Privacy Policy

1. Who We Are

This privacy policy explains how we collect, use, store, and protect your personal information when you use our website (vigorousitsolution.com) or interact with us through email or other channels.

Vigorous I.T. Solution Pvt. Ltd., registered in Pokhara, Nepal (PAN: 606776778), operating under the business name Vigorous IT Solution (“we,” “us,” “our”), has been in operation since 2018. We provide WordPress security services and operate remotely across Nepal and Australia.

We operate two brands:

• Corelyst Nepal (Beta Phase) — Managed WordPress Security
• Corelyst (corelyst.net) — Security Operations Engine

Corelyst services are covered by their own privacy policy and terms, provided when you sign up. This policy covers vigorousitsolution.com and direct communications with Vigorous IT Solution only. If you use Corelyst services, that privacy policy applies to your use of those services.

For questions about this policy, contact us at: [email protected]

2. What Information We Collect

We collect personal information in the following categories:

• Your name and email address when you contact us at [email protected], [email protected], or [email protected]
• Any additional information you include in your emails, such as your company name, website, or the nature of your inquiry
• Resumes, cover letters, and other materials submitted through job applications
• Any information you share during follow-up conversations, calls, or meetings

• IP address
• Browser type and version
• Operating system
• Pages visited on our website
• Date and time of your visit
• Referring website (how you found us)
• General geographic location based on IP address

• We do not collect payment or financial information through vigorousitsolution.com. Payment processing for Corelyst services is handled separately through Corelyst and third-party payment processors. We do not store, process, or have access to your credit card or banking details at any point through this website.
• We do not use tracking pixels or retargeting tools on vigorousitsolution.com.

3. How We Collect Information

Directly from you: When you send us an email, submit a job application, or otherwise contact us.

Automatically: Through standard web server logs and analytics tools when you visit our website. We use locally hosted analytics to understand traffic patterns and improve the user experience. No data from these tools is shared with third-party advertising networks.

We do not purchase, trade, or otherwise acquire personal information from third parties.

4. Why We Collect Information

We collect and use your personal information for the following purposes only:

• Responding to inquiries: To read, understand, and reply to your emails and messages.
• Partnership and business discussions: To evaluate and follow up on partnership, investment, or custom deployment inquiries.
• Recruitment: To review job applications, assess candidates, and communicate about employment opportunities.
• Website operation: To maintain, secure, and improve our website.
• Legal compliance: To meet our obligations under applicable laws, including the Individual Privacy Act 2075 (2018) and the Electronic Transactions Act 2063 (2006) of Nepal, and the Privacy Act 1988 (Cth) of Australia.

We do not use your personal information for purposes other than those stated above. If we ever need to use your information for a new purpose, we will inform you and seek your consent where required by law.

5. How We Store and Protect Your Information

We take reasonable measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction. These measures include:

• Email communications are handled through third-party service providers that use encrypted connections (TLS) for data in transit.
• Access to personal information is limited to team members who need it to perform their responsibilities.
• All team members with access to personal information are bound by confidentiality obligations.
• We regularly review our data handling practices to identify and address potential security risks.
• Our website uses HTTPS encryption for all connections.

No method of electronic transmission or storage is completely secure. While we take reasonable steps to protect your information using commercially acceptable means, we cannot guarantee absolute security. In the event of any unauthorized access, disclosure, or loss of personal information, we will follow the notification procedures described in Section 12 of this policy and comply with our obligations under applicable law, including any liability arising from our gross negligence or intentional misconduct as described in Section 13.

6. Who We Share Information With

We do not sell, rent, or trade your personal information to anyone.

We may share your information with the following categories of third parties, only to the extent necessary for the purposes described in this policy:

Service providers: We use trusted third-party service providers for email communications, website hosting, analytics, and other operational needs. These providers process data on our behalf and are bound by their own privacy and security obligations. We select providers that maintain appropriate security standards. We do not disclose the specific identity of our service providers for operational security reasons, which is standard practice in the security industry.

Legal requirements: We may disclose your information if required to do so by law, court order, or government request under the laws of Nepal or Australia, or to protect our rights, property, or safety, or the rights, property, or safety of others.

Business transfers: If Vigorous IT Solution is involved in a merger, acquisition, or sale of assets, your personal information may be transferred as part of that transaction. We would notify you before your information becomes subject to a different privacy policy.

Professional advisors: We may share information with our legal, accounting, or other professional advisors as necessary for their services to us.

We do not share your personal information with advertisers or any other third parties for their own marketing purposes.

7. Data Retention

We keep your personal information only for as long as it is necessary for the purposes described in this policy:

• General inquiries: Email correspondence is retained for the duration of any ongoing business relationship or discussion. If no relationship is established, correspondence is retained for up to 12 months and then deleted.
• Job applications: Resumes and application materials from candidates who are not selected are retained for up to 6 months after the recruitment decision, in case relevant opportunities arise. After that period, they are deleted. You may request earlier deletion at any time.
• Website logs: Server logs containing IP addresses and browsing data are retained for up to 90 days for security and operational purposes, then automatically deleted.
• Active business relationships: Information related to ongoing partnerships, contracts, or business relationships is retained for the duration of that relationship and for a reasonable period afterward as required by applicable law.

