Zonex Global ("we", "us", "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, share, and protect personal data in connection with our website (zonexglobal.ltd) and our business process outsourcing services.
This policy is compliant with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. If you are based in the European Union, the EU GDPR also applies where relevant. Please read this policy carefully. By using our website or engaging our services, you acknowledge that you have read and understood this policy.
Who We Are
The data controller responsible for your personal data is:
Zonex Global
SECP Registered Company
Islamabad & Karachi, Pakistan
Email: info@zonexglobal.ltd
Phone: +92 321 479 7802
As a data controller, we determine the purposes and means of processing your personal data. Where we process personal data on behalf of our business clients (as a data processor), those clients remain the data controller and their own privacy policies apply to their customers' data.
Data We Collect
We may collect and process the following categories of personal data:
| Category | Examples | Source |
|---|---|---|
| Identity Data | First name, last name, job title | Directly from you |
| Contact Data | Email address, telephone number, company name | Directly from you |
| Business Data | Company details, industry, service requirements | Directly from you |
| Communications Data | Enquiry content, email correspondence, call records | Directly from you |
| Technical Data | IP address, browser type, operating system, pages visited | Automatically via cookies |
| Usage Data | How you use our website, time spent, links clicked | Automatically via analytics |
| Financial Data | Billing address, payment reference (not card details) | Directly from you or your bank |
We do not knowingly collect any special category data (such as health information, racial or ethnic origin, religious beliefs, or biometric data) through our website. If such data is required in the course of providing Services, it will be subject to a separate Data Processing Agreement.
How We Collect Your Data
We collect personal data through the following means:
- Enquiry and contact forms on our website when you submit a request for information or quotation;
- Direct correspondence including email, telephone, WhatsApp, or other communication channels;
- Contract execution when you sign a Statement of Work or service agreement;
- Cookies and tracking technologies when you browse our website (see Section 10);
- Third-party sources such as LinkedIn, business directories, or referrals from existing clients;
- Publicly available sources such as company registration databases.
How We Use Your Data
We use your personal data for the following purposes:
- To respond to enquiries and provide information about our Services;
- To provide and manage our Services under a contract with you or your company;
- To issue invoices and process payments for Services rendered;
- To manage our relationship with you, including sending service updates, renewal notices, and account communications;
- To send marketing communications about our Services, industry news, and relevant updates — only where you have given consent or we have a legitimate interest to do so;
- To improve our website and Services through analytics and usage data;
- To comply with legal and regulatory obligations, including accounting, tax, and anti-money laundering requirements;
- To protect our legitimate business interests, including fraud prevention, debt recovery, and the defence of legal claims.
Legal Basis for Processing
Under the UK GDPR, we must have a lawful basis for processing your personal data. We rely on the following bases:
| Purpose | Legal Basis |
|---|---|
| Responding to your enquiry | Legitimate interests (to respond to business enquiries) |
| Performing a contract / providing Services | Contract performance (Article 6(1)(b) UK GDPR) |
| Invoicing and payment collection | Contract performance & Legal obligation |
| Marketing communications to existing contacts | Legitimate interests (soft opt-in) |
| Marketing to new contacts (email/newsletter) | Consent (Article 6(1)(a) UK GDPR) |
| Compliance with legal obligations | Legal obligation (Article 6(1)(c) UK GDPR) |
| Fraud prevention and debt recovery | Legitimate interests (Article 6(1)(f) UK GDPR) |
| Website analytics and improvement | Legitimate interests / Consent (for cookies) |
Where we rely on legitimate interests, we have balanced our interests against your rights and determined that our interests do not override your fundamental rights and freedoms. You have the right to object to processing on this basis at any time (see Section 9).
Where we rely on consent, you may withdraw your consent at any time by contacting us at info@zonexglobal.ltd. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.
