1. Who we are
This policy explains how XPORTYN (PRIVATE) LIMITED (“XPORTYN”, “we”, “us”), a custom sportswear manufacturer based in Hafizabad and Sialkot, Punjab, Pakistan, handles personal information when you visit xportyn.com, browse our Shop, request a quote, place an order, use our customer portal, or interact with us on Facebook and Instagram.
We are the data controller for the information described here. Contact us at info@xportyn.com with any privacy question.
2. Information we collect
Information you give us
- Contact details — name, email, phone/WhatsApp number, club or company name, country and shipping/billing address.
- Order details — products, quantities, size breakdowns, player names and numbers, colours, logos and artwork you upload.
- Payment information — invoice records and, if you pay by bank transfer, the transaction ID, transfer date, sender name/bank and the receipt you upload. We never receive or store your full card number; card payments are handled by our payment provider (Payoneer).
- Communications — messages, emails, calls and feedback you send us.
- Customer portal account — login email and an encrypted (hashed) password.
Information collected automatically
- Device and usage data such as IP address, browser type, pages viewed and referring pages.
- Cookies and similar technologies — see Cookies & advertising.
Information from third parties
If you contact us through Facebook, Instagram or a marketplace, we receive the information you choose to share there. Independent Sales Representatives (ISRs) may introduce you to us with your business contact details.
3. How we use your information
| Purpose | Legal basis |
|---|---|
| Preparing quotations, design mock-ups and samples | Steps taken at your request before a contract |
| Manufacturing, shipping and supporting your order | Performance of a contract |
| Invoicing, verifying payments and keeping accounting records | Contract and legal obligation |
| Preventing fraud and securing our systems | Legitimate interests |
| Improving our website, products and service | Legitimate interests |
| Sending marketing emails and measuring ads | Consent (you can withdraw at any time) |
6. How long we keep information
- Quote requests that don’t become orders — up to 24 months, then deleted or anonymised.
- Orders, invoices and payment records — as long as tax and accounting law requires (typically 6–10 years).
- Uploaded artwork and logos — for the life of your account so we can re-order your kit, unless you ask us to delete them.
- Bank-transfer receipts — stored privately and kept with the related payment record.
7. How we protect information
We use encryption in transit (HTTPS), hashed passwords, role-based access so staff only see what their job requires, two-factor authentication for staff accounts, audit logging and private storage for payment receipts. No system is perfectly secure, but we work to protect your information and will notify you and the relevant authorities of a breach where the law requires.
8. International transfers
We are based in Pakistan and serve clubs worldwide, so your information may be processed in Pakistan and in countries where our service providers operate. Where required, we use appropriate safeguards such as standard contractual clauses for transfers out of the UK, EEA or other regions with transfer restrictions.
9. Your rights
Depending on where you live (for example under the GDPR, UK GDPR or US state privacy laws) you may have the right to:
- access the personal information we hold about you and get a copy;
- correct inaccurate information or complete incomplete information;
- ask us to delete your information (subject to records we must keep by law);
- object to or restrict certain processing, including direct marketing;
- withdraw consent at any time, without affecting earlier processing;
- receive your information in a portable format; and
- complain to your local data protection authority.
To exercise a right, email info@xportyn.com with the subject “Privacy request”. We respond within 30 days and may need to verify your identity. We will not discriminate against you for exercising your rights.
10. Children
Our services are intended for businesses, clubs and adults. We don’t knowingly collect personal information from children under 16. Where a club orders kits with junior players’ names or numbers, the club is responsible for having the authority to share them with us, and we use them only to produce the order.
11. Changes to this policy
We may update this policy from time to time. The “Last updated” date shows the latest version; material changes will be highlighted on this page or emailed to portal account holders. See also our Terms of Service.