Last updated: 16 October 2026
1. Who we are
Apex Trade Solutions, Office No. 1 & 2, 1st Floor, Madina Center, Shahdra More, Sheikhupura Road, Lahore, Pakistan. Email apextradesolutions@hotmail.com, phone +92 370 3373689. We are the controller of the personal data described in this policy. Questions about privacy go to the same email address.
2. What we collect
We only collect what we need to answer you, quote and run your shipments:
- Quote requests: name, company, email, phone, and shipment details such as origin, destination, cargo description, HS code, weights, dimensions, dangerous-goods information and notes.
- Contact messages: name, company, email, phone, topic and your message.
- Shipping updates: your email address, if you subscribe.
- Customer portal accounts: name, email, company, a securely hashed password (we never see or store the password itself), sign-in times and the IP address used.
- Shipments: consignee and supplier contact details, addresses, references, milestones and documents such as invoices, packing lists, bills of lading and customs declarations.
- Technical data: IP address and browser information in server security logs, used to protect the site against abuse.
We do not use advertising or analytics trackers. The website sets one essential cookie only when you sign in to the customer portal, to keep you signed in securely. It is not used for tracking.
3. Why we use it and our legal bases
Where the GDPR applies (for example when you are in the EU), we rely on these legal bases:
- To prepare quotes and perform the services you book: steps taken at your request before a contract, and performance of the contract (GDPR Art. 6(1)(b)).
- To file customs declarations, keep tax and trade records and respond to authorities: legal obligation (Art. 6(1)(c)).
- To answer business enquiries, keep the website and portal secure and prevent fraud: our legitimate interests (Art. 6(1)(f)), which we balance against your rights.
- To send shipping updates by email: your consent (Art. 6(1)(a)), which you can withdraw at any time with the unsubscribe link or by emailing us.
In Pakistan we process data lawfully, fairly and only for these purposes, and we protect it against unauthorised access, interference and misuse as required by PECA 2016.
4. Who we share it with
We share personal data only when it is needed to move your cargo or run our business:
- Carriers, shipping lines, airlines and trucking companies that transport your goods.
- Licensed customs agents, and customs and tax authorities in Pakistan and Europe (for example through Pakistan Customs’ WeBOC system).
- Warehouse operators, port and airport handlers, insurers, and our own inspection auditors.
- Service providers that host our website and send our emails, under contracts that require them to protect the data.
- Authorities or courts when the law requires it.
We never sell personal data.
5. International transfers
Our business connects Europe and Pakistan, so personal data moves between them. Pakistan does not have an EU adequacy decision. When we transfer personal data from the EU to Pakistan or to service providers in other countries, we do so because it is necessary to perform the contract you asked for (GDPR Art. 49(1)(b) and (c)), or under the European Commission’s Standard Contractual Clauses where our providers offer them.
6. How long we keep it
- Quote requests and enquiries that do not lead to a booking: 24 months, then deleted.
- Customer, shipment and customs records and documents: for as long as customs and tax law in Pakistan and the EU requires, generally six years after the shipment, then deleted.
- Customer portal accounts: while the account is active, and deleted 12 months after it is closed.
- Email subscriptions: until you unsubscribe.
- Security and audit logs: 12 months.
7. How we protect it
The website and portal use HTTPS encryption. Passwords are stored as one-way hashes, access to customer data is limited to staff who need it, every change to shipments and documents is recorded in an audit log, and uploaded documents are stored outside the public website. Daily backups are kept for 14 days. Under PECA 2016, unauthorised access to information systems and unauthorised use of someone’s identity information are criminal offences, and we report attempts to the authorities.
8. Your rights
We give everyone the same rights, wherever they are:
- Access: ask for a copy of the personal data we hold about you.
- Correction: ask us to correct inaccurate data.
- Deletion: ask us to delete your data, unless we must keep it by law (for example customs records).
- Restriction and objection: ask us to limit or stop processing based on legitimate interests.
- Portability: receive the data you gave us in a common electronic format.
- Withdraw consent: for email updates, at any time.
Email apextradesolutions@hotmail.com to use these rights. We reply within one month. If you are in the EU you may also complain to the data protection authority in your country. In Pakistan you can report the misuse of your identity information to the competent cybercrime authority.
9. Children
Our services are for businesses. We do not knowingly collect personal data from anyone under 18.
10. Changes to this policy
We update this policy when our services or the law change. The date at the top shows the latest version. Significant changes are announced on this page.