Data Sharing
We do not sell, rent, or trade your personal data to any third party. We may share your personal data with:
- Service providers and processors who assist us in operating our business, including IT infrastructure providers, cloud storage providers, email service providers, and payment processors — all bound by data processing agreements;
- Professional advisers including solicitors, accountants, and auditors, under obligations of confidentiality;
- Law enforcement or regulatory authorities where required by applicable law, court order, or government request;
- Prospective buyers or investors in the event of a merger, acquisition, or sale of all or part of our business, subject to appropriate confidentiality undertakings.
We require all third parties to respect the security of your personal data and to treat it in accordance with applicable data protection law. We do not allow third parties to use your personal data for their own marketing purposes.
International Data Transfers
Zonex Global is based in Pakistan. When we receive personal data from clients based in the UK or European Economic Area (EEA), we ensure that appropriate safeguards are in place to protect your data in accordance with UK GDPR requirements.
Transfers of personal data from the UK to Pakistan are subject to the UK's International Data Transfer Agreement (IDTA) or Standard Contractual Clauses (SCCs) where applicable. By engaging our Services, you acknowledge and agree to this transfer.
Where we use third-party service providers based outside the UK or EEA, we ensure appropriate safeguards are in place, such as SCCs or adequacy decisions, before transferring any personal data.
Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, regulatory, accounting, and reporting requirements.
| Data Type | Retention Period |
|---|---|
| Client contract and SOW data | 7 years after contract end (for tax and legal purposes) |
| Invoice and payment records | 7 years (HMRC / legal requirement) |
| Enquiry and correspondence data | 3 years from last contact |
| Call recordings (if applicable) | As specified in SOW; maximum 12 months unless legally required |
| Marketing contact data | Until consent withdrawn or 3 years from last engagement |
| Website analytics data | 26 months (aggregated/anonymised thereafter) |
When personal data is no longer required, we securely delete or anonymise it. Where secure deletion is not immediately possible (for example, data in backup archives), we isolate it from further processing until deletion is possible.
Your Rights
Under UK GDPR, you have the following rights in relation to your personal data. These rights are not absolute and may be subject to certain conditions and exemptions:
To exercise any of these rights, please contact us at info@zonexglobal.ltd. We will respond to all legitimate requests within 30 days. Where requests are complex or numerous, we may extend this period by a further two months, notifying you accordingly.
We may need to verify your identity before processing a request. We will not charge a fee for exercising your rights unless requests are manifestly unfounded, excessive, or repetitive.
Cookies
Our website uses cookies and similar tracking technologies to improve your experience and analyse how our site is used.
| Cookie Type | Purpose | Duration |
|---|---|---|
| Strictly Necessary | Essential for the website to function. Cannot be disabled. | Session |
| Analytics | Help us understand how visitors interact with our website (e.g. Google Analytics). Data is anonymised. | Up to 26 months |
| Functional | Remember your preferences such as language and region. | Up to 12 months |
| Marketing | Used to deliver relevant advertisements. Only set with your consent. | Up to 12 months |
You can manage or disable cookies at any time through your browser settings. Please note that disabling certain cookies may affect the functionality of our website. For more information about cookies and how to manage them, visit allaboutcookies.org.
Children's Privacy
Our website and Services are directed at businesses and professionals. We do not knowingly collect personal data from individuals under the age of 18. If you believe we have inadvertently collected personal data from a minor, please contact us immediately at info@zonexglobal.ltd and we will take prompt steps to delete such data.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. The date at the top of this page indicates when this policy was last revised.
Where changes are material, we will notify active clients by email. We encourage you to review this policy periodically to stay informed about how we protect your data. Your continued use of our website or Services after any changes constitutes your acceptance of the updated policy.
Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or how we handle your personal data, please contact us:
Zonex Global — Data Privacy
Email: info@zonexglobal.ltd
Phone: +92 321 479 7802
Website: zonexglobal.ltd
If you are not satisfied with our response, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO):
Information Commissioner's Office (ICO)
Website: ico.org.uk
Helpline: 0303 123 1113
This Privacy Policy was last reviewed and updated on 1 July 2025. It is compliant with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.