Privacy notice

The controller of your personal data is Trishakti Apparel, Gaida Chowk, Ward-6, Gaindakot, Nawalparasi (East), Gandaki Province, Nepal. For any privacy question or request, email export@trishaktiapparel.com.

We only collect what you choose to send us, plus the minimum technical data needed to run a secure website.

• Quote form: your name, company, email address, country, WhatsApp number, your message, and any tech packs or files you upload.
• Trade Account signup: your name, company, company website, country, business email, role, WhatsApp number (optional), the products you are interested in and your expected volume.
• Sign-in: when you log in we email you a one-time code; we store the code briefly to check it.
• Technical data: your IP address and browser details are processed by our hosting and anti-spam services to deliver the site and block abuse.
• If you contact us directly by email or WhatsApp, we receive whatever you send through that channel.

• To reply to your inquiry and prepare a quote.
• To verify that Trade Account applicants are genuine businesses.
• To show trade prices to verified Trade Account holders.
• To give verified buyers access to our REX number for their customs paperwork.
• To keep the website secure, prevent spam and understand, in aggregate, how the site is used.

Where the EU GDPR or UK GDPR applies, we rely on the following legal bases:

• Steps prior to entering a contract — preparing quotes and giving Trade Account holders access to prices, at your request.
• Legitimate interests — replying to business inquiries, verifying buyers, keeping the site secure and measuring site use without cookies.
• Consent — Microsoft Clarity analytics, which only runs if you accept cookies. You can withdraw consent at any time.

We do not sell your data or use it for advertising. We use these service providers:

• Cloudflare — website hosting, database and file storage (D1, KV and R2), Turnstile anti-spam checks, and cookieless Web Analytics.
• Resend — sending transactional emails such as one-time codes and inquiry confirmations.
• Ahrefs Web Analytics — cookieless, aggregate site statistics.
• Microsoft Clarity — session analytics, loaded only after you accept cookies.
• Open-Meteo — the Gaindakot weather widget; no personal data is sent.
• The “Need help?” assistant runs in your browser from our own published answers; no AI service is involved. We count which topics are used, and questions it cannot answer are stored anonymously (first 80 characters, no name or email) so we can add answers.
• Google Maps — only if you click “Show map” on the contact page; Google may then set its own cookies. Until you click, nothing is loaded from Google.
• Google — internal storage of our price sheet; your personal data is not sent to Google through this website.

• Leads and Trade Accounts: deleted after 24 months of inactivity.
• Uploaded files (such as tech packs): deleted after 24 months.
• One-time sign-in codes: 10 minutes.
• Login sessions: 30 days.
• If you place an order, contract and invoice records are kept for as long as tax and export law requires.

Cloudflare, Resend and Microsoft may process data outside the European Economic Area and the UK. Where they do, the transfer is protected by standard contractual clauses (and the UK addendum where relevant).

Depending on where you live, you have the right to:

• Access the personal data we hold about you.
• Have inaccurate data corrected.
• Have your data deleted.
• Object to processing based on our legitimate interests.
• Withdraw consent at any time, without affecting processing already carried out.
• Complain to a data protection supervisory authority, such as the ICO in the UK or the authority in your EU country.

• ts_session — an HttpOnly session cookie, set only when you log in to a Trade Account. Strictly necessary.
• ts_lvl — a small cookie that tells the page which view to show (for example, whether you are signed in). It holds no personal details.
• ts_consent — stored in your browser’s localStorage to remember your cookie choice.
• ts_lang and ts_news — stored in your browser’s localStorage to remember the language you chose and that you’ve seen the duty note for your country, so the welcome card isn’t shown again. To show that card on your first visit we look up your country from your connection (via Cloudflare); only the two-letter country code is used, and it is not stored.
• Microsoft Clarity cookies — set only if you accept analytics cookies.

Email export@trishaktiapparel.com from the address you used with us and tell us what you would like us to do. We may ask you to confirm your identity, and we aim to reply within one month. You can change your cookie choice at any time using the cookie settings link in the footer.

We will update this notice when our services or practices change, and show the date of the latest version here. Last updated: 24 September 2026.