Intelligent Brands

IN A CREATIVE WORLD

BRAND
STRATEGISTS | CREATIVES | STORYTELLERS
FOR INTERNATIONAL BRANDS
BRAND  STRATEGISTS  |  CREATIVES  |  STORYTELLERS  FOR INTERNATIONAL BRANDS

PRIVACY POLICY

Whitestone International (“Whitestone”, “we”, “us” or “our”) respects your privacy and is committed to protecting your personal data.

This Privacy Policy explains how we collect, use, disclose and protect personal data when you visit or use our website: https://whitestone.international/

It also explains your rights under applicable data protection law, including the UK General Data Protection Regulation (“UK GDPR”), the Data Protection Act 2018, the Privacy and Electronic Communications (EC Directive) Regulations 2003 (“PECR”), and, where applicable, India’s Digital Personal Data Protection Act 2023 (“DPDP Act”) and the Digital Personal Data Protection Rules 2025 (“DPDP Rules”).

This Privacy Policy applies only to Whitestone’s website and the processing of personal data arising from your use of that website. It does not govern services supplied to clients under separate contracts or engagements.

1. Who we are

The website is operated by:

Whitestone International Limited
Registered office: Effingham Common Road, Surrey, KT24 5JG
Registered company number: 3951543
Registered in the United Kingdom

For privacy enquiries, please contact: https://whitestone.international/contact/

Whitestone is the data controller responsible for personal data processed through the website, except where this Policy explains that another organisation is responsible for particular processing.

2. What personal data we collect

Depending on how you interact with the website, we may collect:

Information you provide to us:
For example, when you contact us through the website, we may collect:
• your name;
• email address;
• organisation/company name;
• job title or role;
• telephone number, if you choose to provide it;
• the contents of your enquiry or message; and
• any other information you voluntarily include in a form submission or correspondence.

You should not provide sensitive or special-category personal data through the website unless it is genuinely necessary for your enquiry.

Information collected automatically:
When you visit the website, technical information may be collected automatically, depending on the configuration of the website and your cookie choices. This may include:
• IP address;
• browser and device type;
• operating system;
• approximate geographic location derived from IP address;
• pages visited;
• referring website;
• date and time of visits;
• interaction with website content;
• technical logs and security information; and
• cookie or similar technology identifiers.

We only use non-essential cookies or similar technologies where legally required consent has been obtained.
Further information is provided in our Cookie Policy.

3. How we collect personal data

We may collect personal data:
• directly from you when you complete a contact form;
• when you communicate with us following an interaction with the website;
• automatically through technical logs and strictly necessary technologies; and
• from publicly available information where this is relevant to an enquiry or legitimate business relationship.

4. How we use your personal data

We may use personal data to:
• respond to enquiries and requests;
• communicate with you about services or information you have requested;
• assess and manage potential business relationships;
• provide information about Whitestone where you have requested it;
• administer, maintain, secure and improve the website;
• understand how visitors use the website where appropriate consent has been obtained;
• prevent fraud, abuse, security incidents and other unlawful activity;
• maintain website and information-security records;
• comply with legal and regulatory obligations;

We will not use your personal data for purposes that are incompatible with the purposes described in this Policy unless we are legally entitled or required to do so and provide any additional information required by law.

5. Lawful bases under UK GDPR

Where the UK GDPR applies, we rely on one or more of the following lawful bases:

Consent:
We may rely on your consent where you have actively chosen to provide it, for example for certain non-essential cookies or other optional communications.

You can withdraw consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

Legitimate interests:
We may process personal data where this is necessary for our legitimate interests, or those of a third party, provided those interests are not overridden by your interests or fundamental rights and freedoms.

Our legitimate interests may include operating and administering our business, responding to enquiries, maintaining website security, improving our website and services, and protecting our legal rights.

Contract:
We may process personal data where this is necessary to take steps at your request before entering into a contract or to perform a contract with you.

