25 October 2026
Privacy
We collect what you type into our forms, and we count visits without cookies. No tracking cookies, no advertising, no data sold or shared with anyone outside the two companies named here.
This page is written to be accurate about what the site actually does, but it has not been reviewed by a lawyer in either country. Have it checked before you rely on it, and confirm the retention period and the contact address marked below.
Who is responsible
Two companies operate this corridor and share responsibility for what you send us:
| Company | Responsible for | Address |
|---|---|---|
| Pakistani Commodities | Buyers in Pakistan | 1A/6, 5J, PECHS Extension Block 6, P.E.C.H.S., Karachi 74400, Pakistan |
| Wepronex Global Solutions | Buyers in Indonesia | Suite C, Level 42, Sahid Sudirman Center, Jl. Jend Sudirman Kav 86, Jakarta 10220, Indonesia |
If you are in Indonesia, Wepronex Global Solutions is the company that holds your data. If you are in Pakistan, Pakistani Commodities holds it.
What we collect
The quote form
Seven fields, all of which you type yourself: product, grade or specification, quantity, destination port, target month, incoterm, and your contact details. Nothing is pre-filled and nothing is inferred.
Four things are recorded by the server rather than asked of you: which desk the form was on, which language you were reading, the page you submitted from, and your browser's user-agent string, the name and version every browser sends with a request. The first three exist so we can answer you in the right language about the right trade.
If you tick the box to share your requirement, we may send its product, specification, quantity, destination country, month and Incoterm, under our own reference, to the suppliers on our enquiry board, and show its product and quantity on our open enquiries page. Never your name, company, port or contact details.
The halal path checker
Four fields, all of which you fill in yourself: the name of your halal certifier, your product category, a short description of the product, and your contact details. The server also records which language you were reading, the page you sent it from, and your browser's user-agent string.
It is stored with quote requests, in the same table, tagged as a halal check. We use it only to answer your question.
The corridor notes list
Your email address, the language you were reading, and the article you subscribed from. Nothing else.
The supplier listing form
Six fields, all of which you type yourself: company name, main product, monthly capacity, port of loading, certifications, and your contact details. The server also records which language you were reading, the page you sent it from, whether you are listing from Indonesia or Pakistan, and your browser's user-agent string.
Enquiry board accounts
Suppliers who create an account give us their company name, their own name, email address, phone or WhatsApp number, country, the products they supply, the language for their emails, and a password. We never store the password itself, only a scrambled form of it (a salted scrypt hash) from which it cannot be recovered.
We also record when the account was created, when its email address was confirmed, when the membership terms were accepted, when it last signed in, wrong passwords in a row (to lock sign-in after five), the membership dates and payments, and which enquiries we emailed it. A member's details are not shown to buyers or to other members.
Visit counts
We count visits with Vercel Web Analytics, the counting built into the service that hosts this site. It sets no cookies and does not store IP addresses. It tells a repeat visit apart by a code made from the request, and discards that code after 24 hours. For each page view it records the page, the site you came from, your country and city, and your type of device, browser and operating system. We also count a few actions: a tap on a WhatsApp, WhatsApp Channel or email link, a spec sheet download, and a form that reached its thank-you page. None of these carries anything you type. We see totals, never a person.
The site sets one cookie, and only for members of the enquiry board who sign in: it keeps them signed in for 30 days and holds no personal details. The only personal data we collect is what you type into one of our forms and send to us: a quote request, a halal check, a supplier listing, an enquiry board account or the corridor notes sign-up.
Where it goes
| Where | What | Location |
|---|---|---|
| Supabase | Quote requests, halal checks, supplier listings, enquiry board accounts and list subscriptions | Mumbai, India |
| Vercel | Serves the site; processes the form submission in transit | Global edge network |
| Vercel Web Analytics | Visit counts and the actions listed above, as totals, with no cookies and no IP address | Vercel's servers; Vercel is a United States company |
| Resend | Emails your enquiry or listing to the partners; sends members their enquiries, and their account and password emails | United States, where Resend keeps its sending logs |
Our database is in Mumbai, India. Your data does not go anywhere else, and we do not sell it, rent it, or pass it to any third party for their own purposes. A supplier listing is not shared with anyone outside the two companies named here, except a buyer we introduce you to.
How long we keep it
Quote requests: 24 months from the date of enquiry, so we can answer follow-up questions about a shipment and meet record-keeping expectations on a trade. Halal path checks are kept for the same 24 months, because they are stored with quote requests.
List subscriptions: until you unsubscribe. Every message carries an unsubscribe link.
Supplier listings: while we are working with you. We review the list once a year. Ask us to remove yours and we will.
Enquiry board accounts: while you are a member. When a membership ends we delete the account within 12 months, unless you join again. Ask us and we delete it sooner; invoices we have issued are kept as accounting records.
Indonesia — Law No. 27 of 2022
Indonesia's Personal Data Protection Law (Undang-Undang Nomor 27 Tahun 2022 tentang Pelindungan Data Pribadi) came into force on 17 October 2022, and its transition period ended on 17 October 2024. It applies to us because we process the data of people in Indonesia.
Under it you may ask us to show you the data we hold about you, correct it, delete it, withdraw a consent you have given, and object to how we are using it. You may also complain to the supervisory authority.
Our lawful basis for holding a quote request is that you sent it to us in order to enter into a contract. Our basis for the mailing list is your consent, which you can withdraw at any time. Our basis for an enquiry board account is the membership agreement you enter into when you sign up.
Pakistan
Pakistan does not currently have a comprehensive data protection law in force. A Personal Data Protection Bill has been in draft for several years and has not been enacted. The Prevention of Electronic Crimes Act 2016 covers certain offences involving data but is not an equivalent framework.
We are telling you this plainly rather than implying a protection that does not exist. In practice we apply the same handling to Pakistani enquiries as to Indonesian ones: same storage, same retention, same deletion on request. If and when Pakistan enacts a data protection law, we will update this page and say when we did.
How to get your data, or have it removed
Write to privacy@pakistanicommodities.com and say what you want done.
We will act within 30 days. If you ask us to delete a quote request we are actively working on, we will tell you what we cannot delete yet and why — for example, documents that have to accompany a shipment already at sea.
Security
The site is served over HTTPS only. Form submissions are processed server-side; the database is not reachable from the browser, and its access rules deny all read and write access except to the site's own server functions, which receive your enquiry or run your account. We do not store payment details of any kind. The only sign-in is for members of the enquiry board: passwords are stored as salted scrypt hashes, five wrong passwords in a row lock sign-in for 15 minutes, and a password reset link works once, for 60 minutes.
Changes
This page carries the date it was last changed at the top. If we change anything material we will say what changed rather than quietly reissue it.
16 October 2026. The table now says where Resend keeps its sending logs, the United States, where it said "only if enabled". The emails go to the partners, whose names are no longer on the contact page. The page is now also in Urdu, and its date is shown at the top as promised.
18 October 2026. The enquiry board: what members give us when they create an account, the one cookie that keeps them signed in, how long an account is kept, and how passwords are stored. Also the quote form's optional tick, to share a requirement with the board's suppliers without the buyer's name.
25 October 2026. We now count visits, and a few taps and forms, with Vercel Web Analytics, which sets no cookies and keeps no IP address. Until now this page said the site used no analytics. "Visit counts" and the table say what is recorded. The table and the paragraph under it also said our database is in Singapore. It is in Mumbai, India: the page was wrong, and the data has not moved.