Legal
Privacy Policy
We take the protection of your personal data seriously. This policy explains what we collect, how we use it, and the rights you hold as an individual.
Effective date: 1 June 2026. This Privacy Policy applies to all personal data processed by MZ Global Trading through this website and our B2B textile sourcing services. We recommend reviewing this policy periodically. Material changes will be notified by updating the date above.
1. Who We Are
MZ Global Trading is a B2B textile sourcing company based in Karachi, Pakistan. We connect international brands, importers, and retailers with certified textile manufacturers across apparel, home textiles, and fabric.
For the purposes of applicable data protection legislation, MZ Global Trading is the data controller in respect of personal data collected through this website and our services.
Controller contact details
MZ Global Trading
Office G20, Ground Floor, Columbus Tower
Main Clifton Road, Karachi 75600, Pakistan
info@mzglobaltrading.com
+92 300 8256203
2. Data We Collect
We only collect personal data that is necessary for the purposes described in this policy.
Data you provide directly
When you submit a Request for Quotation or contact us through our website, we collect:
- Full name and job title
- Company name and website
- Business email address
- Business telephone number
- Country and shipping destination
- Product requirements (fabric type, construction, GSM, dimensions, certifications needed)
- Order quantities and target price range
- Preferred incoterm and delivery timeline
- Any additional information you choose to include in your message
Data collected automatically
When you visit our website, our hosting provider (Cloudflare) may collect standard server log data including:
- IP address (used for security and abuse prevention)
- Browser type and version
- Pages requested and date/time of access
- HTTP status codes and response sizes
This data is processed by Cloudflare under their own privacy policy and is used for network security, DDoS mitigation, and service delivery.
Google Analytics 4
With your consent, we use Google Analytics 4 (provided by Google LLC) to understand how visitors use this website. It collects:
- Pages visited and navigation path through the site
- Session duration and engagement metrics
- Device type, browser, and operating system
- Approximate geographic location (country/city level, derived from IP address — not precise location)
- Traffic source and referral information
No personally identifiable information is shared with Google. Analytics data is transferred to and processed by Google LLC in the United States under Google's Data Processing Amendment. This data is only collected after you give consent via our cookie banner.
Data from communications
Any personal data you include in email or other correspondence with us is collected and retained as part of that communication record.
3. How We Use Your Data
We use the personal data we collect for the following purposes:
| Purpose | Legal basis (GDPR) |
|---|---|
| Responding to RFQ submissions and enquiries | Contractual necessity — steps taken at your request prior to entering a contract |
| Matching your requirements with appropriate factory partners | Contractual necessity / Legitimate interests — operating our core sourcing service |
| Sending quotations, samples, and production updates | Contractual necessity |
| Maintaining records of transactions and correspondence | Legal obligation / Legitimate interests — business record-keeping |
| Improving our website and services | Legitimate interests — ensuring our services remain relevant and effective |
| Sending relevant product or trade updates (where you have opted in) | Consent — you may withdraw at any time |
| Compliance with legal and regulatory obligations | Legal obligation |
We do not use your personal data for automated decision-making or profiling.
4. Data Sharing
We do not sell, rent, or trade your personal data to third parties. We share data only in the limited circumstances described below.
Factory partners
To obtain competitive quotations on your behalf, we share relevant product and technical specifications with vetted factory partners in our network. We share only the product and commercial requirements necessary for quoting — not your personal contact details — unless you have explicitly authorised direct contact.
Service providers
We use a small number of trusted service providers to operate our business:
- Cloudflare, Inc. — website hosting, content delivery, and security (USA)
- Google LLC (Google Analytics 4) — website analytics; data processed in the USA under Google's Data Processing Amendment
- Google Workspace — business email and document management (USA)
- WhatsApp / standard email — client communications where applicable
These providers process data only on our instructions and are bound by appropriate data processing agreements.
Legal and regulatory disclosure
We may disclose personal data where required by applicable law, court order, or governmental authority, or to protect the rights, property, or safety of MZ Global Trading, our clients, or others.
Business transfers
In the event of a merger, acquisition, or sale of business assets, personal data may be transferred as part of that transaction. We will notify affected individuals prior to any such transfer.