Legal obligation:
We may process personal data where necessary to comply with a legal or regulatory obligation.

6. Consent under India’s DPDP Act

Where the DPDP Act applies, Whitestone will process digital personal data in accordance with the applicable requirements of the DPDP Act and DPDP Rules.

Where consent is the applicable basis, we will seek consent in a manner that is appropriately informed, specific and capable of being withdrawn.

We will process personal data only for specified purposes and will provide appropriate information regarding the personal data and purpose of processing as required by applicable law.

7. Contact enquiries

If you contact us through the website, we will use the information you provide to understand and respond to your enquiry.

We may retain correspondence where reasonably necessary to:
• respond to your enquiry;
• maintain appropriate business records;
• establish or manage a prospective business relationship;
• resolve disputes; or
• comply with legal obligations.

We do not sell or rent personal data collected through this website.

8. Direct marketing

We will only send electronic direct marketing where permitted by applicable law.

Where consent is legally required, we will provide a straightforward way to withdraw consent or unsubscribe.

You can also contact us at https://whitestone.international/contact/ to object to direct marketing.

9. Cookies and similar technologies

The website uses cookies and similar technologies.

Some are strictly necessary for the website to operate. Other cookies, such as analytics or functionality cookies, may require your consent under applicable law.

10. Who we share personal data with

We may share personal data with carefully selected third parties where necessary for the purposes described in this Policy.

These may include:
• website maintenance and security providers;
• contact-form or email-delivery providers;
• analytics providers, where permitted;
• professional advisers;
• legal, regulatory or governmental authorities where required;

We do not sell or rent personal data collected through this website.

11. How long we retain personal data

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, including where necessary to satisfy legal, accounting, regulatory, security or dispute-resolution requirements.

Retention periods will depend on the nature and purpose of the information.

For example:
• website enquiry information will normally be retained for as long as reasonably necessary to deal with the enquiry and any resulting relationship;
• business records may be retained for longer where necessary for legitimate business or legal purposes;
• consent records may be retained for as long as necessary to demonstrate and administer consent; and
• technical/security records may be retained for periods appropriate to security and operational requirements.

When personal data is no longer required, we will delete, anonymise or securely dispose of it, subject to applicable legal requirements.

12. Security

We use reasonable technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.

These measures may include appropriate access controls, security monitoring, software and plugin updates, backups and other measures appropriate to the nature and risks of the processing.

However, no internet transmission or storage system can be guaranteed to be completely secure.

13. Your rights under UK GDPR

Where the UK GDPR applies, you may have the right to:
• request access to your personal data;
• request correction of inaccurate or incomplete personal data;
• request erasure of personal data in certain circumstances;
• request restriction of processing in certain circumstances;
• object to processing based on legitimate interests;
• object to direct marketing;
• request portability of certain personal data;
• withdraw consent where processing is based on consent; and
• request information about certain automated decision-making.

These rights are subject to applicable legal conditions and exemptions.

You will generally not have to pay a fee to exercise your rights. However, applicable law permits a reasonable fee or refusal of a request in limited circumstances, including where requests are manifestly unfounded or excessive.

To exercise your rights, contact: https://whitestone.international/contact/

We may need to request information reasonably necessary to verify your identity before fulfilling certain requests.

14. Your rights under India’s DPDP Act

Where the DPDP Act applies, you may have rights including:
• obtaining information about personal data processed by Whitestone;
• requesting correction, completion or updating of personal data;
• requesting erasure of personal data, subject to applicable law;
• obtaining grievance redressal; and
• exercising any other rights available under applicable provisions of the DPDP Act and DPDP Rules.

Requests may be submitted to: https://whitestone.international/contact/

We will provide the means and information reasonably necessary to enable Data Principals to exercise applicable rights.

15. Complaints

If you have concerns about how we process your personal data, please contact us first at: https://whitestone.international/contact/

We will investigate and seek to resolve legitimate privacy concerns.

