Legal

Privacy Policy

Last updated: April 2026

Brewliners ("we", "us", or "our") is a barista and mixology training academy based in Kathmandu, Nepal. We are committed to protecting your personal information. This Privacy Policy explains what data we collect, why we collect it, how we use it, and your rights regarding your information.

1 Information We Collect

We collect information you provide directly to us, and certain data automatically when you use our website.

Information you give us:

  • Full name, phone number, and email address (via enrollment, booking, contact, and certificate inquiry forms)
  • Course preferences and session dates selected in booking forms
  • Certificate ID and graduation year (for verification requests)
  • Messages or notes you include in any form submission
  • Email address if you subscribe to our newsletter or notify-me list

Information collected automatically:

  • Browser type, operating system, and device information
  • Pages visited, time spent, and referral source
  • IP address and approximate geographic region
Note: We do not collect payment card details directly. Any future payment processing will be handled by a certified third-party payment provider.

2 How We Use Your Information

We use the information we collect for the following purposes:

  • To process enrollment and booking requests and confirm your place in a program
  • To respond to your inquiries and provide customer support
  • To verify and issue certificates upon request
  • To send program updates, session reminders, and confirmations
  • To send newsletters and promotional content (only if you opted in; unsubscribe at any time)
  • To improve our website, programs, and overall service quality
  • To comply with applicable laws and regulations in Nepal

We will never use your information for any purpose that is not described above without first obtaining your explicit consent.

3 Sharing & Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following limited circumstances:

  • Service providers: Trusted partners who assist with email delivery, website hosting, or analytics — under strict data processing agreements
  • Certification bodies: Where required to validate or register your SCA-aligned certification (only with your knowledge)
  • Legal compliance: When required by Nepali law, court order, or government authority
  • Business transfer: In the event of a merger or acquisition, your data would transfer under the same privacy protections

4 Cookies & Tracking

Our website uses cookies and similar technologies to provide a better browsing experience.

  • Essential cookies: Required for the site to function (session management, security)
  • Analytics cookies: Used to understand how visitors interact with our pages (e.g., Google Analytics) — anonymised where possible
  • Preference cookies: Remember your settings and choices across visits

You can control or disable cookies through your browser settings. Disabling essential cookies may affect site functionality. We do not use advertising or retargeting cookies.

5 Data Retention

We retain your personal data only as long as necessary for the purpose it was collected:

  • Enrollment and booking records: 3 years from the date of the program (for operational and compliance purposes)
  • Certificate records: Indefinitely, as they form part of our academic records
  • Newsletter subscriptions: Until you unsubscribe
  • General inquiries and contact messages: 12 months

After the applicable retention period, your data is securely deleted or anonymised.

6 Your Rights

Depending on your location, you may have the following rights regarding your personal data:

  • Access: Request a copy of the personal data we hold about you
  • Correction: Ask us to update inaccurate or incomplete information
  • Deletion: Request that we delete your data (subject to legal retention obligations)
  • Objection: Object to processing of your data for marketing purposes
  • Portability: Request a structured, machine-readable copy of your data
  • Withdrawal of consent: Withdraw consent at any time where processing is based on consent
To exercise any of these rights, contact us at privacy@brewliners.com. We will respond within 30 days.

7 Data Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These include:

  • SSL/TLS encryption for all data transmitted to and from our website
  • Access controls limiting who within our team can access personal data
  • Regular review of data handling practices and third-party agreements

While we take data security seriously, no method of transmission over the internet is 100% secure. If you believe your data has been compromised, please contact us immediately.

8 Third-Party Links

Our website may contain links to third-party websites, including our social media profiles (Instagram, Facebook, TikTok, YouTube) and WhatsApp. Once you leave our site, this Privacy Policy no longer applies. We encourage you to review the privacy policies of any third-party sites you visit.

9 Children's Privacy

Our programs are designed for individuals aged 18 and above. We do not knowingly collect personal data from children under 18. If you believe a child has submitted information to us, please contact us at privacy@brewliners.com and we will promptly delete it.

10 Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will post the updated policy on this page with a revised "Last updated" date. For significant changes, we will notify enrolled students directly via email.

Continued use of our website after changes are posted constitutes acceptance of the revised policy.

11 Contact Us

If you have any questions, concerns, or requests about this Privacy Policy or how we handle your data, please reach out to us:

Have a Question?

Our team is happy to answer anything about how we handle your data.
We respond to all privacy requests within 30 days.