If you want us to delete your personal information sooner, contact us at [email protected] and we will process your request within 30 days.

8. Your Rights

Under the Individual Privacy Act 2075 (2018) and the Constitution of Nepal (Article 28), you have the following rights regarding your personal information:

• Right to be informed: You have the right to know what personal information we hold about you and how it is being used.
• Right to access: You can request a copy of the personal information we hold about you.
• Right to rectification: If your personal information is inaccurate or incomplete, you can request that we correct it. Please provide supporting information with your request.
• Right to erasure: You can request that we delete your personal information. We will comply unless we are required by law to retain it.
• Right to restrict processing: You can ask us to stop processing your personal information for certain purposes.
• Right to complain: If you believe your privacy rights have been violated, you may file a complaint with the relevant District Court within 3 months of the incident, as provided under the Individual Privacy Act 2075.

If you are located in Australia, you also have the right to complain to the Office of the Australian Information Commissioner (OAIC) under the Privacy Act 1988 (Cth) and the Australian Privacy Principles. Under the Privacy and Other Legislation Amendment Act 2024 (Cth), individuals also have the right to bring a civil action for serious invasions of privacy through the courts.

To exercise any of these rights, contact us at: [email protected]

We will respond to your request within 30 days. If we need additional time, we will inform you and explain why.

9. Cross-Border Data

Vigorous IT Solution operates remotely across Nepal and Australia. Your personal information may be processed and stored in either country.

When your data is transferred between countries, we take steps to ensure it remains protected in accordance with:

• The Individual Privacy Act 2075 (2018) of Nepal
• The Electronic Transactions Act 2063 (2006) of Nepal
• The Privacy Act 1988 (Cth) of Australia and the Australian Privacy Principles
• The Privacy and Other Legislation Amendment Act 2024 (Cth), including the statutory tort for serious invasions of privacy (commenced 10 June 2025)

We use service providers who may process data in countries outside Nepal and Australia. Where this occurs, we ensure those providers maintain appropriate security standards and are bound by their own privacy obligations.

By using our website or contacting us, you acknowledge that your information may be transferred to and processed in countries other than your country of residence, which may have different data protection laws.

10. Cookies and Tracking

Our website may use cookies — small text files stored on your device — to help the website function properly.

• Essential cookies: Required for the website to function, such as session management and security features. These cannot be disabled without affecting site functionality.
• Analytics: We use locally hosted analytics to understand how visitors use our website, such as pages visited and time spent. This data is not shared with third-party advertising networks or used for tracking across other websites.

• We do not use advertising or retargeting cookies.
• We do not use tracking pixels from social media platforms.
• We do not use cookies to build profiles of visitors for marketing purposes.

You can control cookies through your browser settings. Most browsers allow you to block or delete cookies. However, blocking essential cookies may affect how the website functions.

11. Children’s Privacy

Our website and services are directed at businesses and professionals, not individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a person under 18, we will take steps to delete that information promptly.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us at [email protected].

This approach is consistent with the age of majority in Nepal (18 years) and the requirements of the Privacy Act 1988 (Cth) of Australia.

12. Data Breach Notification

While Nepal does not currently impose a statutory breach notification obligation, we are committed to transparency. If we become aware of a data breach that is likely to result in serious harm to individuals whose personal information has been affected, we will:

• Take immediate steps to contain the breach and mitigate any damage.
• Notify affected individuals as soon as practicable, describing the nature of the breach, what information was involved, and what steps we are taking.
• Notify the relevant authorities if required by applicable law.

For individuals located in Australia, we will comply with the Notifiable Data Breaches (NDB) scheme under Part IIIC of the Privacy Act 1988 (Cth) where applicable.

13. Limitation of Liability

To the fullest extent permitted by applicable law, Vigorous IT Solution shall not be liable for any indirect, incidental, consequential, special, or punitive loss, damage, or harm arising from unauthorized access to, alteration of, or disclosure of your personal information.

Our total liability for any and all claims arising from or related to this privacy policy or the handling of your personal information shall not exceed NPR 10,000 (ten thousand Nepalese Rupees).

These limitations do not apply to:

• Liability arising from our gross negligence or intentional misconduct
• Any rights you may have under the Individual Privacy Act 2075 (2018) or the Consumer Protection Act 2075 (2018) of Nepal that cannot be excluded or limited by agreement
• Any mandatory liability provisions under the Privacy Act 1988 (Cth) of Australia, including liability arising from the statutory tort for serious invasions of privacy under the Privacy and Other Legislation Amendment Act 2024 (Cth)
• Any other liability that cannot be excluded or limited under applicable mandatory law

Each limitation in this section applies independently. If any limitation is found to be unenforceable, the remaining limitations shall continue to apply.

14. Legal References

This privacy policy is guided by the following laws and regulations:

This policy does not claim compliance with the European Union General Data Protection Regulation (GDPR). If you are accessing our website from within the European Economic Area, please be aware that your data may be processed in Nepal and Australia under the laws referenced above.

15. Contact Us

If you have questions, concerns, or requests regarding this privacy policy or how we handle your personal information:

For privacy matters related to Corelyst services, refer to the Corelyst privacy policy provided when you sign up.