Privacy policy

PRIVACY POLICY

Last updated: 15 June 2026

1. WHO WE ARE

Xwhite Ltd ("we", "us", "our") is a private limited company registered in England and Wales.

Registered address: 20-22 Wenlock Road, London, N1 7GU, United Kingdom
Company registration number: 14512398
VAT number: GB511890402
Email: hello@xwhitesmile.com
Website: www.xwhitesmile.com

Xwhite Ltd is the data controller responsible for your personal data under UK GDPR and the Data Protection Act 2018.

2. WHAT DATA WE COLLECT

We may collect and process the following personal data:
- Name, email address, phone number and delivery address
- Payment information (processed securely by our payment providers — we do not store card details)
- Order history and purchase behaviour
- IP address, browser type and device information
- Communications you send to us (emails, contact forms)
- Marketing preferences

3. HOW WE USE YOUR DATA

We use your personal data to:
- Process and fulfil your orders
- Send order confirmations and shipping updates
- Provide customer support
- Send marketing communications (only with your consent)
- Improve our website and services
- Comply with legal obligations
- Prevent fraud and ensure security

Legal bases under UK GDPR:
- Contract performance (processing orders)
- Legitimate interests (fraud prevention, improving services)
- Consent (marketing emails)
- Legal obligation (tax and accounting records)

4. SHARING YOUR DATA

We do not sell your personal data. We may share it with:
- Shipping and logistics providers (to deliver your order)
- Payment processors (Shopify Payments, PayPal, Klarna)
- Email marketing platforms (e.g. Klaviyo)
- Analytics providers (e.g. Google Analytics)
- Our affiliated company Audacis d.o.o. (Croatia) for fulfilment purposes

All third parties are required to process your data lawfully and securely.

5. INTERNATIONAL TRANSFERS

Your data may be transferred to and processed in countries outside the UK. Where this occurs, we ensure appropriate safeguards are in place, such as UK International Data Transfer Agreements (IDTAs) or equivalent protections.

6. DATA RETENTION

We retain your personal data for as long as necessary to fulfil the purposes described in this policy, and in any case for a minimum of 6 years for accounting and legal purposes.

7. YOUR RIGHTS

Under UK GDPR, you have the right to:
- Access your personal data
- Correct inaccurate data
- Request deletion of your data
- Object to or restrict processing
- Data portability
- Withdraw consent at any time (for consent-based processing)

To exercise any of these rights, contact us at: hello@xwhitesmile.com

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO):
Website: www.ico.org.uk
Phone: 0303 123 1113

8. COOKIES

We use cookies to improve your experience on our website. For full details, please see our Cookie Policy at www.xwhitesmile.com/cookie-policy

9. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time. The latest version will always be available on our website with the date of last update shown at the top.

10. CONTACT US

If you have any questions about this Privacy Policy or how we handle your data, please contact:

Xwhite Ltd
20-22 Wenlock Road, London, N1 7GU, United Kingdom
Email: hello@xwhitesmile.com