Privacy policy

Last updated: 24 October 2026

The short version

• We collect only what you send us, plus the technical data any website needs to run safely.
• We use it to answer you, to make your order and to see which pages bring quote requests.
• We do not sell your personal data, and never will: not to advertisers, data brokers or anyone else. We do not rent or trade it either, and we never use it for advertising.
• We apply the Swiss Federal Act on Data Protection, one of the strictest privacy laws in the world, to everyone’s data, wherever you live. Where the EU or UK General Data Protection Regulation also covers you, we follow it as well.
• This website and our email are hosted in Switzerland, under Swiss data protection law.
• Google Analytics runs only if you say yes, and you can change your mind at any time. Our content delivery network counts page views without cookies, whatever you choose.
• Your designs, tech packs and prices stay confidential.
• What you ask Hoolock, our AI assistant, is saved for 12 months so we can improve our answers and reply to you.
• You can ask us to show, correct or delete your data, and we answer within one month.

Who we are

CMB Sourcing Ltd., BSCIC Industrial Area, Narayanganj 1420, Bangladesh, is responsible for your personal data on this website (clothingmanufacturerbangladesh.com) and in our correspondence with you. For anything about privacy, email hello@clothingmanufacturerbangladesh.com.

What we collect

When you send the quote form, or a request through Hoolock: your name, company, email address, phone or WhatsApp number, the country you sell in, and what you tell us about your product: category, quantity range and your message, which may include fabric, timing and a link to your tech pack. The website does not keep your form in a database; it is sent to our inbox as an email.

Where your request came from: when you send the quote form, or a request through Hoolock, your browser also sends the page you came to the form from; the address of the page your browser loaded, which is often the page where you arrived on this site, with any campaign tag in it such as utm_source; and the website that linked you here, if your browser shares it. We use this only to see which pages and sites bring buyers to us. It is read at the moment you press send; nothing is stored on your device for it.

When you use Hoolock, our AI assistant: each question you type and the answer it gives, including anything you choose to write in your questions, such as your name, email address or phone number; the page you asked on; the pages the answer linked to; and the country you are in, as reported by our content delivery network. We do not save your IP address or browser details with it. See Hoolock, our AI assistant.

When you email, call or message us: whatever you choose to include, and the files you attach.

When you browse: your IP address, browser and device type, the pages you request and the time, recorded by our hosting and delivery providers for security and to keep the site running. If you accept analytics, Google Analytics also records how you use the site; see below.

We do not ask for, and do not want, payment card details, passwords or sensitive personal data through this website. There are no user accounts.

Why we use it, and the legal basis

We hold everyone’s data to the standard of the Swiss Federal Act on Data Protection, whatever law applies where you live. Where the UK or EU General Data Protection Regulation, the Swiss Act or a similar law applies to you, we rely on these legal bases:

• Steps before and during a contract: answering your enquiry, preparing quotations, and running samples, orders and shipments.
• Legitimate interests: keeping business correspondence, learning which pages and sites bring quote requests, reading what people ask Hoolock so we can improve our answers and pages and reply to them, and protecting the website and our inbox from abuse and spam.
• Consent: Google Analytics, loading the Google map, and letting the YouTube video play by itself. You can withdraw consent at any time.
• Legal obligation: keeping export, customs, tax and accounting records.

We make no automated decisions about you, and we do not build marketing profiles.

Who helps us process it

We use a small number of providers, each bound by a data processing agreement or its published terms to use your data only to provide its service to us. We describe each by the service it provides rather than by name; if you ask about your own data, we tell you which company holds it.

When you place an order, we share the details needed to make and ship it with the factory producing it, testing laboratories and logistics providers. If your order is made by our partner Collective Studio Ltd., it receives the order details it needs; the relationship is explained on our founders page. We share only what each one needs, never your contact list or your prices with another buyer.

Where the website lives

This website runs on a virtual private server hosted by a Swiss hosting company in Switzerland, and our email mailboxes are hosted there too. Switzerland has one of the strictest privacy laws in the world, the Federal Act on Data Protection, and is recognised by the European Union and the United Kingdom as providing adequate protection for personal data. Our host is bound by that law and does not use our data for its own purposes.

What we will never do

• Sell, rent or trade your personal data to anyone.
• Share your details with another buyer, or your prices with another brand.
• Add you to a marketing list you did not ask to join.
• Run advertising cookies or trackers on this site.

