Privacy Policy

Last updated: June 10, 2026

1. Scope and Jurisdiction

Farez Pharma ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.

Depending on your location, different data protection laws may apply to you:

EU/EEA residents: The General Data Protection Regulation (GDPR) applies to you. See Section 8.
UK residents: The UK GDPR applies to you. See Section 9.
California residents: The California Consumer Privacy Act (CCPA/CPRA) applies to you. See Section 10.
Pakistan residents: The Pakistan Data Protection Act (PDPA) applies to you. See Section 11.
All other users: General data protection principles apply as described throughout this policy.

2. Information We Collect

Personal Information

We may collect personal information that you voluntarily provide when you:

Submit a contact or quote inquiry form (name, email, phone number, organization, address)
Communicate with us via email or phone

Automatically Collected Information

When you visit our website, we may automatically collect:

IP address and approximate geolocation (country/city level via Cloudflare CF-IPCountry header)
Browser type and device information
Pages visited and interaction data (only with your explicit consent where required)
Browser data for procurement list preferences (essential functionality)

3. How We Use Your Information

We use the collected information for:

Responding to your inquiries and quote requests
Processing and fulfilling orders
Improving our website and services
Complying with legal obligations
Analytics and marketing (only with your explicit consent where required by law)

4. Legal Basis for Processing

Our legal basis for collecting and using your personal information depends on your jurisdiction and the context:

Contractual necessity: To respond to your quote requests and inquiries
Consent: For analytics cookies and marketing tracking (GDPR, UK GDPR, PDPA)
Legitimate interests: To improve our website and ensure security
Legal obligation: To comply with applicable laws and regulations

5. Data Storage and Security

Your data is stored securely using industry-standard measures. We implement appropriate technical and organizational safeguards to protect your personal information against unauthorized access, alteration, disclosure, or destruction.

We retain your personal data only as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. When no longer needed, your data is securely deleted or anonymized.

We do not sell your personal information. We may share your data with:

Brevo (Sendinblue): Our email service provider for sending inquiry responses
Cloudflare: Our hosting and CDN provider
Google / Meta: Analytics and advertising services — only if you have given explicit consent (where required)
Legal authorities: When required by law or to protect our legal rights

7. Your Rights

Depending on your jurisdiction, you may have the right to:

Access: Request a copy of the personal data we hold about you
Rectification: Request correction of inaccurate data
Erasure: Request deletion of your personal data
Restriction: Request restriction of processing
Portability: Request transfer of your data to another service
Object: Object to processing based on legitimate interests
Withdraw consent: Withdraw consent at any time where processing is based on consent

To exercise any of these rights, contact us at [email protected]. We will respond within the timeframe required by your applicable law (typically 30 days).

If you are in the European Economic Area (EEA), the GDPR applies to your data. In addition to the rights listed in Section 7:

We process your data only when we have a valid legal basis as described in Section 4
You have the right to lodge a complaint with your local data protection supervisory authority
We do not use automated decision-making or profiling
Where we rely on your consent, you can withdraw it at any time without affecting the lawfulness of processing before withdrawal

If you are in the United Kingdom, the UK GDPR applies to your data. All the protections described in Section 8 (GDPR) apply equally to you. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO).

10. CCPA/CPRA (California Residents)

If you are a resident of California, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) apply to your data. In addition to the rights in Section 7:

Right to Know: You may request details about the categories and specific pieces of personal information we have collected about you
Right to Delete: You may request deletion of your personal information
Right to Opt-Out: We do not sell your personal information. However, if our practices change, you have the right to opt out of the sale or sharing of your data
Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights
Right to Correct: You may request correction of inaccurate personal information
Right to Limit Use of Sensitive Personal Information: We do not collect or process sensitive personal information for purposes other than those specified in this policy

11. PDPA (Pakistan Residents)

If you are in Pakistan, the Pakistan Data Protection Act (PDPA) applies to your data. In addition to the rights in Section 7:

Your data is processed in accordance with the principles of lawful, fair, and transparent processing
Personal data is collected only for specified, explicit, and legitimate purposes
We ensure data minimization — we only collect what is necessary
You have the right to file a complaint with the relevant Pakistani data protection authority

12. Cookies and Similar Technologies

We use cookies and similar technologies for essential functionality and, with your consent, for analytics and advertising. See our Cookie Policy for detailed information.

13. International Transfers

Your information may be transferred to and processed in countries other than your own (including Pakistan, France, the United States, and others). We ensure appropriate safeguards are in place:

EU/UK residents: We rely on Standard Contractual Clauses (SCCs) or adequacy decisions for international transfers
All users: We require our service providers to maintain equivalent levels of data protection

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page with an updated revision date. Where required by law, we may seek your consent to material changes.

15. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact our Data Protection Officer:

Email: [email protected]
Phone: +92 324 577-8860
Address: Office No. 4, Zainab Park, Near Zainabia Hospital, Multan Rd, Lahore, Pakistan

We will acknowledge receipt of your request within 5 business days and respond within the timeframe required by your applicable law.