Privacy Policy
Zepel is a B2B platform connecting European, UK, and US fashion brands with pre-vetted, sustainable textile manufacturers in Pakistan. We are committed to protecting your privacy and ensuring transparency in how we collect, use, and protect your personal data.
This Privacy Policy explains how we handle personal information of our two primary user groups:
- Brands and Buyers (based in the UK, Europe, and the US)
- Manufacturers and Suppliers (based in Pakistan and surrounding regions)
We comply with international privacy regulations including:
- The EU General Data Protection Regulation (GDPR)
- The UK Data Protection Act 2018
- Applicable US privacy laws (for brands using our platform)
- Pakistan’s Personal Data Protection Bill (proposed) and general data protection principles
By using our website https://www.zepel.co (“Website”), you agree to the terms of this Privacy Policy.
Information we collect
We collect information that helps us connect brands with manufacturers, process requests, and improve our services.
A. Information You Provide Directly
When you:
- Register as a Brand or Manufacturer
- Submit a form (e.g. Start a Project, Join our Supplier Network, Drop us a Message, or Book a Consultation)
- Subscribe to our newsletters or expo updates, we may collect:
- Full name, company name, and designation
- Business email and phone number
- Company address and country
- Sourcing or production requirements (e.g. category, MOQ, preferred delivery timeline)
- Portfolio or factory information (for manufacturers)
- Any additional information you choose to provide
B. Automatically Collected Information
When you use our website, we may automatically collect:
- IP address and device information
- Browser type and operating system
- Pages visited and duration of visit
- Referring URLs and cookies
How Do We Use Your Information
We use your personal data for the following legitimate business purposes:
- To connect brands with verified manufacturers
- To facilitate project requests and logistics support
- To communicate updates, respond to inquiries, and manage relationships
- To send expo news, newsletters, and promotional materials (only if you opt in)
- To improve platform functionality and user experience
- To comply with legal obligations and enforce our terms.
Legal Basis for Processing (GDPR Compliance)
For users in the European Union and United Kingdom, we process personal data under the following legal bases:
- Performance of a Contract: When we provide sourcing, supplier matching, or logistics services
- Consent: For marketing communications, newsletters, or expo updates
- Legitimate Interests: For improving our platform and ensuring service quality
- Legal Obligation: When required by law or to respond to legal requests
Data Sharing and International Transfers
Zepel operates between Pakistan, the UK, Europe, and the US. To deliver our services, we may share limited data with:
- Verified manufacturing partners (for brands)
- Verified brand clients (for manufacturers)
Third-party logistics partners (e.g., Pioneer Supply Chain, Pioneer Express) - Technology and analytics providers (website hosting, CRM, email delivery, etc.)
Whenever we transfer your data internationally (including to Pakistan), we ensure:
- Adequate safeguards under Standard Contractual Clauses (SCCs) or equivalent mechanisms
- Processing only for legitimate and agreed-upon purposes
- Reasonable technical and organizational security measures
Data Retention
We retain your information only as long as necessary to:
- Fulfill our contractual or business obligations
- Comply with legal and accounting requirements
- Support business analytics or platform improvements
After this period, data will be securely deleted or anonymized.
Cookies and Tracking Technologies
Our website uses cookies and similar technologies to:
- Improve functionality and performance
- Analyze website traffic
- Remember user preferences
- Enable remarketing (where permitted by law)
You can manage or disable cookies in your browser settings. For more information, see our Cookie Policy (to be added if separate).
Data Security
We implement reasonable security measures, including:
- Secure servers and encrypted data transmission (SSL)
- Restricted access to sensitive data
Regular monitoring for vulnerabilities
However, no digital platform is 100% secure. Users are responsible for maintaining confidentiality of their account credentials.
Know Your Rights (EU, UK, and US Users)
You have the following rights under applicable privacy laws:
- Access – Request a copy of your personal data
- Correction – Request corrections to inaccurate or incomplete data
- Deletion – Request erasure of your data (“right to be forgotten”)
- Objection – Object to data processing or marketing communications
- Data Portability – Request transfer of your data to another service provider
To exercise your rights, please contact us at contact@zepel.co.
Rights of Pakistani Users
Manufacturers and suppliers based in Pakistan can request:
- Access to their submitted business and contact data
- Corrections or updates to factory or contact details
- Removal of their data upon account termination
Requests can be made via contact@zepel.co.
Third-Party Links
Our website may contain links to external websites or partner platforms. We are not responsible for the privacy practices or content of these third-party sites.
Children’s Privacy
Our platform is strictly for business-to-business use and not intended for children under 18. We do not knowingly collect personal data from minors.
Updates to this Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. Updates will be posted on this page with a new “Last Updated” date.
