About this policy
BlackHawk Consulting (“BlackHawk”, “we”, “us” or “our”) is a Nepal-based accounting and outsourcing firm serving clients in Nepal and overseas. This policy explains how we handle personal information when you use this website, make an enquiry, apply for a role, or engage us to provide services.
For client engagements, this policy should be read with the applicable engagement letter, data-processing terms and any notices supplied by the client whose records we process.
Information we collect
Information you give us
- Contact and identity details, such as your name, role, business name, email address and telephone number.
- Enquiry and correspondence details, including information submitted through our contact form, email, telephone or meetings.
- Client and engagement records, including accounting records, payroll data, invoices, bank-related records, tax information, user-access details and supporting documents needed to perform agreed services.
- Recruitment information, such as your CV, employment history, qualifications and references.
Information collected automatically
Our hosting and security providers may record limited technical information such as IP address, browser and device type, requested pages, date and time, and security events. We do not currently use advertising or behavioural analytics cookies. See our Cookie Notice.
How and why we use information
| Purpose | Typical basis |
|---|---|
| Responding to enquiries and preparing proposals | Steps requested before entering a contract and our legitimate interest in developing our business. |
| Delivering accounting, payroll, tax, reporting and related services | Performance of our contract and compliance with applicable legal or professional obligations. |
| Managing billing, records, quality, security and operations | Contract, legal obligations and legitimate interests in operating a secure and accountable firm. |
| Recruitment and employment administration | Steps taken at your request, legal obligations and legitimate interests in recruitment. |
| Sending optional updates or marketing | Your consent where required. You may unsubscribe at any time. |
Where we process personal information on a client’s instructions, that client generally decides why and how the information is used, and we act as its service provider or processor.
International processing
BlackHawk’s delivery team operates in Nepal. If you or your business is based elsewhere, personal information may therefore be accessed and processed in Nepal. Our technology providers may also store or process information in other countries.
For cross-border engagements, the applicable engagement and data-processing terms should identify the transfer mechanism and safeguards required by the client’s jurisdiction. These may include contractual protections, confidentiality duties, access restrictions, encryption and transfer-risk reviews.
How long we keep information
We keep personal information only as long as needed for the purpose collected, to meet legal and professional obligations, and to establish or defend claims. Subject to the engagement letter and applicable law, our working schedule is:
- General enquiries and unsuccessful proposals: up to 24 months after the last meaningful contact.
- Client engagement, accounting and billing records: generally 7 years after the engagement or relevant financial period ends.
- Unsuccessful recruitment records: generally 12 months after the recruitment process ends.
- Security and technical logs: for the shorter period configured by the relevant provider, unless needed to investigate an incident.
We may keep information longer where law, a regulator, a dispute, an agreed client instruction or a legal hold requires it. When retention ends, information is deleted, anonymised or securely archived with restricted access.
Your choices and rights
Depending on the law that applies, you may ask us to access, correct, delete, restrict or provide a copy of your personal information; object to certain processing; or withdraw consent. These rights can be limited where we must retain information or an exemption applies.
Send a request to info@blackhawk.com.np. We may ask for information to verify your identity. We aim to acknowledge requests promptly and respond within 30 days, or within another period required by applicable law. If more time is permitted and reasonably needed, we will explain why.
If we process your information for one of our clients, we may refer the request to that client so it can respond as the organisation responsible for the information.
Security, changes and contact
We use administrative, technical and physical safeguards proportionate to the information and service, including role-based access, confidentiality commitments, secure systems, access reviews and incident procedures. No internet transmission or storage system can be guaranteed completely secure.
We may update this policy when our services, technology or legal obligations change. Material changes will be identified by the updated date at the top.
Data protection contact
Privacy Lead
BlackHawk Consulting
Kathmandu, Nepal
info@blackhawk.com.np