Privacy notice

The controller of your personal data is Trishakti Apparel, Gaida Chowk, Ward-6, Gaindakot, Nawalparasi (East), Gandaki Province, Nepal. For any privacy question or request, email export@trishaktiapparel.com.

We only collect what you choose to send us, plus the minimum technical data needed to run a secure website.

• “Need help?” assistant: if you ask it to send prices, our REX number, our line sheet, a duty comparison, a duty alert, a video call or a reply, the email address or WhatsApp number you give, your name and company if you add them, the product, quantity, market or preferred time you choose, the comparison you were looking at, the questions you asked in that conversation, the page you were on and your country (worked out from your connection).
• Contact form: your email address, your message and any tech packs or files you upload.
• Sample kit order: your name, company, email, phone or WhatsApp number, delivery address, VAT/EORI number if you give one, and your product and size choices.
• Enquiries from buyers in Nepal: your name, phone number or email, organisation if you add it, the products and quantities you ask about, and your message.
• Where your visit came from: with each enquiry or order above, the page your visit started on, the name of the website that sent you (such as google.com) and any campaign tags in the link you followed (such as utm_source). Until you send a form, this is kept only in your browser tab, which forgets it when you close the tab. If you accepted cookies and came from one of our Google ads, we also keep that ad click’s ID. We upload it to Google Ads only for enquiries we have marked as real buyers, so Google can tell which of our ads work, and never with your name or contact details.
• Job applications (careers page): your name, phone number, email if you give it, where you live, the work area and experience you choose, what you write, and your CV if you upload one. See Job applications below.
• Technical data: your IP address and browser details are processed by our hosting and anti-spam services to deliver the site and block abuse.
• If you contact us directly by email or WhatsApp, we receive whatever you send through that channel.

• To reply to your inquiry, send the prices you asked for and prepare a quote.
• To email you our REX number, line sheet or a duty comparison when you ask for them, and to arrange a video call.
• If you sign up for duty alerts: to email you news about Nepal’s least-developed-country graduation and what it means for your market. Every alert email has an unsubscribe link.
• To process a sample kit order.
• To consider you for work at our factory, if you send a job application.
• To keep the website secure, prevent spam and understand, in aggregate, how the site is used.
• To learn which pages, websites and campaigns bring enquiries from real buyers, and, if you accepted cookies, to tell Google Ads which of our ads did.

Where the EU GDPR or UK GDPR applies, we rely on the following legal bases:

• Steps prior to entering a contract — sending prices, quotes and sample kits, at your request.
• Legitimate interests — replying to business inquiries, keeping the site secure, measuring site use without cookies and recording where an enquiry came from.
• Consent — duty-alert emails, which you ask for and can stop with the unsubscribe link in each one; and Google Analytics, Microsoft Clarity and the Google Ads click ID, which are only used if you accept cookies. You can withdraw consent at any time.

We do not sell your data or use it to show you ads. We use these service providers:

• Cloudflare — website hosting, database and file storage (D1, KV and R2), Turnstile anti-spam checks, and cookieless Web Analytics.
• Resend — sending transactional emails, such as inquiry confirmations and the REX number email you request.
• Anthropic — its Claude AI writes an answer when the “Need help?” assistant has no ready answer. It receives only the text of your questions, not your name or contact details.
• Ahrefs Web Analytics — cookieless, aggregate site statistics.
• Microsoft Clarity — session analytics, loaded only after you accept cookies.
• Google Analytics — visit statistics, loaded only after you accept cookies. Google signals and ad personalisation are switched off.
• Open-Meteo — the Gaindakot weather widget; no personal data is sent.
• The “Need help?” assistant first answers in your browser from our own published answers. If it has no ready answer, the text of your question (and up to three earlier questions from the same conversation) is sent to Anthropic’s Claude AI, which writes a short answer using only our published answers; these answers are marked as AI. If neither can answer, the conversation so far (your questions and the helper’s replies) is emailed to our export team so we can add answers; it carries no name or contact details unless you typed them into the chat. Please don’t type personal details into a question. We count which topics are used, and questions it cannot answer are stored anonymously (first 80 characters, no name or email). If you leave your contact in the assistant, your questions from that conversation are sent to our export team with it so a person can reply.
• Maps — the map on the contact page is an image stored on our own site (map data © OpenStreetMap contributors), so nothing is loaded from Google or OpenStreetMap. Google Maps opens only if you click “Open in Google Maps” or “Get directions”.
• Google — internal storage of our price sheet; and Google Ads, which receives an ad click’s ID and the time of the enquiry, only if you accepted cookies and only for enquiries we have marked as real buyers. Apart from that and Google Analytics, which also runs only if you accept cookies, your personal data is not sent to Google through this website.

