Privacy Policy
Last Updated: March 17, 2026
1. Introduction
White Stone (“White Stone”, “Company”, “we”, “our”, or “us”) respects your privacy and is committed to protecting personal data. This Privacy Policy explains how we collect, use, store, disclose, and protect personal data when you:
White Stone operates through offices located in:
We are committed to protecting personal data and complying with applicable data protection laws, including EU General Data Protection Regulation (GDPR), UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data and other applicable privacy regulations.
By accessing or using our website or services, you acknowledge that you have read and understood this Policy.
2. Definitions
For the purposes of this Privacy Policy, the following terms shall have the meanings set out below:
Personal Data: Any information relating to an identified or identifiable natural person. An identifiable individual is one who can be identified directly or indirectly, including by reference to identifiers such as a name, identification number, location data, online identifier, or factors specific to that person’s identity.
Processing: Any operation or set of operations performed on Personal Data, whether by automated means or otherwise, including collection, recording, organisation, structuring,
You: Any individual who visits our Website, contacts us, requests information about our services, or otherwise interacts with White Stone, including potential or existing clients, business partners, and other users of our Website.
Website: Our website available at https://wst-one.com/
3. Data controller
White Stone acts as the controller of personal data processed through this Website and in connection with the provision of its services.
Depending on the nature of the services provided and the location of the user, the data controller may be:
WHITE STONE SERVICES - FZCO
Address: DSO-IFZA, Dubai Digital Park – Building A1, Dubai Silicon Oasis
White Stone Services (CY) Limited
Address: 44, Kirzis Center, Block A, 1st Floor, office A11, 3031 Limassol, Cyprus
For any questions regarding this Privacy Policy or the processing of personal data, you may contact us at:
Email: info@wst.one
4. Categories of personal data we collect
We may collect and process the following categories of personal data:
4.1. Contact Information: full name, email address, telephone number, country of residence;
4.2. Professional Information: company name, job title or position, professional contact details, business relationship information;
4.3. Recruitment Information: resume or CV, education details, professional qualifications, employment history, references;
4.4. Communication Data: Information contained in emails, contact forms, consultation requests, meeting requests, event registrations.
White Stone does not intentionally collect special categories of personal data, such as information about health, religion, political opinions, or biometric data.
5. Sources of personal data
We collect personal data from the following sources:
6. Purposes and legal basis for processing
We process personal data only where there is a lawful basis.
7. Use of cookies and analytics
Our website uses cookies and similar technologies to ensure proper functionality, analyse website traffic, improve user experience, and maintain the security of our systems. A cookie is a small data file stored on a user’s device when visiting a website. Cookies enable the website to recognise a user’s device, remember certain preferences, and collect information about how visitors interact with the website.
When you access or use our website, certain technical information may be collected automatically through cookies and similar technologies. This information may include your IP address, browser type, device information, and data relating to your interaction with the website, such as pages visited and navigation behaviour. Such information helps us better understand how visitors use the website and allows us to improve its performance and usability.
Some cookies are temporary and are deleted automatically when you close your browser session. Other cookies may remain stored on your device for a longer period in order to recognise your device during future visits and improve your experience on the website.
We may also use third-party analytics services, such as Google Analytics, to analyse how users interact with the website and to generate statistical information about website usage. These services collect and process technical data in accordance with their own privacy policies.
You may control or disable cookies through your browser settings at any time. Most web browsers allow you to manage cookie preferences, including blocking or deleting cookies. You may also use anti-tracking tools or similar technologies to control the storage of cookies on your device. Please note that disabling cookies may affect certain functionalities of the website.
8. Disclosure of personal data
We may disclose personal data to third parties where such disclosure is necessary for the purposes described in this Privacy Policy, for the provision of our services, or where required by applicable law. In particular, personal data may be shared with service providers who support the operation of our business and information systems, including providers of information technology services, website hosting, cloud storage, data analytics, and communication tools. Such service providers process personal data on our behalf and are required to implement appropriate technical and organisational measures to protect the confidentiality and security of the information.
Personal data may also be disclosed to professional advisers, including legal, accounting, compliance, or audit advisers, where such disclosure is necessary for the purposes of obtaining professional advice, ensuring regulatory compliance, or protecting the legitimate interests of White Stone.
