Privacy Policy

1. Who We Are

This Privacy Policy is issued by Crystal Arc Factory LLC (“Crystal Arc,” “we,” “us,” or “our”), a manufacturer of custom trophies, awards, corporate gifts, and luxury packaging headquartered in Dubai, United Arab Emirates, with additional offices in Abu Dhabi, UAE and Riyadh, Saudi Arabia. This Policy explains how we collect, use, disclose, and safeguard information when you visit crystalarc.net (the “Site”), contact us by WhatsApp, email, or phone, or engage us to design and manufacture a commissioned piece.

We process personal data in accordance with the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (“UAE PDPL”) and, where applicable to customers located outside the UAE, the data protection principles generally expected under GDPR (EU/UK) and equivalent frameworks.

2. Information We Collect

We collect the following categories of information:

• Contact and enquiry data, name, company name, email address, phone/WhatsApp number, and any details you submit through our enquiry forms, brochure downloads, or direct messages.
• Order and commission data, project briefs, design references, engraving text, logos/artwork you supply, delivery addresses, and billing details required to quote, produce, and ship your piece.
• Communications, records of correspondence via email, WhatsApp, and phone, kept to service your enquiry or order and to resolve any dispute.
• Website usage data, IP address, browser type, device information, pages visited, and referral source, collected automatically via standard web server logs and analytics/functional cookies (see Section 5).
• Payment-related data, where deposits or balances are paid online, our payment processor handles card details directly; we retain only transaction references and amounts, not full card numbers.

3. How We Use Your Information

• To respond to enquiries and prepare quotations or proposals.
• To design, manufacture, personalise, invoice, and deliver commissioned pieces.
• To communicate order status, production timelines, and delivery updates.
• To maintain business records for accounting, warranty, and legal compliance purposes.
• To improve our Site, catalogue, and customer experience.
• To send you updates about Crystal Arc where you have opted in, and which you may unsubscribe from at any time.
• To detect, investigate, and prevent fraud, misuse, or security incidents.

We do not sell, rent, or trade your personal data to third parties for their own marketing purposes.

4. Legal Basis for Processing

We process your data on the basis of: (a) performance of a contract, where you have requested a quote or placed an order; (b) legitimate business interests, such as improving our services and preventing fraud; (c) consent, where you have opted in to marketing communications; and (d) compliance with legal obligations, such as tax and accounting record-keeping requirements under UAE law.

5. Cookies and Similar Technologies

Our Site uses cookies and similar technologies to remember your preferences, understand how visitors use the Site, and measure the effectiveness of our content. These fall into two categories:

• Essential/functional cookies, required for the Site to operate correctly (e.g. remembering that you have viewed our WhatsApp widget).
• Analytics cookies, help us understand aggregate visitor behaviour so we can improve the Site. These do not identify you personally.

You can disable cookies through your browser settings at any time; doing so may affect some Site functionality.

6. Sharing and Disclosure

We share information only where necessary, including with:

• Logistics and shipping partners, to deliver your order.
• Payment processors, to process deposits and balances securely.
• Professional advisors (accountants, auditors, legal counsel), where required.
• Government or regulatory authorities, where required by UAE law or a valid legal process.
• Successor entities, in the event of a merger, acquisition, or sale of business assets, subject to equivalent confidentiality protections.

7. Data Retention

We retain personal data for as long as necessary to fulfil the purposes described in this Policy, including any statutory retention period required for accounting, tax, or warranty purposes under UAE law (generally up to 5 years from the end of the relevant financial year, or longer where a legal claim is reasonably anticipated). Design files and artwork you supply for a commission are retained for our production records unless you request deletion in writing.

8. Data Security

We apply reasonable administrative, technical, and physical safeguards to protect personal data against unauthorised access, alteration, disclosure, or destruction. No method of transmission or storage is 100% secure, and while we work to protect your data, we cannot guarantee absolute security.

9. Your Rights

Subject to applicable law, you have the right to:

• Request access to the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request deletion of your data, subject to our legal retention obligations.
• Object to or restrict certain processing, including direct marketing.
• Withdraw consent at any time where processing is based on consent.
• Request a copy of your data in a portable format, where technically feasible.

To exercise any of these rights, contact us at info@crystalarc.net. We will respond within a reasonable time and in line with applicable legal timeframes.

10. International Data Transfers

As we serve clients across the UAE, GCC, and internationally, your data may be processed in countries other than your own, including the United Arab Emirates. Where we transfer data internationally, we take steps to ensure it remains protected consistent with this Policy and applicable law.

11. Children's Privacy

Our Site and services are directed at businesses and adults. We do not knowingly collect personal data from children under 18. If you believe a child has provided us with personal data, please contact us so we can remove it.

12. Third-Party Services, Platforms & AI Tools

In operating our business and this Site, we use a range of third-party platforms, applications, and AI-assisted tools, which may include (without limitation) Google (e.g. Workspace, Analytics, advertising), Meta/Facebook (e.g. business messaging, advertising), WhatsApp, and AI assistants such as OpenAI's ChatGPT and Anthropic's Claude, among others. We use these tools for purposes such as website analytics, communications, marketing, scheduling, drafting, design assistance, and general administrative work.

The specific tools and providers we use may change from time to time as our business and technology needs evolve, without a corresponding update to this Policy for each individual tool. Where information you provide to us is processed through one of these third-party platforms, that processing is also governed by that provider's own privacy policy and terms of service, which operate independently of this Policy and which we encourage you to review. We select reputable providers and take reasonable care in how we use them, but we do not control, and are not responsible for, the independent data handling practices, security, or retention policies of these third parties.

Our Site may also link to third-party platforms (e.g. WhatsApp, social media). We are not responsible for the privacy practices of those third parties; please review their own policies.

13. Changes to This Policy

We may update this Policy from time to time to reflect changes in our practices or legal requirements. The “Last updated” date at the top of this page indicates the most recent revision. Material changes will be indicated on this page.

14. Contact Us

For any questions about this Privacy Policy or how we handle your data, contact:

Crystal Arc Factory LLC
Dubai, United Arab Emirates
Email: info@crystalarc.net
Phone: +971 4 347 9191  ·  WhatsApp: +971 56 536 4384