Privacy policy

Short version: we collect what you type into an enquiry form, we use it to quote and supply you, and we do not sell it to anyone.

Site owner: this is a working draft, not legal advice. Before launch, have it reviewed against the jurisdictions you actually sell into at minimum GDPR if you take EU or UK enquiries, CCPA/CPRA if you have California visitors, and PIPEDA for Canada. Fill in the bracketed fields and confirm the retention periods match what your CRM and email host actually do.

Last updated: [date]. Data controller: [registered company name], Industrial Estate, Khewra Road, Jhelum, Punjab 49600, Pakistan. Contact: [privacy@thehimalayanpinksalt.com].

What we collect

Enquiry and quotation data the name, company, email, phone number, destination and requirements you enter into a form or send us by email or WhatsApp.
Transaction data for customers, the commercial documents required to trade: invoices, shipping documents, and the banking details needed to receive payment.
Technical data standard web server logs (IP address, browser, pages viewed) and analytics if enabled, described below.

We do not ask for and do not want special-category data. Please do not send it.

Why we hold it and on what basis

To respond to your enquiry and quote steps taken at your request prior to entering a contract.
To perform a contract producing, documenting and shipping your order.
Legal obligation export, customs, tax and food-safety record keeping.
Legitimate interest keeping a record of who we have quoted so we do not contradict ourselves six months later, and preventing fraud.

We do not add enquirers to a marketing list without a separate, explicit opt-in.

Who we share it with

Only where necessary to do the job you asked for: our freight forwarder and customs agent, the testing laboratory, our bank, and where required, the customs and food-safety authorities of the exporting and importing country. We do not sell data, and we do not share enquiry lists with other exporters.

Our website and email are hosted by [hosting provider] and [email provider], which means data may be processed in [countries]. Analytics, if enabled, is provided by [provider].

How long we keep it

Data	Retention	Why
Enquiries that did not become orders	[24] months	Follow-up and quote consistency
Customer commercial records	[7] years	Tax and export record-keeping law
Food-safety and traceability records	[5] years	HACCP and buyer traceability requirements
Server logs	[12] months	Security and troubleshooting

Your rights

Depending on where you are, you may have the right to access the data we hold about you, correct it, have it deleted, restrict or object to how we use it, and receive a copy in a portable format. Email [privacy@thehimalayanpinksalt.com] and we will respond within [30] days. If you are in the EU or UK you may also complain to your local supervisory authority.

Deletion has limits: we cannot delete a commercial or food-safety record we are legally required to keep for a fixed period. We will tell you which records those are.

Cookies and analytics

[Describe the actual cookie use here once the site is live. If you install analytics, list the provider, the cookies set, their lifetime, and provide a consent banner for EU and UK visitors. If you run no analytics and set no non-essential cookies, say that instead it is a simpler and better position.]

Security

Enquiry data is transmitted over TLS, stored in [system], and access is limited to staff who need it to quote or fulfil an order. No system is perfect; if we ever suffer a breach affecting your data, we will tell you and the relevant authority as required.

Changes

If we change this policy materially we will update the date at the top and, where the change affects how we use data you have already given us, contact you directly.