Privacy Policy

Last updated: 16 November 2025 (Asia/Kathmandu)

1) Who we are

Goreto Educational Consultancy (“Goreto”, “we”, “our”, “us”) provides study‑abroad counseling and related services, including program shortlisting, application guidance, events/fairs, and pre‑departure support. This Privacy Policy explains how we handle personal information collected through our website and the channels listed on it.

Website covered: goreto.edu.np (including country pages, contact/consultation forms, event/fair registrations, blog, and other sub‑pages).

How to contact us about privacy:

• Primary privacy contact: info@goreto.edu.np
• General inquiries: info@goreto.edu.np
• Admissions/counseling: info@goreto.edu.np

If you prefer, you can also write to the head office listed on our website’s Contact page.

2) Scope of this policy

This policy applies when you:

• visit or interact with goreto.edu.np;
• submit any website form (contact/consultation/event);
• communicate with us via phone, email, WhatsApp, or social channels referenced on our site;
• receive service updates or marketing (where permitted or consented).

It covers collection, use, sharing, storage, security, and your choices regarding personal data. It does not cover third‑party sites or platforms we link to; their policies apply there.

Note: This document is for general information and does not constitute legal advice.

3) What personal data we collect

1. a) Information you provide directly:

• Identity & contact: name, email, phone/WhatsApp, preferred branch, preferred destination (e.g., Canada/USA/UK/Australia), and your message.
• Counseling/application context: academic history, intended program/intake, test scores (e.g., IELTS/TOEFL), budget/finance notes, and other details you choose to share so we can assess eligibility and guide you.
• Event registrations: details necessary to confirm attendance and follow‑ups for fairs/seminars.

1. b) Information from communications: When you contact us using the phone numbers, emails, WhatsApp links, or social handles shown on our site, we process what’s needed to respond (your contact details, message content, and channel‑provided metadata).
2. c) Automatically collected data (cookies & similar tech): Standard logs and cookies may capture IP address, device/browser type, pages viewed, time on page, referral/UTM parameters, and coarse location (country/city level). See Section 10 for cookie categories and controls.
3. d) Public/partner sources: Where lawful and relevant to your case, we may verify or enrich information with education partners (universities/colleges or their authorized representatives) and publicly available sources, limiting what we share to what is necessary.

4) Why we collect your data (purposes)

• Respond to inquiries & provide counseling (schedule consultations, assess eligibility, suggest options).
• Application & documentation support (prepare materials, liaise with institutions you select).
• Events & fairs (confirm registrations, reminders, post‑event guidance).
• Website operations & improvements (security, troubleshooting, analytics, content optimization).
• Marketing (optional/consented) – scholarships, intakes, events, and services; you can opt out at any time (see Section 14).

5) Our legal bases (how we justify processing)

• Consent – for form submissions that reference this policy/terms and for receiving marketing communications.
• Contract / pre‑contractual steps – to deliver counseling/application support you request.
• Legitimate interests – to operate and secure the site, run basic analytics, improve services, and send service‑related updates.
• Legal obligation – to comply with applicable laws or respond to lawful requests.

6) Special categories & children

We don’t intentionally request sensitive data via public web forms. If your later documentation includes sensitive details (e.g., health‑related notes for accommodation), we handle them with enhanced confidentiality and only when needed for your case.

Our services are aimed at students and families; if you are under 16, please involve a parent/guardian.

7) Who we share data with (and why)

• Education providers/partners – universities/colleges or official representatives, to process applications and admissions queries.
• Technology/service vendors (“processors”) – website hosting, email delivery, CRM/lead forms, analytics, appointment tools, cloud storage, and security providers. These vendors process data under contracts that limit use to our instructions.
• Ad/analytics platforms (if enabled) – pseudonymous usage/attribution data to understand site traffic and campaign effectiveness (see Cookies).
• Professional advisors & legal authorities – if required to protect rights, comply with law, or respond to lawful requests.
• Business transfers – if we reorganize or merge, your data may transfer under equivalent protections.

We do not sell your personal information.