5. International Data Transfers
MZ Global Trading is based in Pakistan. When you interact with us, your personal data is processed and stored in Pakistan.
Pakistan is not currently designated as a country with an adequate level of data protection by the European Commission or the UK Information Commissioner's Office (ICO). However, we implement the following safeguards when receiving data from the EEA, UK, or other regulated jurisdictions:
- We apply the data minimisation principle — collecting only what is necessary
- Data is stored on secured, access-controlled systems
- Where we share data with EEA- or UK-based service providers, we rely on EU Standard Contractual Clauses (SCCs) or UK International Data Transfer Agreements (IDTAs)
- We are committed to honouring your rights regardless of where your data is processed
If you have questions about the safeguards applicable to your specific situation, please contact us at info@mzglobaltrading.com.
6. Data Retention
We retain personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law.
| Data type | Retention period |
|---|---|
| RFQ and enquiry records (no order placed) | 2 years from last contact |
| Order and contract records | 7 years from contract end (statutory accounting requirement) |
| Email correspondence | 3 years from last interaction, unless part of a contract record |
| Cloudflare server logs | Managed by Cloudflare; typically up to 30 days |
| Google Analytics event data | 14 months (as configured in our Google Analytics account) |
| Marketing opt-in records | Until you withdraw consent, plus 1 year for compliance evidence |
When data is no longer required, it is securely deleted or anonymised so that it can no longer be associated with an individual.
7. Your Rights
Rights under GDPR (EEA and UK residents)
If you are located in the European Economic Area or the United Kingdom, you have the following rights under the General Data Protection Regulation (GDPR) and the UK GDPR respectively:
| Right | What it means |
|---|---|
| Access | Request a copy of the personal data we hold about you. |
| Rectification | Ask us to correct inaccurate or incomplete data. |
| Erasure | Request deletion of your personal data where there is no compelling reason to continue processing it. |
| Restriction | Ask us to pause processing while a dispute is resolved. |
| Portability | Receive your data in a structured, machine-readable format where processing is based on consent or contract. |
| Object | Object to processing based on legitimate interests, including direct marketing. |
| Withdraw consent | Where processing is based on consent, withdraw it at any time without affecting prior processing. |
You also have the right to lodge a complaint with your local supervisory authority. In the EU this is your national Data Protection Authority (DPA); in the UK this is the Information Commissioner's Office (ICO) at ico.org.uk.
Rights under CCPA (California, USA residents)
If you are a California resident, the California Consumer Privacy Act (CCPA) grants you additional rights:
| Right | What it means |
|---|---|
| Right to Know | Request disclosure of the categories and specific pieces of personal information we have collected about you, the purposes for collection, and the categories of third parties with whom it is shared. |
| Right to Delete | Request deletion of personal information we have collected from you, subject to certain exceptions. |
| Right to Opt-Out | Opt out of the sale of personal information. We do not sell personal information. |
| Right to Non-Discrimination | We will not discriminate against you for exercising any of your CCPA rights. |
To submit a CCPA request, contact us at info@mzglobaltrading.com with the subject line “CCPA Request”. We will respond within 45 days.
Other jurisdictions
Regardless of your location, you may contact us at any time to access, correct, or request deletion of your personal data, or to ask questions about how we process it. We will respond to all reasonable requests within 30 days.
9. Contact & Data Requests
To exercise any of your rights, request access to your data, report a data protection concern, or ask any question about this policy, please contact us:
By post
MZ Global Trading
Office G20, Columbus Tower
Main Clifton Road
Karachi 75600, Pakistan
Response times
- General enquiries: within 5 business days
- GDPR rights requests: within 30 days (extendable to 90 days for complex requests with notice)
- CCPA rights requests: within 45 days (extendable by a further 45 days with notice)
- Data breach notifications: within 72 hours where required by law
Supervisory authorities
If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority:
- EU residents: your national Data Protection Authority (DPA)
- UK residents: the Information Commissioner's Office (ICO) — ico.org.uk
- California residents: the California Privacy Protection Agency (CPPA) — cppa.ca.gov
This policy was last reviewed and updated on 27 June 2026. Previous versions are available on request. This policy does not create or modify any contractual relationship between you and MZ Global Trading.