Google Analytics and Google Search Console

We use Google Analytics 4 to see which pages help buyers, so we can improve them. It only loads if you allow analytics in the cookie banner, and nothing is sent to Google if you choose “Necessary only” or ignore the banner. We have switched off Google signals and advertising personalisation, so the data is not used for ads, and Google Analytics 4 does not log or store IP addresses. We keep analytics data for no more than 14 months. Google Search Console is different: it reports to us, as totals, which searches led people to this site, using data Google already holds; it places nothing in your browser and tells us nothing about you as an individual. Google’s own use of data is described in its privacy policy.

Hoolock, our AI assistant

Hoolock is the assistant in the corner of every page. The first time you move, scroll or type on the site, the page asks our own server once whether the assistant is switched on, and remembers the answer for that tab. Nothing is sent to the AI provider until you type a question or press a suggested one. Your question, and the earlier messages in that conversation, are then sent from our server to our AI service provider, which passes them to the AI model we have configured, and the answer is streamed back to you. The assistant is limited to the content of this website, and the pages it used are linked under each answer.

• We save each question and answer in a database hosted in Frankfurt, Germany (EU), so we can read what buyers ask, improve our answers and pages, and reply to you if you left contact details. Saved with it: the page, the pages the answer linked to, your country as reported by our content delivery network, and a random number that groups one conversation. Not saved: your IP address or browser details.
• Only we can read the saved conversations. They are deleted automatically after 12 months.
• To have your conversation deleted sooner, email hello@clothingmanufacturerbangladesh.com with roughly when you used Hoolock and what you asked, so we can find it.
• Our server logs only counts and token totals per request, never the text.
• Your browser also keeps the conversation in that tab (session storage), so it survives moving between pages, until you close the tab.
• If you choose to turn a chat into a quote request, the form is pre-filled in your browser and nothing is sent until you press send.
• Do not type card numbers, passwords or other sensitive data into the assistant; it does not need them.
• Hoolock sets no cookies and runs without analytics consent, because nothing is sent to the AI provider until you ask it something.

Your cookie choices

When we use analytics, a banner on your first visit asks what you allow: necessary storage only, or also analytics and embedded maps and videos. We remember your answer for 12 months and then ask again. While analytics is off, nothing optional from Google loads unless you ask for it, such as the map on the contact page or the video on the homepage. You can change it at any time with Cookie settings, also linked at the bottom of every page. Withdrawing consent stops analytics straight away and deletes its cookies.

Cookies and local storage

We use no advertising or social media cookies. The only storage in your browser is listed below; anything beyond what is strictly necessary waits for your consent.

Transfers outside your country

We work from Bangladesh, our email and website server are in Switzerland, quote-form emails pass through Japan, and some providers are in the United States. Switzerland and Japan are recognised by the European Union and the United Kingdom as providing adequate protection. For transfers to the United States and other countries without that status, our providers rely on recognised safeguards: the EU–US Data Privacy Framework and its UK and Swiss extensions where the provider is certified, or standard contractual clauses approved by the European Commission.

How long we keep it

• Enquiries that do not become orders: up to two years from our last contact, then deleted.
• Order records: for as long as export, customs, tax and accounting law requires.
• Analytics data: no more than 14 months.
• Hoolock conversations: 12 months, then deleted automatically.
• Server and security logs: kept by our providers for their standard short periods.

Your designs and prices

Tech packs, patterns, artwork, fit comments and costings are used only for your orders, are never shown to another buyer, and are never used to make similar products for someone else.

How we protect it

The website is served only over encrypted HTTPS, with strict security headers. The quote form checks where requests come from, limits how often it can be used and filters spam. Access to enquiries is limited to the people who need them to serve you, and service passwords and keys are never stored in the website’s code.

Your rights

Depending on where you live, you can ask us to:

• show you the personal data we hold about you, and give you a copy;
• correct it, or delete it where we have no legal reason to keep it;
• restrict or object to how we use it;
• send it to you or another company in a common format;
• withdraw a consent you gave, without affecting what happened before.

Email hello@clothingmanufacturerbangladesh.com. We reply within one month and do not charge for it. If you are unhappy with our answer, you can complain to your data protection authority: the Information Commissioner’s Office in the UK, the authority in your EU country, or the Federal Data Protection and Information Commissioner in Switzerland.

Children

This website is for businesses. It is not aimed at children, and we do not knowingly collect their data.

Changes to this policy

When we change how we handle data, we update this page and the date at the top. Significant changes to how we use data you have already given us will not apply without telling you.