In addition, we may disclose personal data to competent governmental authorities, regulators, courts, or law enforcement bodies where such disclosure is required by applicable law, regulation, or legal process, or where it is necessary to protect the rights, property, or safety of White Stone, our clients, or other individuals.
Where appropriate, personal data may also be shared with business partners or third parties involved in the organisation of professional events, seminars, or joint initiatives, provided that such sharing is limited to what is necessary for the relevant purpose and subject to appropriate confidentiality safeguards.
White Stone takes reasonable steps to ensure that any third parties receiving personal data maintain appropriate data protection standards and process such data only for the purposes for which it was disclosed.
9. Data retention
White Stone retains personal data only for the period necessary to fulfill the purposes for which it was collected and processed, as described in this Privacy Policy, or for a longer period where retention is required or permitted under applicable law. In particular, personal data may be retained for the duration of our contractual or professional relationship with you, for the time necessary to comply with legal, regulatory, or accounting obligations, and where required for the establishment, exercise, or defence of legal claims.
The specific retention period may vary depending on the nature of the personal data, the purpose of processing, and applicable statutory requirements. Once personal data is no longer necessary for the purposes for which it was collected or for compliance with applicable legal obligations, White Stone will take appropriate measures to securely delete, destroy, or anonymise such data in accordance with applicable data protection laws and internal data management practices.
10. Cross-border transfers
Due to the international nature of White Stone’s operations, personal data may be transferred to and processed in jurisdictions outside the country in which it was originally collected. In particular, personal data may be transferred between the United Arab Emirates, the European Economic Area, and other jurisdictions in which White Stone operates or where its service providers or business partners are located.
Where personal data is transferred across borders, White Stone takes appropriate measures to ensure that such transfers are carried out in compliance with applicable data protection laws and that personal data remains adequately protected. These measures may include the use of standard contractual clauses approved by the European Commission, contractual confidentiality and data protection obligations imposed on recipients of the data, and other lawful transfer mechanisms recognised under applicable legislation.
11. Your rights
Subject to applicable data protection laws, you may have certain rights regarding the personal data we process about you. These rights may include the right to request confirmation as to whether we process your personal data and to obtain access to such data. You may also request that we correct any inaccurate or incomplete personal data.
In certain circumstances, you may request the deletion of your personal data or ask that we restrict the processing of your personal data. You may also have the right to object to the processing of your personal data where such processing is based on our legitimate interests.
Where applicable, you may request to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format, and to have that data transferred to another organization where technically feasible.
If the processing of your personal data is based on your consent, you may withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of processing carried out prior to the withdrawal.
If you wish to exercise any of these rights, please contact us using the contact details provided in this Privacy Policy.
12. Third-party websites
Our Website may contain links to third-party websites or online resources that are not operated or controlled by White Stone. White Stone does not control and is not responsible for the privacy practices, content, or policies of such third-party websites. We encourage you to review the privacy policies of any third-party websites you visit.
13. Children’s data
Our Website and services are not intended for individuals under the age of 18. We do not knowingly collect or process personal data relating to minors. If we become aware that personal data relating to an individual under the age of 18 has been collected through our Website or services without appropriate authorisation, we will take reasonable steps to delete such data as soon as practicable.
14. Changes to this Privacy Policy
White Stone may update this Privacy Policy from time to time to reflect changes in legal requirements, regulatory guidance, or our data processing practices. Any updated version of this Privacy Policy will be published on our Website with the corresponding “Last Updated” date. We encourage you to review this Privacy Policy periodically to remain informed about how we process and protect personal data.
15. Contact information
If you have any questions regarding this Privacy Policy or wish to exercise your rights in relation to the processing of your personal data, you may contact us using the details below:
White Stone
Email: info@wst.one
UAE Office
Email: use@wst.one
Cyprus Office
Email: cyprus@wst.one
White Stone (“White Stone”, “Company”, “we”, “our”, or “us”) respects your privacy and is committed to protecting personal data. This Privacy Policy explains how we collect, use, store, disclose, and protect personal data when you:
- visit our website;
- contact us or request information about our services;
- engage us for professional services;
- participate in events, newsletters, or communications; or
- otherwise interact with us.