8) International transfers

Because counseling and applications often involve institutions abroad, data may be accessed or transferred internationally (e.g., Nepal ↔ Canada/USA/UK/Australia). Where we transfer data to countries with different privacy rules, we use appropriate safeguards (contractual protections, need‑to‑know access, and minimized data sharing).

9) Messaging & communications specifics (email, phone, WhatsApp)

• By contacting addresses like info@goreto.edu.np or via WhatsApp/phone listed on our site, you authorize us to reply using those channels.
• If you prefer email‑only or phone‑only communications, tell us and we will honor your preference.
• Messaging platforms process data under their own terms/policies; please review those providers’ notices.

10) Cookies, analytics & ads

1. What cookies do: remember preferences, measure site usage (pages visited, time on site, referring links/UTMs), secure sessions, and improve content.
2. Types:

• Strictly necessary – security and core site functionality.
• Performance/analytics – aggregate stats to improve the site.
• Marketing/attribution (only if enabled) – to measure campaign effectiveness.
•  Your choices: Manage cookies in your browser settings and/or through an on‑site banner if deployed. Disabling certain cookies may impact site performance.
• Analytics/ads data: If tools like GA4 or Meta/LinkedIn pixels are used, they may set their own cookies and receive pseudonymous usage data. We do not use these to identify you directly without your consent.

11) Data security

• Access controls on a need‑to‑know basis;
• Secure website and email configurations;
• Periodic vendor/security reviews and updates;
• Staff awareness measures and incident response procedures.

No method is 100% secure; we work to reduce risks and promptly address issues.

12) How long we keep data (retention)

• Inquiries/consultations – generally 12–24 months of inactivity, unless you request deletion sooner;
• Active applications – for the duration of counseling/application process and a reasonable period afterward;
• Legal/contract records – as required by applicable laws or to establish/defend legal claims.

When retention ends, we delete or anonymize data.

13) Your rights and choices

• Access your personal data and obtain a copy;
• Correct inaccurate or incomplete data;
• Delete data in certain circumstances;
• Restrict or object to certain processing;
• Withdraw consent at any time (where processing is based on consent);
• Opt out of marketing communications at any time.

To exercise your rights, contact privacy@goreto.edu.np. We may ask for information to verify your identity before fulfilling your request.

14) Marketing preferences (opt‑in/opt‑out)

We send marketing communications only with your consent or where otherwise permitted. You can opt out at any time by using the unsubscribe instructions included in messages or by emailing privacy@goreto.edu.np. Service‑related and transactional messages will continue as needed to provide services.

15) Region‑specific notices

Nepal: We follow applicable Nepali laws and sector guidance relevant to educational consultancy services.

EEA/UK visitors: Where EU/UK data‑protection laws apply, our legal bases are listed in Section 5; you also have the right to lodge a complaint with your local data protection authority. We may appoint an EU/UK representative if required by law.

Canada: For Canadian contacts/institutions, we apply accountability principles similar to PIPEDA and ensure appropriate safeguards for cross‑border transfers.

16) Children’s privacy

Our services are aimed at students and families. If you are under 16, please involve a parent/guardian when contacting us or submitting forms. If we learn we collected personal data from a child without appropriate consent, we will delete it.

17) Third‑party links & social channels

Our site may link to third‑party websites or messaging platforms such as WhatsApp, Facebook, Instagram, or YouTube. Their privacy practices are governed by their own policies. We recommend reviewing those policies when you leave goreto.edu.np or engage via external channels.

18) Changes to this policy

We may update this policy from time to time. The “Last updated” date at the top indicates the latest revision. If changes materially affect your rights, we will provide a prominent notice on the website.

19) How to contact us

• Email (privacy): info@goreto.edu.np
• General inquiries: info@goreto.edu.np
• Admissions/counseling: info@goreto.edu.np

If you contact us, please include enough detail for us to identify you and the nature of your request.

Appendix A — Cookie categories & examples

• Strictly necessary: session cookie (expires on browser close).
• Analytics: GA4 client identifier
• Marketing/attribution: Meta/LinkedIn click ID mapping

Appendix B — Processors / service providers (examples)

We use vendors as needed for hosting, email, forms/CRM, analytics, appointment booking, and security. A current list is available on request by emailing info@goreto.edu.np.