If you are in the UK and remain dissatisfied, you have the right to complain to the Information Commissioner’s Office (“ICO”), the UK’s data protection supervisory authority.

ICO website: https://ico.org.uk/

Where the DPDP Act applies, you may also exercise the applicable grievance-redressal process and, where available after exhausting the required internal process, pursue the relevant remedy before the Data Protection Board of India.

16. Third-party websites

The website may contain links to third-party websites, social media platforms, video platforms or other external services.

Those websites operate under their own privacy policies and terms. Whitestone is not responsible for the privacy practices, security or content of third-party websites.

You should review their policies before providing personal data.

17. Children

The website is intended primarily for business and professional audiences and is not directed at children.
We do not knowingly seek to collect personal data from children through the website.

If you believe that a child has provided personal data to us, please contact us at https://whitestone.international/contact/

18. Automated decision-making and profiling

We do not intend to use personal data submitted through this website to make decisions about individuals based solely on automated processing that produce legal or similarly significant effects.

Where applicable, their operation will be subject to applicable consent requirements and the information provided in our Cookie Policy.

19. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our website, business, technology or applicable law.

The latest version will be published on this page with the date of the most recent update.

20. Contact

For privacy questions, requests or complaints, contact:
Whitestone International: https://whitestone.international/contact/

Last updated: 3 September 2026

COOKIE POLICY

This Cookie Policy explains how Whitestone International (“Whitestone”, “we”, “us” or “our”) uses cookies and similar technologies on: https://whitestone.international/

This Cookie Policy should be read together with our Privacy Policy.

1. What are cookies?

Cookies are small text files that websites place on your device when you visit them.

They can perform different functions, including enabling a website to operate, remembering preferences, understanding how visitors use a website and, where permitted, supporting marketing or advertising activity.

Similar technologies, such as pixels, tags, scripts and local storage, may also be used. Where this Policy refers to “cookies”, this includes these technologies where appropriate.

2. Types of cookies we may use


Strictly necessary cookies
These cookies are necessary for the website to operate or for a service you have specifically requested.

They may be used for purposes such as:
• security;
• session management;
• website functionality;
• load balancing;
• remembering cookie-consent choices; and
• preventing fraudulent or malicious activity.

These cookies do not normally require consent where they fall within the applicable legal exemption.

Analytics cookies
Where used, analytics cookies help us understand how visitors use the website, for example:
• which pages are visited;
• how visitors navigate the website;
• whether pages or functions are working effectively; and
• how website performance can be improved.

We will obtain consent before using analytics cookies where consent is required by applicable law.

3. Managing cookies

You can control cookies through your browser settings.

Blocking or deleting cookies may affect the functionality or appearance of some websites.

4. Third-party cookies

Some website functionality may be provided by third parties. For example, pages may contain links or embedded content from external platforms.

Those third parties may use their own cookies or similar technologies when you interact with their services. Their use of cookies is governed by their own policies.

Where technically practicable, Whitestone will configure embedded content and third-party services so that optional technologies are not activated before the appropriate consent has been obtained.

5. Changes to this Cookie Policy

We may update this Cookie Policy when the website, cookies, technologies or applicable legal requirements change.

The current version will always be published on this page.

6. Contact

Questions about our use of cookies can be sent to:
Whitestone International: https://whitestone.international/contact/

Last updated: 3 September 2026

WEBSITE TERMS & CONDITIONS

These Terms & Conditions (“Terms”) govern your use of the Whitestone International website:
https://whitestone.international/

By accessing or using the website, you agree to these Terms. If you do not agree with them, you should not use the website.

1. About Whitestone

The website is operated by:

Whitestone International Limited

Registered office: Effingham Common Road, Surrey, KT24 5JG
Registered company number: 3951543
Registered in the United Kingdom

References to “Whitestone”, “we”, “us” and “our” mean that entity.

2. Use of the website

You may use the website for lawful purposes only.

