Privacy Policy

When you sign up. Your name, phone number and, if you give it, your email address, plus your membership or pass type, dates, assigned desk and how you paid.

When you use the portal. Your access code, the times you log in and out (the first login of the day counts as your check-in), your browser and device type, food orders, meeting room bookings, and credit top-ups and spending.

For security. Login attempts, including the IP address they came from, so we can block people guessing access codes.

When you just browse this website. Anonymous usage analytics: the pages you view, the buttons you click, your approximate location from your IP address, your browser and device type, and a recording of how you moved around the public pages (anything typed into forms is masked). We use this only to improve the website. The member portal is never recorded. We don't use advertising cookies.

• To give you access to the space and the member portal, and to check which pass or membership is active.
• To prepare and deliver your food orders and manage room bookings.
• To keep an accurate record of your credits, payments and receipts.
• To keep accounts secure and investigate misuse.
• To contact you about your membership, bookings or changes to the space.
• To understand, in aggregate, how busy the space is and plan seats, menus and opening hours.

We use a small number of essential cookies to keep you logged in to the member portal. They are required for the portal to work and are removed when you sign out or your session expires. On the public website, our analytics provider stores an anonymous identifier in your browser so repeat visits can be counted. We do not use cookies for advertising or cross-site tracking.

Only EIR staff who need it for their role can see your information. For example, the kitchen sees your name and desk on an order, and reception sees your balance when topping up credits. Staff access is permission-based and actions are logged.

We use a small number of service providers to run the portal, including Supabase for our database and authentication, PostHog for website analytics, and our web hosting provider. They process data on our behalf and may store it on servers outside Nepal. We only disclose information to anyone else when the law requires it or to protect the safety of people in the space.

We keep your account and transaction history while you are a member, and for as long afterwards as we need it for accounting, tax and legal obligations. Login attempt records are kept for a short time for security. When we no longer need your data, we delete it or make it anonymous.

Data is encrypted in transit, access is limited by role, and database rules stop members from seeing each other's information. Repeated failed logins are locked out. No system is perfectly secure, so please keep your access code private and tell us if you think it has been exposed.

You can ask us to:

• show you the personal information we hold about you;
• correct anything that is wrong or out of date;
• delete your account and personal data, except records we must keep by law;
• issue you a new access code.

Email us or ask at reception, and we will respond within 30 days.

The space and portal are for adults. We don't knowingly collect information from anyone under 18.

If we change this policy, we will update the date at the top of this page and let current members know about significant changes. See also our Terms and Conditions.

For any privacy question or request, email founder@engineerinresidence.net or call 9808721200. Engineer in Residence, Balkhu, Kathmandu, Nepal.