Legal

Data Subject Rights Policy

Yukta Applications

Effective Date: April 2026

1. Objective

The purpose of this document is to determine the protocol to be followed in order to comply with the rights of access, rectification, erasure, objection, restriction of processing, portability, and objection to automated decision-making of personal data held in the files owned by Yukta Applications.

Nepal’s Individual Privacy Act, 2018 grants individuals clear rights regarding their personal data. This Policy brings these rights closer to our users and stakeholders by providing a simple, transparent, and effective procedure so that every data subject (students, parents, teachers, staff, and administrators) can easily exercise their rights concerning the personal data provided to Yukta Applications and our platform YEDU.

2. Terms and Definitions

Data Subject / Affected Person:

The individual to whom the personal data belongs (e.g., student, parent, teacher, or staff member).

Personal Data:

Any information relating to an identified or identifiable natural person, including name, email, phone, academic records, attendance, grades, unique lifelong Student ID, and performance analytics.

Processing:

Any operation performed on personal data, whether automated or not, such as collection, recording, storage, use, disclosure, or deletion.

Controller:

Yukta Applications, which decides the purpose and means of processing personal data.

Right of Access:

The right to obtain confirmation whether your personal data is being processed and to receive a copy of that data.

Right to Rectification:

The right to have inaccurate or incomplete personal data corrected without undue delay.

Right to Erasure / Right to be Forgotten:

The right to request deletion of your personal data when it is no longer necessary or when consent is withdrawn.

Right to Object:

The right to object to the processing of your personal data for specific purposes (e.g., direct marketing).

Right to Restriction of Processing:

The right to request that processing of your data be temporarily or permanently limited.

Right to Data Portability:

The right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit it to another controller.

Right to Object to Automated Decision-Making:

The right not to be subject to a decision based solely on automated processing, including profiling, that produces legal effects or similarly affects you.

Applicant:

The data subject (or their legal representative) who submits a request to exercise any of the above rights.

Description of Data Subject Rights

Any person shall have the right to request and obtain, free of charge, information on the personal data we process, its origin, and any disclosures made. Additionally, the data subject may request the rectification, erasure, objection, restriction, or portability of their personal data.

All rights will be exercised by sending a request to info@yukta.app. No fee is required to exercise these rights.

Right of Access

You have the right to obtain confirmation from us as to whether your personal data is being processed and, if so, to receive a copy of that data in a commonly used electronic format.

Right to Rectification

You have the right to have inaccurate personal data concerning you corrected without undue delay. You also have the right to have incomplete personal data completed.

Right to Erasure (Right to be Forgotten)

You have the right to request the deletion of your personal data without undue delay when:

  • The data is no longer necessary for the purposes for which it was collected.
  • You withdraw your consent and there is no other legal basis for processing.
  • The data has been processed unlawfully.
  • Deletion is required to comply with a legal obligation under Nepali law.

Right to Object

You have the right to object at any time to the processing of your personal data, especially for direct marketing or profiling purposes.

Right to Restriction of Processing

You have the right to request restriction of processing when:

  • You contest the accuracy of your personal data.
  • The processing is unlawful and you prefer restriction over erasure.
  • We no longer need the data, but you require it for the establishment, exercise, or defence of legal claims.
  • You have objected to processing, pending verification of our legitimate grounds.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another service provider without hindrance from us (where processing is carried out by automated means).

Right to Object to Automated Decision-Making

You have the right not to be subject to a decision based solely on automated processing, including profiling, that produces legal effects concerning you or similarly significantly affects you.

Data Subject Rights Execution

  • We will inform all users of their rights under this Policy and Nepal’s Individual Privacy Act, 2018.
  • To exercise any right, please complete the request form available on our website or simply email info@yukta.app with your full name, email address, phone number, and a clear description of the right you wish to exercise.
  • Requests may be submitted by the data subject or their legal representative (with proof of representation).
  • If we cannot verify your identity or authority, we will inform you in writing and ask for additional verification.
  • Once a valid request is received, we will review it and respond in writing with our decision.
  • In cases of acceptance, we may also offer direct access to your data at our office (with proper identification).
  • All requests and actions taken are recorded for accountability.

Reply Deadlines

We are committed to responding to all valid requests within one month from receipt of the application. This deadline applies to:

  • Right of Access
  • Right to Rectification
  • Right to Erasure
  • Right to Object
  • Right to Restriction of Processing
  • Right to Portability
  • Right to Object to Automated Decision-Making

If the request is complex or we receive multiple requests from the same person, the deadline may be extended by a further two months. You will be informed of any extension and the reasons.

If we do not respond within the specified period, the request may be considered rejected, and you may file a complaint with the relevant authority under Nepal’s Individual Privacy Act, 2018.

Refusal to Exercise the Rights of the Data Subject

We may refuse a request only in the following limited circumstances:

  • The request has been made by a person other than the data subject (or their verified legal representative).
  • The same right has been exercised within the last 12 months without a legitimate new reason.
  • Granting the request would cause damage to the legitimate interests of the data subject or third parties.
  • We are legally required to retain the data (e.g., for accounting, tax, or regulatory compliance).

In every case of refusal, we will provide a written explanation and inform you of your right to complain to the relevant Nepali authority.

Contact Us

For any questions regarding this Data Subject Rights Policy or to exercise your rights, please contact:

Yukta Applications

Biratnagar, Nepal

Email: info@yukta.app

Website: https://yukta.app