White Stone operates through offices located in:
- United Arab Emirates
- Republic of Cyprus
We are committed to protecting personal data and complying with applicable data protection laws, including EU General Data Protection Regulation (GDPR), UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data and other applicable privacy regulations.
By accessing or using our website or services, you acknowledge that you have read and understood this Policy.
2. Definitions
For the purposes of this Privacy Policy, the following terms shall have the meanings set out below:
Personal Data: Any information relating to an identified or identifiable natural person. An identifiable individual is one who can be identified directly or indirectly, including by reference to identifiers such as a name, identification number, location data, online identifier, or factors specific to that person’s identity.
Processing: Any operation or set of operations performed on Personal Data, whether by automated means or otherwise, including collection, recording, organisation, structuring,
You: Any individual who visits our Website, contacts us, requests information about our services, or otherwise interacts with White Stone, including potential or existing clients, business partners, and other users of our Website.
Website: Our website available at https://wst-one.com/
3. Data controller
White Stone acts as the controller of personal data processed through this Website and in connection with the provision of its services.
Depending on the nature of the services provided and the location of the user, the data controller may be:
WHITE STONE SERVICES - FZCO
Address: DSO-IFZA, Dubai Digital Park – Building A1, Dubai Silicon Oasis
White Stone Services (CY) Limited
Address: 44, Kirzis Center, Block A, 1st Floor, office A11, 3031 Limassol, Cyprus
For any questions regarding this Privacy Policy or the processing of personal data, you may contact us at:
Email: info@wst.one
4. Categories of personal data we collect
We may collect and process the following categories of personal data:
4.1. Contact Information: full name, email address, telephone number, country of residence;
4.2. Professional Information: company name, job title or position, professional contact details, business relationship information;
4.3. Recruitment Information: resume or CV, education details, professional qualifications, employment history, references;
4.4. Communication Data: Information contained in emails, contact forms, consultation requests, meeting requests, event registrations.
White Stone does not intentionally collect special categories of personal data, such as information about health, religion, political opinions, or biometric data.
5. Sources of personal data
We collect personal data from the following sources:
- information provided directly by you
- website forms and communications
- professional interactions and meetings
- publicly available sources
- business partners
- automated technologies such as cookies
6. Purposes and legal basis for processing
We process personal data only where there is a lawful basis.
Personal Data | How we obtain It | Purpose of processing | Legal basis |
Name, email, phone number | Provided when contacting us or filling website forms | Responding to inquiries and communication with you | Legitimate interest / pre-contractual steps |
Professional information (company, role) | Provided during communications or business interactions | Provision of legal or advisory services | Performance of contract |
Resume and recruitment data | Provided when applying for a position | Recruitment and candidate evaluation | Legitimate interest / consent |
Technical data | Collected automatically via website cookies | Website functionality, analytics and security | Consent / legitimate interest |
Marketing preferences | Provided when subscribing to newsletters or other marketing activities | Sending updates and legal insights | Consent |
7. Use of cookies and analytics
Our website uses cookies and similar technologies to ensure proper functionality, analyse website traffic, improve user experience, and maintain the security of our systems. A cookie is a small data file stored on a user’s device when visiting a website. Cookies enable the website to recognise a user’s device, remember certain preferences, and collect information about how visitors interact with the website.
When you access or use our website, certain technical information may be collected automatically through cookies and similar technologies. This information may include your IP address, browser type, device information, and data relating to your interaction with the website, such as pages visited and navigation behaviour. Such information helps us better understand how visitors use the website and allows us to improve its performance and usability.
Some cookies are temporary and are deleted automatically when you close your browser session. Other cookies may remain stored on your device for a longer period in order to recognise your device during future visits and improve your experience on the website.
We may also use third-party analytics services, such as Google Analytics, to analyse how users interact with the website and to generate statistical information about website usage. These services collect and process technical data in accordance with their own privacy policies.
You may control or disable cookies through your browser settings at any time. Most web browsers allow you to manage cookie preferences, including blocking or deleting cookies. You may also use anti-tracking tools or similar technologies to control the storage of cookies on your device. Please note that disabling cookies may affect certain functionalities of the website.
8. Disclosure of personal data
We may disclose personal data to third parties where such disclosure is necessary for the purposes described in this Privacy Policy, for the provision of our services, or where required by applicable law. In particular, personal data may be shared with service providers who support the operation of our business and information systems, including providers of information technology services, website hosting, cloud storage, data analytics, and communication tools. Such service providers process personal data on our behalf and are required to implement appropriate technical and organisational measures to protect the confidentiality and security of the information.
