Buildplate("we", "us", "our") is the data controller for personal data collected through https://buildplate.ae and when you buy from us. This policy explains how we handle that data in the United Arab Emirates, in line with Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (the PDPL) and related guidance of the UAE Data Office.
1. Data we collect
- Identity and contact: name, email, phone number, delivery address, and messages you send us
- Order and payment: products, customisation choices, order history, and payment status (card details are processed by our payment provider; we do not store full card numbers)
- Account and session: cart contents and login session if you use admin or authenticated features
- Technical and usage: device/browser type, IP address, pages viewed, and similar data via cookies as described in our Cookie Policy
- Custom work: photos or files you upload for lithophane, engraving, or other personalised products
We do not intentionally collect special categories of personal data (such as health or biometric data). Please do not send us such information unless we have asked for it for a specific, lawful purpose.
2. Why we use your data (lawful bases)
Under the PDPL we rely on one or more of the following:
- Contract: to take steps at your request and to perform a sale (checkout, production, delivery, returns)
- Legal obligation: tax, accounting, consumer protection, and other UAE legal duties
- Consent: optional marketing emails, non-essential cookies, and similar uses you can withdraw at any time
- Legitimate interests: to keep the shop secure, prevent fraud, and improve the site, where those interests are not overridden by your rights
We use your data to:
- Process, produce, and deliver orders
- Send order confirmations, shipping updates, and support replies
- Handle cancellations, returns, refunds, and warranty claims
- Issue tax invoices where required
- Improve products and the website
- Comply with UAE law and respond to lawful requests by authorities
We do not sell your personal data. We will not use your uploaded photos for marketing without a separate, clear consent.
3. Who we share data with
We share data only as needed with processors and partners who help us operate, including payment processors, delivery couriers, hosting and database providers, email tools, and professional advisers. They may process data only on our instructions and must keep it secure.
We may disclose data if required by UAE law, a court, or a competent regulator (including the Ministry of Economy or tax authorities).
4. Transfers outside the UAE
Some providers (for example payment, hosting, or analytics) may store or access data outside the United Arab Emirates. Where that happens, we take steps consistent with the PDPL, such as using providers in jurisdictions with an adequate level of protection or putting in place appropriate safeguards, and we only transfer what is necessary.
5. How long we keep data
We keep personal data only as long as needed for the purposes above. Order and invoicing records are typically retained for at least five years to meet UAE tax and commercial record-keeping rules, then deleted or anonymised unless a longer period is required (for example an ongoing dispute). Cart and analytics data are kept for shorter periods. Custom photos are kept as needed to produce and, if necessary, reprint your order, then deleted on request or when no longer required.
6. Your rights under the PDPL
Subject to the PDPL and its exceptions, you may request to:
- Access the personal data we hold about you
- Correct inaccurate or incomplete data
- Erase data in certain circumstances
- Restrict or object to certain processing
- Receive data you provided in a structured, commonly used format (portability), where applicable
- Withdraw consent where processing is based on consent, without affecting prior lawful processing
To exercise these rights, email info@buildplate.ae with enough detail for us to identify you. We may need to verify your identity. We will respond within the timeframes required by the PDPL.
You may also lodge a complaint with the UAE Data Office if you believe we have not handled your personal data in accordance with the PDPL.
7. Security
We use technical and organisational measures appropriate to the risk, including encrypted connections (HTTPS), restricted staff access, and reputable processors. No method of transmission or storage is completely secure.
8. Children
The shop is not directed at children. We do not knowingly collect personal data from anyone under 18. If you believe we have, please contact us and we will delete it.
9. Cookies
See our Cookie Policy for types of cookies, purposes, and how to control them.
10. Changes
We may update this policy to reflect changes in law or our practices. The "Last updated" date at the top of this page will change when we do. Material changes will be highlighted on the site where appropriate.
11. Contact
Data controller: Buildplate, United Arab Emirates
Email: info@buildplate.ae
Phone: +971 58 560 5321