You must not:
• use the website in breach of any applicable law or regulation;
• attempt to gain unauthorised access to the website or its systems;
• introduce malicious code, viruses or other harmful material;
• interfere with the operation or security of the website;
• use automated systems to access or extract content in a manner that places unreasonable demands on the website;
• reproduce, republish, sell or commercially exploit website content without our permission; or
• use the website to infringe the rights of Whitestone or any third party.

3. Website content

We seek to ensure that information on the website is accurate and up to date.

However, website content is provided for general information and may be changed, updated or removed without notice.

Nothing on the website constitutes professional, legal, financial, investment or other regulated advice.

Information about Whitestone’s services is not an offer capable of acceptance and does not create a contractual relationship unless and until the relevant parties enter into a separate written agreement.

4. Intellectual property

Unless otherwise stated, the website and its content are owned by or licensed to Whitestone.

This includes, where applicable:
• text;
• copy;
• graphics;
• photographs;
• illustrations;
• logos;
• trademarks;
• brand identities;
• design work;
• layouts;
• videos;
• downloads; and
• other visual or creative materials.

All rights are reserved unless expressly stated otherwise.

You may view and access the website for your own lawful purposes.

You must not reproduce, adapt, distribute, publish, transmit, modify, commercially exploit or create derivative works from website content without our prior written permission, except where permitted by applicable law.

5. Whitestone work and case studies

The website may feature examples of work undertaken by Whitestone for clients.

Such material is presented for portfolio and informational purposes.

Unless expressly stated otherwise, publication of a client name, logo, case study or project does not imply that the client currently endorses Whitestone or that the client has authorised any use beyond the presentation of the work on the website.

Third-party trademarks, logos and IP rights remain the property of their respective owners.

6. Third-party websites and services

The website may contain links to third-party websites or services.

These links are provided for convenience or information.

Whitestone does not control and is not responsible for the availability, content, security, privacy practices or terms of third-party websites.

Accessing a third-party website is at your own risk.

7. No warranties

To the fullest extent permitted by law, the website and its content are provided without warranties or representations except where such warranties cannot lawfully be excluded.

Nothing in these Terms excludes or limits any liability that cannot legally be excluded or limited.

8. Limitation of liability

To the fullest extent permitted by applicable law, Whitestone will not be liable for indirect, incidental, special or consequential loss arising from your use of, or inability to use, the website.

Nothing in these Terms excludes or limits liability for:
• deliberate misconduct where such liability cannot lawfully be excluded;
• breach of statutory rights that cannot legally be excluded; or
• any other liability that cannot lawfully be excluded or limited.

9. Indemnity

To the extent permitted by law, you agree to indemnify Whitestone against losses, liabilities, costs and expenses reasonably incurred as a result of your unlawful use of the website or your breach of these Terms.

10. Privacy

Your use of the website is also subject to our Privacy Policy and Cookie Policy.

These explain how we process personal data and use cookies and similar technologies.

11. Changes to these Terms

We may update these Terms from time to time.

The current version will apply from the date stated at the beginning of the Terms.

12. Severability

If any provision of these Terms is held to be unlawful, invalid or unenforceable, that provision will be treated as modified or removed to the minimum extent necessary, and the remaining provisions will continue in effect.

13. No waiver

A failure or delay by Whitestone to exercise any right under these Terms does not constitute a waiver of that right.

14. Governing law and jurisdiction

These Terms are governed by the laws of England and Wales.

Subject to any mandatory rights or jurisdiction applicable to you under the laws of your country of residence, the courts of England and Wales will have exclusive jurisdiction over disputes arising from or relating to these Terms or your use of the website.

15. Contact

Questions concerning these Terms may be sent to:

Whitestone International: https://whitestone.international/contact/

Last updated: 3 September 2026

ABOUT WHITESTONE INTERNATIONAL

We’re a company of internationally recognised strategists, creatives and storytellers focused on the personal, social and cultural value drivers that engage and connect with audiences.