, timing trap validation, IP extraction filters, and automated rate limiting to protect our customer database against malicious access.

6. Your Privacy Rights & Contact

You have the right to request access to, correction of, or deletion of your contact records at any time. For privacy inquiries or data removal, please contact: