This Privacy Policy explains how GFR Enterprises ("GFR Enterprises", "we", "us", or "our") collects, uses, and protects personal data when you visit gfrenterprises.com (the "Site"). GFR Enterprises is an OEM/ODM manufacturer of custom sports gloves and motorsport gear, operating since 2009 and based in Sialkot, Pakistan. We are committed to handling your personal data responsibly and in accordance with applicable data protection law, including the UK GDPR and EU GDPR where they apply to you.
This policy should be read together with our Cookie Policy and Terms & Conditions.
- Registered address: FFJR+488, 2 KM Ugoki Rd, New Adalatgarh, Sialkot, Punjab 51310, Pakistan
- Contact email: info@gfrenterprises.com
1. What data we collect
Contact and quote form submissions
When you complete our contact or quote request form, we collect the personal data you provide, which may include your name, company name, email address, phone number, and the content of your message or enquiry (including any product details or specifications you choose to share). We use this data solely to respond to your enquiry and, where applicable, to prepare and discuss a quote.
Live chat
Our Site offers a live chat feature provided by Tidio. If you start a chat, we process the messages you send, along with any name or email address you choose to provide in the conversation, and certain technical data needed to operate the chat (such as your approximate location and device information). Please do not share sensitive personal information through chat.
Analytics data
With your consent, we use Google Analytics 4 to understand how visitors find and use the Site. This includes data such as pages visited, time spent on the Site, referring source, device and browser type, and approximate (country- or region-level) location. We do not collect precise location data and do not use analytics to identify you personally.
Technical and hosting data
Our hosting provider processes certain technical data automatically as part of delivering the Site securely, including your IP address, browser type, operating system, and the pages you request. This data is used for security, reliability, and performance, and is handled by our hosting provider as our processor.
2. How we use your data
- To respond to your enquiries and prepare quotes;
- To operate our live chat and communicate with you;
- To understand how the Site is used and to improve it (with your consent);
- To measure the effectiveness of our advertising (with your consent);
- To maintain the security, integrity, and performance of the Site; and
- To comply with applicable legal obligations.
We do not use your data for automated decision-making or profiling that produces legal or similarly significant effects. We do not sell your personal data. We do not send marketing emails without your explicit consent.
3. Lawful bases for processing
Under the UK/EU GDPR, we rely on the following lawful bases:
- Legitimate interests: To respond to business enquiries submitted through our forms and live chat, and to operate our Site securely. Our legitimate interest is to run our business effectively, keep the Site safe, and respond to potential customers.
- Consent: For analytics and advertising-measurement cookies. These are denied by default and are only used after you consent. You may withdraw consent at any time (see below). Our live chat is treated as a functional service you actively request (see legitimate interests above), so it is available without accepting analytics or marketing cookies.
- Legal obligation: Where we are required to retain or disclose data to comply with applicable law.
4. Cookies and consent
We use a small number of cookies and similar technologies. When you first visit the Site, our own cookie consent banner asks you to make a choice. We use Google Consent Mode v2, which means analytics and marketing tags load in a consent-aware state and are only permitted to store or read cookies once you have granted the relevant category. Your choice is stored locally in your browser under gfr-consent-v1.
You can change or withdraw your consent at any time by selecting "Cookie Preferences" in the footer of any page. Withdrawing consent does not affect the lawfulness of processing carried out before you withdrew it.
Full details of the cookies we use, the categories, and the choices available to you are set out in our Cookie Policy.
5. Third-party processors
We use the following third-party services, which may process your data on our behalf or under their own terms:
- Vercel (vercel.com) — our website hosting platform. Vercel serves the Site, manages secure (HTTPS/TLS) connections, and may process your IP address and technical request data as part of normal hosting operations, acting as our processor.
- Google Analytics 4 (Google Ireland Limited / Google LLC) — website analytics, used with your consent to understand how the Site is used.
- Google Ads (Google Ireland Limited / Google LLC) — advertising conversion measurement, used with your consent to record when a visit leads to an enquiry.
- Tidio (tidio.com) — our live chat provider, which processes the messages and contact details you share in chat, along with technical data, as our processor.
- Resend (resend.com) — our email delivery service. When you submit a contact or quote form, the form data is transmitted through Resend's infrastructure to reach our inbox. Resend acts as our processor.
We also use Keystatic, an internal content management tool, to publish and maintain the Site's content. It is not a visitor-facing data collection tool.
We do not share your personal data with any other third parties without your consent, except where required by law. You can review how Google uses information from sites that use its services.
6. Data retention
We retain contact and quote form submissions for as long as is necessary to respond to your enquiry and for a reasonable period thereafter in case of follow-up — typically up to 12 months, or longer where an ongoing business relationship or a legal obligation requires it. Live chat transcripts are retained for a limited period to provide support and are subject to Tidio's retention practices. Analytics data is retained according to our configured settings in Google Analytics. Technical logs are subject to our processors' own retention policies.
If you ask us to delete your data, we will do so promptly, subject to any legal retention obligations.
7. Your rights
Depending on your location, you may have the following rights in relation to your personal data:
- Right of access — request a copy of the personal data we hold about you;
- Right to rectification — ask us to correct inaccurate or incomplete data;
- Right to erasure — ask us to delete your personal data, subject to legal retention obligations;
- Right to restriction — ask us to restrict processing in certain circumstances;
- Right to data portability — where applicable, request a copy of your data in a machine-readable format;
- Right to object — object to processing based on our legitimate interests; and
- Right to withdraw consent — where we rely on consent, withdraw it at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, contact us at info@gfrenterprises.com. We will respond within one month. If you are in the UK or EU and believe we have not handled your data properly, you also have the right to lodge a complaint with your local data protection authority.
8. International transfers
GFR Enterprises is based in Sialkot, Pakistan. If you are located in the UK or EU, the personal data you submit — for example through a form or live chat — will be transferred to and processed in Pakistan. Our third-party processors (Google, Vercel, Tidio, and Resend) may also process data in other countries under their own data-processing terms and safeguards. We take reasonable steps to ensure your data remains protected wherever it is processed.
9. Security
We take reasonable technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. The Site is served over HTTPS, and form submissions are transmitted securely. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.
10. Children
The Site is directed at businesses and is not intended for children. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.
11. Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our practices or the law. The current version is always available at gfrenterprises.com/privacy-policy/, and the "Last updated" date above indicates when it was last revised.
12. Contact
If you have any questions about this Privacy Policy or how we handle your personal data, contact us:
- Email: info@gfrenterprises.com
- Address: FFJR+488, 2 KM Ugoki Rd, New Adalatgarh, Sialkot, Punjab 51310, Pakistan