Privacy Policy

1. Introduction

This Privacy Policy (“Policy”) describes how Quartzaline Plastic Trading LLC, operating under the brand name “Quplast” (“we,” “us,” or “our”), collects, uses, stores, shares, and protects personal data when you visit or use our website at www.quplast.com (the “Site”), purchase our products, or otherwise interact with our services.

Quplast is a Dubai-based supplier of food packaging, disposable household items, hygiene products, and cleaning supplies, serving both business-to-business (B2B) and business-to-consumer (B2C) customers across the United Arab Emirates and internationally.

This Policy has been prepared in accordance with UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (“PDPL”), and is aligned with international best practices for data privacy and protection. By accessing the Site or using our services, you acknowledge that you have read, understood, and agree to the terms of this Policy.

2. Data Controller

The data controller responsible for your personal data is:

3. Information We Collect

We may collect and process the following categories of personal data:

3.1 Information You Provide Directly

• Full name, job title, and company name (for B2B accounts)
• Email address, telephone number, and WhatsApp contact details
• Billing and delivery address within the UAE or internationally
• Payment information (credit/debit card details, bank transfer references) processed securely via our payment gateway
• Custom packaging specifications, branding artwork, and design files uploaded for custom orders
• Correspondence and communications, including enquiries via our contact form, email, WhatsApp, or social media channels
• Feedback, product reviews, and survey responses

3.2 Information Collected Automatically

• IP address, browser type and version, operating system, and device identifiers
• Pages viewed, links clicked, time spent on pages, and referral URLs
• Cookie data and similar tracking technologies (see Section 8 below)
• Location data inferred from your IP address or provided by your device with your consent

3.3 Information from Third Parties

• Business credit and verification information from trade reference services
• Analytics data from third-party services such as Google Analytics
• Social media profile information when you interact with our pages or advertisements

4. Purpose and Legal Basis for Processing

We process your personal data for the following purposes and on the corresponding legal bases under the PDPL:

5. Data Sharing and Disclosure

We do not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your data with the following categories of recipients:

• Logistics and Delivery Partners: Third-party courier and freight companies engaged to fulfil deliveries across the UAE and internationally.
• Payment Processors: Secure, PCI-compliant payment gateways that process your payment transactions on our behalf.
• Custom Manufacturing Partners: Printing and manufacturing vendors involved in producing your custom-branded packaging, who receive only the data necessary to complete your order.
• IT and Cloud Service Providers: Hosting, analytics, email, and CRM providers that support our website and business operations under strict data processing agreements.
• Professional Advisors: Auditors, legal counsel, and accountants who require access to data in the course of providing professional services to us.
• Regulatory and Government Authorities: Where disclosure is required by UAE law, court order, or regulatory request, including obligations under the PDPL and the UAE Cybercrime Law.

6. Cross-Border Data Transfers

As part of our operations, your personal data may be transferred to and processed in countries outside the UAE, for example where our cloud hosting providers, analytics services, or manufacturing partners are located. In such cases, we ensure that adequate safeguards are in place in accordance with the PDPL, including standard contractual clauses, binding corporate rules, or confirmation that the recipient jurisdiction provides an adequate level of data protection as determined by the UAE Data Office.

Where we engage international custom packaging manufacturers on your behalf, only the minimum data necessary to fulfil your order (such as branding artwork and delivery specifications) will be shared.

7. Data Retention

We retain your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our general retention periods are as follows:

When personal data is no longer required, it will be securely deleted, anonymised, or destroyed in accordance with our internal data disposal procedures.

8. Cookies and Tracking Technologies

Our Site uses cookies and similar tracking technologies to enhance your browsing experience and to gather analytics data. The categories of cookies we use include:

You can manage your cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of the Site.

9. Your Rights Under the PDPL

Under the UAE Personal Data Protection Law, you have the following rights in relation to your personal data:

To exercise any of these rights, please contact us at sales@quplast.com or call +971-56-2147000. We will respond within 30 days.

10. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• SSL/TLS encryption on all pages where personal data is collected or transmitted
• Access controls and authentication mechanisms to restrict access to authorised personnel only
• Regular security assessments, vulnerability testing, and penetration testing
• Staff training on data protection, confidentiality obligations, and information security
• Secure data storage with encryption at rest for sensitive data, including payment information
• Incident response procedures to detect, report, and manage data breaches in accordance with PDPL requirements

11. Children's Privacy

Our Site and services are intended for use by businesses and individuals aged 18 years and above. We do not knowingly collect personal data from children under the age of 18. In compliance with UAE Federal Decree-Law No. 26 of 2025 on Child Digital Safety, if we become aware that we have inadvertently collected data from a minor, we will take immediate steps to delete such data. If you believe that a child has provided us with personal data, please contact us without delay.

12. Third-Party Links

The Site may contain links to third-party websites, including social media platforms, payment processors, and industry partners. These third-party sites have their own privacy policies and practices, and we are not responsible for the content, privacy, or security of those external sites. We encourage you to review the privacy policies of any third-party websites you visit before providing them with your personal data.

13. Marketing Communications

Where you have provided your consent, we may send you marketing communications about our products, services, promotions, and industry news via email, SMS, WhatsApp, or other electronic channels. You may opt out of receiving marketing communications at any time by clicking the unsubscribe link in any marketing email, contacting us at sales@quplast.com, or replying “STOP” to any SMS or WhatsApp marketing message. Please note that even if you opt out of marketing communications, we may still send you transactional messages related to your orders or account.

14. Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of individuals, we will notify the UAE Data Office and, where required, the affected individuals, within the timeframes prescribed by the PDPL. Our notification will describe the nature of the breach, the categories of data affected, the likely consequences, and the measures taken to mitigate the impact.

15. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our business practices, legal requirements, or industry standards. Any material changes will be communicated by posting the revised Policy on the Site with an updated effective date. We encourage you to review this Policy periodically to stay informed about how we protect your data.

16. Governing Law and Jurisdiction

This Privacy Policy shall be governed by and construed in accordance with the laws of the United Arab Emirates, including Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data. Any disputes arising out of or in connection with this Policy shall be subject to the exclusive jurisdiction of the courts of Dubai, UAE.