Privacy Policy

Last updated: 8 June 2026

1. Who We Are (Data Controller)

For the purposes of applicable data protection law, the data controller is:

• Company: Ali and Reza Naei Trading (LLC)
• Trading name: White Plate
• Commercial Registration: 1635902
• Trade Licence No.: L3490820
• Address: Barka, South Al Batinah Governorate, Sultanate of Oman
• Website: https://whiteplate.uk
• Privacy enquiries: Contact us

Under Oman's PDPL, the Ministry of Transport, Communications and Information Technology (MTCIT) is the supervisory authority for personal data protection in Oman. UK residents may also contact the Information Commissioner's Office (ICO) regarding UK GDPR matters.

2. Personal Data We Collect

We may collect and process the following categories of personal data:

• Identity and contact data: name, billing address, delivery address, email address, telephone number
• Order and transaction data: products purchased, order history, payment status, invoices
• Payment data: payment card details are processed by our payment providers; we do not store full card numbers
• Account data: login credentials, preferences, and wishlist items if you create an account
• Communications: messages you send us via contact forms, email, or customer support
• Technical data: IP address, browser type, device information, cookies, and usage data
• Marketing data: your preferences for receiving marketing communications

3. How We Collect Your Data

We collect personal data when you:

• Place an order or create an account on our website
• Subscribe to our newsletter or marketing communications
• Contact us with enquiries or complaints
• Browse our website (through cookies and similar technologies)
• Interact with us on social media or third-party platforms

4. Legal Basis and Purpose

We process your personal data only where we have a lawful basis, including:

• Contract performance: to process and fulfil your orders, manage deliveries, and provide customer support
• Legal obligation: to comply with tax, accounting, customs, and regulatory requirements in Oman, the GCC, the UK, and other applicable jurisdictions
• Legitimate interests: to improve our website, prevent fraud, and protect our business, provided your rights are not overridden
• Consent: for marketing emails, non-essential cookies, and other processing where consent is required by law

5. How We Use Your Data

We use personal data to:

• Process orders, payments, deliveries, and returns
• Communicate with you about your orders and account
• Provide customer service and resolve complaints
• Send marketing communications where you have opted in (you may unsubscribe at any time)
• Improve our products, website, and user experience
• Detect and prevent fraud, abuse, and security incidents
• Meet legal and regulatory obligations

6. Sharing Your Data

We do not sell your personal data. We may share data with trusted third parties only where necessary:

• Shopify: our e-commerce platform provider (hosting, payments, order management)
• Payment processors: to process transactions securely
• Delivery and logistics partners: to ship your orders
• IT and cloud service providers: for hosting, email, and analytics (under data processing agreements)
• Professional advisers: lawyers, accountants, and auditors where required
• Authorities: where required by law, court order, or government request

Where data is transferred outside Oman or your country of residence — including to the United Kingdom, European Economic Area, United States, or other GCC states — we ensure appropriate safeguards are in place as required by the PDPL, UK GDPR, and applicable cross-border transfer rules.

7. Data Retention

We retain personal data only for as long as necessary for the purposes described in this policy, including:

• Order records: typically up to 7 years for accounting, tax, and legal compliance
• Marketing data: until you unsubscribe or withdraw consent
• Account data: while your account is active and for a reasonable period thereafter
• Technical logs: for a limited period for security and analytics

When data is no longer needed, we securely delete or anonymise it.

8. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Right of access — to obtain a copy of the personal data we hold about you
• Right to rectification — to correct inaccurate or incomplete data
• Right to erasure — to request deletion of your data in certain circumstances
• Right to restrict processing — to limit how we use your data in certain cases
• Right to data portability — to receive your data in a structured, machine-readable format (where applicable)
• Right to object — to object to processing based on legitimate interests or for direct marketing
• Right to withdraw consent — where processing is based on consent, without affecting prior lawful processing

Under Oman's PDPL, you may lodge a complaint with the MTCIT if you believe your data protection rights have been violated. UK residents may contact the ICO at ico.org.uk.

To exercise your rights, please contact us via our Contact page. We may need to verify your identity before responding. We aim to respond within 30 days, or sooner where required by law.

9. Cookies and Similar Technologies

Our website uses cookies and similar technologies to enable core functionality, remember preferences, analyse traffic, and support marketing. These may include:

• Strictly necessary cookies: required for the website and checkout to function
• Performance cookies: to understand how visitors use our site
• Functional cookies: to remember your choices and settings
• Marketing cookies: to deliver relevant advertising (only with your consent where required)

You can manage cookie preferences through your browser settings. Disabling certain cookies may affect website functionality. Where required by law, we will obtain your consent before placing non-essential cookies.

10. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include SSL/TLS encryption, access controls, and secure payment processing through certified providers.

No method of transmission over the internet is completely secure. While we strive to protect your data, we cannot guarantee absolute security.

11. Children's Privacy

Our website and services are not directed at children under 18. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us and we will delete it promptly.

12. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites. We encourage you to read their privacy policies before providing any personal data.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in law, technology, or our practices. The updated version will be posted on this page with a revised date. We encourage you to review this policy periodically.

14. Contact Us

For privacy-related questions, data subject requests, or complaints, please contact us via our Contact page or write to:

Ali and Reza Naei Trading (White Plate)
Barka, South Al Batinah Governorate
Sultanate of Oman

Please include sufficient detail for us to identify you and respond to your request. You may also visit Data Sharing Opt-Out if you wish to manage certain data preferences.