1. Home /
  2. Privacy Policy

Multi Zone Corporation
Last updated: August 14, 2026

This Privacy Policy explains what personal data Multi Zone Corporation (“we,” “us,” “our”) collects across mzcorp.com, umerkhokhar.com, and websupporthq.com (together, the “Services”), why we collect it, and what rights you have over it.

We’re based at 6-C, 1st Floor, Trust Plaza, Main G.T Road, Gujranwala, 52250, Pakistan. You can reach us at info@mzcorp.com with any privacy question or request.

1. What we collect

Information you give us directly:

  • Name, email address, and contact details when you sign up, fill in a contact form, or reach out to support
  • Billing and company details when you purchase a subscription or service
  • Any data you upload into our software products — for example student records in the school platform, or contact lists in Outreach OS

Information collected automatically:

  • IP address, browser type, device information, and pages visited, collected through standard server logs and analytics tools (e.g. Google Analytics) when you use our websites
  • Cookies and similar technologies — see Section 6 below

Information from payment processing:
We don’t collect or store your full card number. Payments run through Paddle.com Market Ltd, which acts as merchant of record for our transactions. Paddle collects and processes your payment details directly under its own privacy policy. We receive limited transaction information from Paddle (e.g. name, email, amount, product purchased) needed to fulfil your order and manage your account.

2. Why we collect it (legal basis)

We process personal data for these purposes:

  • To provide the Service you’ve signed up for — creating your account, delivering the software or consulting work you paid for, providing support (contractual necessity)
  • To process payments and comply with tax/accounting obligations (contractual necessity and legal obligation)
  • To communicate with you about your account, service updates, or changes to these policies (contractual necessity / legitimate interest)
  • To improve our Services through aggregated, non-identifying usage analysis (legitimate interest)
  • For marketing, only where you’ve opted in, and you can opt out at any time (consent)

If you’re in the EU/UK, our legal basis for each activity above is noted in brackets, consistent with the GDPR/UK GDPR.

3. Who we share it with

We don’t sell your personal data. We share it only with:

  • Paddle.com Market Ltd — for payment processing, tax compliance, and fraud prevention
  • Infrastructure and software vendors we rely on to run the Services — e.g. our hosting provider, email delivery service, and analytics provider — each bound by their own data processing terms with us
  • Law enforcement or regulators, only where required by a valid legal request
  • A buyer, in the event we sell or transfer part of our business, subject to that buyer honouring the commitments in this policy

4. Where your data is stored and international transfers

We’re based in Pakistan, and depending on the specific product, your data may be processed and stored on servers located in Pakistan, the EU, the UK, or the US, through our hosting and software vendors. Where we transfer personal data out of the EU/UK/Switzerland, we rely on Standard Contractual Clauses or an equivalent safeguard with the receiving vendor, as required under GDPR/UK GDPR.

5. How long we keep it

We keep account and billing data for as long as your account is active, plus the period required by Pakistani tax and accounting law afterward (generally up to 6 years). Data you’ve uploaded into a software product (e.g. school records) is kept until you delete it or close your account, after which we delete it from active systems within 30 days, and from backups within a further 90 days.

6. Cookies

Our websites use cookies for:

  • Essential functions — keeping you logged in, remembering checkout progress
  • Analytics — understanding how visitors use our sites, so we can improve them
  • Marketing (only on pages where you’ve consented) — measuring the effectiveness of ads

You can control or block cookies through your browser settings. Blocking essential cookies may stop parts of the site (like checkout) from working properly. Where required by law (EU/UK visitors), we’ll ask for your consent to non-essential cookies before setting them.

7. Your rights

Depending on where you live, you may have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate data
  • Delete your data (“right to be forgotten”), subject to our legal retention obligations
  • Export your data in a portable format
  • Object to or restrict certain processing, including marketing
  • Withdraw consent at any time where processing is based on consent
  • Lodge a complaint with your local data protection authority (for EU/UK residents, this is your national supervisory authority; for California residents, see Section 8 below)

To exercise any of these rights, email info@mzcorp.com. We’ll respond within 30 days, or sooner where required by local law.

8. Additional rights for California residents

If you’re a California resident, the California Consumer Privacy Act (CCPA/CPRA) gives you the right to know what personal information we’ve collected about you, to request deletion, and to opt out of the “sale” or “sharing” of personal information. We don’t sell personal information for money. We won’t discriminate against you for exercising any of these rights. To make a request, email info@mzcorp.com with “California Privacy Request” in the subject line.

9. Children’s privacy

Our general Services aren’t directed at children under 16. Our school management product is an exception — it’s designed for use by schools acting as data controllers for their own students, and any student data processed through it is handled under a separate data processing agreement with the school, not directly with the student or their family. If you believe a child has provided us personal data outside of that context, contact us and we’ll delete it.

10. Security

We use reasonable technical and organizational measures to protect the data we hold — including access controls, encryption in transit (HTTPS), and regular security patching of our infrastructure. No system is 100% secure, and we can’t guarantee absolute security, but we’ll notify affected users and relevant authorities without undue delay if we become aware of a data breach affecting your personal data, as required by applicable law.

11. Changes to this policy

We’ll update this page when our practices change and update the “last updated” date at the top. For material changes, we’ll make a reasonable effort to notify active users by email.

12. Contact us

Multi Zone Corporation
6-C, 1st Floor, Trust Plaza, Main G.T Road, Gujranwala, 52250, Pakistan
info@mzcorp.com