Privacy Policy
How Colosnal Enterprises collects, uses, and protects your personal information your privacy is our responsibility.
This Privacy Policy explains what information we collect, how we use it, who we share it with, and what rights you have regarding your data. By using our websites or placing an order with us, you agree to the practices described in this Policy.
Information We Collect
We collect personal information in two ways information you provide to us directly when interacting with our business, and information collected automatically when you use our websites.
When you place an order, make an enquiry, register on our website, or communicate with us, you may provide:
- Full name to identify you and personalise communication
- Email address ; to send order confirmations, quotes, and correspondence
- Phone number / WhatsApp to communicate about orders and provide support
- Shipping and billing address to process, dispatch, and deliver your order
- Company name and business details if you are placing an order as a business
- Design files, tech packs, and artwork shared for the purpose of producing your custom order
- Payment information processed securely via third-party payment providers; we do not store raw card data
- Order history and preferences to facilitate repeat orders and personalised service
- Enquiry and message content from contact forms, emails, and WhatsApp communications
When you visit our websites, we may automatically collect the following technical data:
- IP address for security monitoring and approximate location identification
- Browser type and version to optimise website display
- Operating system ; for technical compatibility purposes
- Pages visited and time spent to understand how our website is used
- Date and time of visit for server logs and analytics
- Referring website ; to understand how visitors find us
- Cookie and tracking data
How We Use Your Information
We use your personal information only for legitimate business purposes. Specifically, we use the information we collect to:
- Process and fulfil your orders, including production, quality control, labelling, packaging, and shipping
- Communicate with you about your order status, production updates, sample approvals, and delivery tracking
- Respond to your enquiries, quotation requests, and customer support messages
- Send order confirmations, invoices, and shipping documentation
- Customise and improve our product offerings based on your requirements and preferences
- Improve our website functionality, performance, and user experience
- Send newsletters, product updates, and promotional communications only where you have consented or where we have a legitimate interest. You may opt out at any time
- Maintain our business records and comply with accounting and legal obligations
- Detect, investigate, and prevent fraudulent transactions and other illegal activities
- Enforce our Terms & Conditions and other agreements
Sharing of Information
We do not sell, rent, or trade your personal data to third parties for their own marketing purposes. We only share your information in the following limited circumstances:
- Shipping and logistics partners we share your delivery address and contact details with courier services (DHL, FedEx, UPS, and freight forwarders) solely to deliver your order
- Payment processors payment information is processed by secure third-party payment gateways; we do not have access to your full card details
- Production and supply chain partners in limited cases where specialist production is subcontracted, only the minimum necessary information is shared
- Legal and regulatory authorities we may disclose your information if required by law, court order, or government authority
- Professional advisors including lawyers, accountants, and auditors under strict confidentiality obligations
- Business transfers in the event of a merger, acquisition, or sale of our business, your data may be transferred to the acquiring entity under equivalent privacy protections
All third parties with whom we share data are required to handle it in accordance with applicable privacy laws and our data processing requirements.
Data Security
We take the security of your personal information seriously and implement appropriate technical and organisational measures to protect it against unauthorised access, loss, or disclosure.
SSL Encryption
All data transmitted between your browser and our website is protected by SSL/TLS encryption.
Secure Cloud Storage
Your data is stored on secure, access-controlled cloud servers with regular security audits.
Restricted Access
Access to personal data is limited to authorised staff who require it to fulfil your order.
While we implement best-practice security measures, please be aware that no method of data transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security, but we will notify you promptly in the event of any data breach that affects your personal information, as required by applicable law.
Your Rights & Choices
Depending on your location and applicable data protection law, you have the following rights regarding your personal data:
🔍 Right to Access
Request a copy of the personal data we hold about you.
✏ Right to Rectification
Request correction of any inaccurate or incomplete personal data.
🗑 Right to Erasure
Request deletion of your personal data, subject to legal retention requirements.
🚫 Right to Restrict Processing
Request that we limit how we use your data in certain circumstances.
📤 Right to Data Portability
Receive your data in a structured, machine-readable format.
😠 Right to Object
Object to processing based on legitimate interests, including direct marketing.
📷 Opt Out of Marketing
Unsubscribe from marketing emails at any time using the link in our emails.
🔒 Withdraw Consent
Withdraw consent for data processing where consent is the legal basis.
To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days. We may need to verify your identity before processing your request.
Cookies & Tracking Technologies
Our websites use cookies and similar tracking technologies to enhance your browsing experience and understand how our site is used. Cookies are small text files stored on your device when you visit our website.
- Essential cookies necessary for the website to function correctly; cannot be disabled
- Functional cookies remember your preferences such as language and region settings
- Analytics cookies help us understand how visitors interact with our website (e.g., Google Analytics)
- Marketing cookies used to deliver relevant advertising and track the effectiveness of our campaigns
You can control and manage cookies through your browser settings. Most browsers allow you to refuse, accept, or delete cookies. Please note that disabling certain cookies may affect the functionality of our website. For more information on managing cookies, visit www.allaboutcookies.org.
Third-Party Links
Our websites may contain links to external websites operated by third parties including social media platforms, payment gateways, and industry partners. These links are provided for your convenience and information only.
We are not responsible for the privacy practices, security, or content of any third-party websites. We strongly encourage you to review the privacy policy of any external website you visit. This Privacy Policy applies solely to information collected by Colosnal Enterprises through our own websites and communications.
International Data Transfers
Colosnal Enterprises is based in Sialkot, Pakistan. If you are located in the European Union, United Kingdom, United States, Australia, or any other jurisdiction outside Pakistan, your personal information will be transferred to and processed in Pakistan.
Pakistan may not have data protection laws equivalent to those in your home country. However, we ensure that all transfers are conducted with appropriate safeguards in place, including contractual obligations on our service providers to protect your data to a standard consistent with applicable law.
For EEA and UK customers, where we transfer your data outside of the EEA/UK, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission or other lawful transfer mechanisms as required by applicable law.
If you have questions about international data transfers, please contact us at [email protected].
Children’s Privacy
Our websites and services are intended for use by businesses and individuals aged 18 and over. We do not knowingly collect, process, or store personal information from children under the age of 13 (or the applicable minimum age in your jurisdiction).
If we become aware that we have inadvertently collected personal information from a child without appropriate parental consent, we will take immediate steps to delete that information. If you believe we may have collected information from or about a child, please contact us immediately at [email protected].
Data Retention
We retain your personal information only for as long as is necessary to fulfil the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.
- Order and transaction records retained for a minimum of 7 years for accounting and legal compliance purposes
- Customer account information ; retained for the duration of our business relationship plus a reasonable period after
- Design files and artwork retained while you are an active customer and for a period thereafter to facilitate reorders; you may request deletion at any time
- Marketing data retained until you opt out or withdraw consent
- Website analytics data typically retained for 26 months or as configured in our analytics tools
When data is no longer required, we securely delete or anonymise it in accordance with our data deletion procedures.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our business practices, legal requirements, or data protection standards. When we make material changes, we will:
- Post the updated policy on this page with a revised effective date
- Notify you by email where the changes are significant and we hold your email address
- Display a prominent notice on our website for a reasonable period following the update
We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of our websites following the posting of changes constitutes your acceptance of those changes.
Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us using any of the following methods. We aim to respond to all privacy-related enquiries within 5 business days.