PrivacyPolicy

The data controller responsible for your personal data is:

Garmex Sourcing
Lahore, Punjab, Pakistan
Email: info@garmexsourcing.com
Phone: +92 304 2612599

For data protection inquiries, contact us at info@garmexsourcing.com with the subject "Data Protection Request."

Contact & Quote Forms: Name, email, phone number, company name, job title, country, product requirements, and project details that you voluntarily provide.

Newsletter: Email address and consent status when you subscribe to our newsletter.

Business Information: Product specifications, order quantities, shipping addresses, and payment details necessary to fulfill orders.

Technical Data: IP address, browser type, device information, and pages visited — collected automatically through server logs and cookies.

Legitimate Interest (Article 6(1)(f) GDPR): Processing B2B inquiries, responding to quote requests, and communicating about our services. Our legitimate interest is in conducting business and serving our clients.

Consent (Article 6(1)(a) GDPR): Sending marketing emails and newsletters. You can withdraw consent at any time by clicking "unsubscribe" in any email or contacting us.

Contract Performance (Article 6(1)(b) GDPR): Processing orders, managing production, shipping, and invoicing where you are a customer.

Legal Obligation (Article 6(1)(c) GDPR): Retaining business records as required by Pakistani and international trade regulations.

Inquiry data (contact/quote forms): Retained for 2 years after last interaction, then deleted.

Customer order data: Retained for 7 years as required by trade and tax regulations.

Newsletter subscriptions: Retained until you unsubscribe or withdraw consent.

Website analytics data: Aggregated and anonymized after 26 months.

We share data with the following categories of processors, all bound by data processing agreements:

• Hosting provider (Hostinger) — website hosting and email services (EU/US servers)
• CMS (Strapi) — storing form submissions and content management
• Analytics — website traffic analysis (when implemented, with consent)

We do not sell, trade, or rent your personal information to third parties for marketing purposes.

Your data may be processed in Pakistan, where Garmex Sourcing is based. Pakistan is not subject to an EU adequacy decision. We protect your data through:

• Appropriate technical and organizational security measures
• Data processing agreements with all third-party processors
• Encryption of data in transit and at rest

Under the GDPR and applicable data protection laws, you have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — request correction of inaccurate or incomplete data
• Erasure — request deletion of your personal data ("right to be forgotten")
• Restriction — request restriction of processing in certain circumstances
• Data portability — receive your data in a structured, machine-readable format
• Object — object to processing based on legitimate interest
• Withdraw consent — withdraw consent for marketing at any time

To exercise any of these rights, email info@garmexsourcing.com with the subject "Data Protection Request." We will respond within 30 days.

You also have the right to lodge a complaint with a supervisory authority in your country of residence.

Essential cookies: Required for the website to function (e.g., cookie consent preference). These do not require consent.

Analytics cookies: Used to understand how visitors interact with our site. These are only set with your explicit consent.

You can manage cookie preferences through our cookie consent banner or your browser settings. Disabling cookies may affect website functionality.

We may update this Privacy Policy to reflect changes in our practices or legal requirements. We will post the updated policy on this page with a revised "Last updated" date. For material changes, we will notify you via email where possible.

Last updated: February 27, 2026