Personal data may also be disclosed to professional advisers, including legal, accounting, compliance, or audit advisers, where such disclosure is necessary for the purposes of obtaining professional advice, ensuring regulatory compliance, or protecting the legitimate interests of White Stone.
In addition, we may disclose personal data to competent governmental authorities, regulators, courts, or law enforcement bodies where such disclosure is required by applicable law, regulation, or legal process, or where it is necessary to protect the rights, property, or safety of White Stone, our clients, or other individuals.
Where appropriate, personal data may also be shared with business partners or third parties involved in the organisation of professional events, seminars, or joint initiatives, provided that such sharing is limited to what is necessary for the relevant purpose and subject to appropriate confidentiality safeguards.
White Stone takes reasonable steps to ensure that any third parties receiving personal data maintain appropriate data protection standards and process such data only for the purposes for which it was disclosed.
9. Data retention
White Stone retains personal data only for the period necessary to fulfill the purposes for which it was collected and processed, as described in this Privacy Policy, or for a longer period where retention is required or permitted under applicable law. In particular, personal data may be retained for the duration of our contractual or professional relationship with you, for the time necessary to comply with legal, regulatory, or accounting obligations, and where required for the establishment, exercise, or defence of legal claims.
The specific retention period may vary depending on the nature of the personal data, the purpose of processing, and applicable statutory requirements. Once personal data is no longer necessary for the purposes for which it was collected or for compliance with applicable legal obligations, White Stone will take appropriate measures to securely delete, destroy, or anonymise such data in accordance with applicable data protection laws and internal data management practices.
10. Cross-border transfers
Due to the international nature of White Stone’s operations, personal data may be transferred to and processed in jurisdictions outside the country in which it was originally collected. In particular, personal data may be transferred between the United Arab Emirates, the European Economic Area, and other jurisdictions in which White Stone operates or where its service providers or business partners are located.
Where personal data is transferred across borders, White Stone takes appropriate measures to ensure that such transfers are carried out in compliance with applicable data protection laws and that personal data remains adequately protected. These measures may include the use of standard contractual clauses approved by the European Commission, contractual confidentiality and data protection obligations imposed on recipients of the data, and other lawful transfer mechanisms recognised under applicable legislation.
11. Your rights
Subject to applicable data protection laws, you may have certain rights regarding the personal data we process about you. These rights may include the right to request confirmation as to whether we process your personal data and to obtain access to such data. You may also request that we correct any inaccurate or incomplete personal data.
In certain circumstances, you may request the deletion of your personal data or ask that we restrict the processing of your personal data. You may also have the right to object to the processing of your personal data where such processing is based on our legitimate interests.
Where applicable, you may request to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format, and to have that data transferred to another organization where technically feasible.
If the processing of your personal data is based on your consent, you may withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of processing carried out prior to the withdrawal.
If you wish to exercise any of these rights, please contact us using the contact details provided in this Privacy Policy.
12. Third-party websites
Our Website may contain links to third-party websites or online resources that are not operated or controlled by White Stone. White Stone does not control and is not responsible for the privacy practices, content, or policies of such third-party websites. We encourage you to review the privacy policies of any third-party websites you visit.
13. Children’s data
Our Website and services are not intended for individuals under the age of 18. We do not knowingly collect or process personal data relating to minors. If we become aware that personal data relating to an individual under the age of 18 has been collected through our Website or services without appropriate authorisation, we will take reasonable steps to delete such data as soon as practicable.
14. Changes to this Privacy Policy
White Stone may update this Privacy Policy from time to time to reflect changes in legal requirements, regulatory guidance, or our data processing practices. Any updated version of this Privacy Policy will be published on our Website with the corresponding “Last Updated” date. We encourage you to review this Privacy Policy periodically to remain informed about how we process and protect personal data.
15. Contact information
If you have any questions regarding this Privacy Policy or wish to exercise your rights in relation to the processing of your personal data, you may contact us using the details below:
White Stone
Email: info@wst.one
UAE Office
Email: use@wst.one
Cyprus Office
Email: cyprus@wst.one