Applications are kept separately from buyer enquiries. Your details and CV are stored privately in our website database and file storage (Cloudflare), are never published and are not used for analytics or marketing. Only the people at Trishakti Apparel who handle hiring can open them; a CV can only be downloaded through a private link that expires. We use your application only to consider you for work and to contact you about it. We keep it for as long as it may be useful to consider you for a suitable opening, and delete it, including your CV, whenever you ask: email export@trishaktiapparel.com or call us.

• Leads (helper contacts, contact-form messages and sample-kit orders): deleted after 24 months.
• Duty-alert sign-ups: until you unsubscribe, and at most 24 months.
• Uploaded files (such as tech packs): deleted after 24 months.
• Emails to export@ or np@ and our replies, which are also copied into our private website mailbox with their attachments: deleted from that mailbox after 24 months.
• Job applications and CVs: see Job applications; deleted at any time on request.
• If you place an order, contract and invoice records are kept for as long as tax and export law requires.

Cloudflare, Resend, Anthropic, Microsoft and Google may process data outside the European Economic Area and the UK. Where they do, the transfer is protected by standard contractual clauses (and the UK addendum where relevant).

Depending on where you live, you have the right to:

• Access the personal data we hold about you.
• Have inaccurate data corrected.
• Have your data deleted.
• Object to processing based on our legitimate interests.
• Withdraw consent at any time, without affecting processing already carried out.
• Complain to a data protection supervisory authority, such as the ICO in the UK or the authority in your EU country.

• ts_contact — stored in your browser’s localStorage only after you leave a contact in the helper, so it can offer to reuse it instead of asking again. It stays on your device; clear your browser’s site data to remove it.
• ts_consent — stored in your browser’s localStorage to remember your cookie choice for six months, after which we ask again.
• ts_lang — a cookie (and a localStorage copy) that remembers the language you chose, for one year, so the home page opens in that language next time.
• ts_v — a session cookie, deleted when you close your browser, that marks a visit as started so the site does not switch language on you mid-visit. ts_auto — a five-minute cookie set only when we open a language version for you, so the language panel can tell you why.
• ts_news and ts_langp — stored in your browser’s localStorage to remember that you’ve seen the duty note or the language suggestion, so they are not shown again. If you switch language while filling in a form, what you typed is kept in sessionStorage (ts_forms) for that tab only, so it is not lost.
• ts_dest — stored in your browser’s localStorage when you choose where you are sourcing for, so the home page shows that destination’s buying guide in any language. ts_site — a one-year cookie set when you choose our international site from the Nepal page, so the home page doesn’t send you back there.
• On your first visit to the home page, and to suggest a destination and language, we look up your country from your connection (via Cloudflare). Only the two-letter country code is used; it is kept in your browser for the session (sessionStorage, ts_cc and ts_dest_ip) so it isn’t looked up again, and we do not store it. Our own statistics record which destination was suggested or chosen, never your IP address.
• ts_attr — kept in sessionStorage for that tab only, and deleted when you close it: where your visit came from (see What we collect). It is sent to us only with a form you submit.
• Google Analytics cookies (_ga and _ga_*, kept for up to two years) and Microsoft Clarity cookies — set only if you accept analytics cookies. If you later choose “No, thanks”, we delete the Google Analytics cookies.

Email export@trishaktiapparel.com from the address you used with us and tell us what you would like us to do. We may ask you to confirm your identity, and we aim to reply within one month. You can change your cookie choice at any time using the cookie settings link in the footer.

We will update this notice when our services or practices change, and show the date of the latest version here. Last updated: 13 October 2026.