Privacy Policy

1. Overview & B2B Privacy Commitment

At DR MIRZA Medical Instruments (founded by Dr. Inam ul Haq Mirza in Sialkot, Pakistan), we prioritize the security, confidentiality, and integrity of corporate and personal information shared with us by healthcare institutions, medical device distributors, procurement officers, and private label partners across 120+ countries.

As an ISO 13485 and ISO 9001 certified manufacturer, our quality management practices extend directly into data protection. This Privacy Policy outlines how we manage commercial inquiries, custom manufacturing specifications, trade records, and electronic communications in strict compliance with international regulations including GDPR (EU/UK) and regional data protection frameworks.

2. Commercial Information We Collect

In our capacity as an international medical device manufacturer, we collect minimal data required to process institutional RFQs, complete custom OEM forging contracts, execute export documentation, and fulfill medical supply tenders.

A. Information You Provide Directly

• Corporate & Contact Identifiers: Executive names, professional job titles, hospital/company names, business registration numbers, enterprise email addresses, and direct telephone numbers.
• Procurement & Order Details: Technical product lists, pattern requirements, quantities, custom laser marking artwork, packaging artwork, billing details, and destination shipping addresses.
• Regulatory & Import Documentation: Customs tax identification numbers, import authorization codes, and regulatory compliance certificates necessary for international freight movement.

B. Technical & Analytical Data

When browsing our catalog server, basic non-personally identifiable server logs (IP address, operating system, browser engine, referral URL) are monitored to optimize site performance and security against network abuse.

3. Protection of OEM Designs, CAD & Proprietary IP

We understand that our OEM and Private Label partners entrust us with valuable intellectual property. Confidentiality is the cornerstone of our manufacturing contracts.

4. How We Use Business & Order Information

Your business information is strictly processed for legitimate commercial and legal purposes:

• Formulating accurate product quotations, material certification reports, and proforma invoices.
• Executing precision forging, machining, heat treatment, and laser-engraving processes according to agreed specifications.
• Managing international shipping logistics, export declarations, and bill of lading generation.
• Providing lifetime guarantee verification and post-market safety surveillance under ISO 13485 requirements.

5. Third-Party Sharing Restrictions

DR MIRZA Medical Instruments does not sell, rent, trade, or monetize commercial or personal data under any circumstances. Data is only shared with vetted third parties essential for contract fulfillment:

• Freight & Logistics Carriers: Authorized international shipping lines, air cargo brokers, and express couriers for consignment delivery.
• Banking & Financial Partners: SWIFT banking partners for processing Letters of Credit (L/C) and wire transfers securely.
• Regulatory Authorities: Customs authorities, ministry inspection bodies, or healthcare agencies when explicitly required by international trade law.

6. Security Infrastructure & Technical Safeguards

We implement enterprise-grade technical and organizational security measures to protect commercial data from unauthorized access, loss, or alteration. Electronic data is protected behind secure firewalls with AES-256 encryption for stored files and TLS 1.3 protocol for data in transit. Physical records at our Sialkot manufacturing complex are kept in restricted-access archive facilities.

7. International Buyer Rights & GDPR Compliance

Overseas clients retain full rights regarding their corporate and personal data stored within our systems:

• Right of Access: Request a copy of all stored business records, order history, and contact details.
• Right to Rectification: Request instant updates to corporate profiles, delivery points, or authorized personnel.
• Right to Erasure (Right to be Forgotten): Request data removal upon completion of contract retention periods, subject to mandatory ISO 13485 medical device traceability laws.

8. Policy Updates & Governance

DR MIRZA Medical Instruments reserves the right to update this policy to maintain alignment with international regulatory updates, FDA guidelines, and European Union Medical Device Regulation (MDR) requirements. Changes become effective immediately upon posting to this page.

9. Compliance & Data Protection Officer Contact

For questions, formal compliance requests, or non-disclosure inquiries regarding your procurement data, please reach out to our legal and data protection team: