Privacy Policy

Introduction

This Privacy Policy applies to MarbleTrays.com and the public website services through which visitors browse natural-stone products and editorial content, submit enquiries, request material guidance, discuss bespoke trays or custom projects, seek order support, subscribe to Journal updates or contact the team.

It explains the categories of personal information handled through the website, the reasons for using that information, the circumstances in which it may be shared, the general approach to retention and security, and the choices that may be available to you. Additional terms may apply to an order, delivery, return or specific service and should be read with this policy.

The website is currently enquiry-led. The reviewed public project does not provide a database-backed customer account area or an integrated public card checkout. If you proceed with an order after an enquiry, additional billing, payment and delivery information may be collected during direct communication and by the providers involved in completing the transaction.

Who We Are

MarbleTrays.com is the customer-facing website used for Marble Trays products, natural-stone guidance, bespoke requests and project enquiries. The public business and privacy-contact details shown below are loaded from the website contact records so that changes to an approved public contact are reflected consistently.

The project supplied for this policy does not contain a verified registered legal-entity name. For that reason, this page does not invent or publish a registered company name. A verified legal name can be added to the contact record when it is available and approved for publication.

Information We Collect

The information handled depends on how you use the website and which enquiry or communication channel you choose.

How We Collect Information

Information is collected when you browse the website, submit the Contact & Consultation form, start a product enquiry, request material guidance, submit a bespoke or custom-project request, ask for existing-order support, upload a file, subscribe to Journal updates or send a privacy-related question.

Information may also be received when you communicate through email, telephone or WhatsApp. Those channels are operated partly outside the website and may process account, device and message information under their own terms and privacy practices.

If a sale proceeds after an enquiry, information may be collected through invoices, payment arrangements and delivery communications. The website should be updated if a public checkout, customer-account system, analytics platform, advertising technology or additional marketing system is introduced.

How We Use Information

Personal information may be used only where relevant to the interaction, request or legitimate operation of the website.

• Respond to general, product, material, bespoke, trade, hospitality, project and support enquiries.
• Review feasibility, dimensions, material availability, finish options and production requirements.
• Prepare or discuss quotations, specifications and project information.
• Route an enquiry to an appropriate public contact or department.
• Communicate about an order, payment arrangement, delivery, return, damage report or care question.
• Record consent and process Journal-update subscription requests.
• Protect forms against forgery, spam, automated abuse and duplicate submission.
• Validate uploads, maintain service logs, diagnose errors and secure the website.
• Maintain necessary business, correspondence, accounting or legal records.
• Understand and improve the website using operational information available in the current system.

Orders and Payments

The reviewed public website is designed around enquiries and made-to-order discussions and does not contain an integrated public card-checkout or customer-account system. Product and project requests are submitted as enquiries rather than completed as online card transactions within the supplied website code.

When an enquiry develops into an order, the team may need billing details, delivery information, order specifications and payment-related confirmations. A payment provider, bank, invoicing service or other transaction channel may process information needed to complete the payment. The relevant provider and its terms should be identified to the customer at the time of the transaction.

Do not send full payment-card numbers, security codes or unnecessary financial information through the general enquiry form, WhatsApp or ordinary email. This policy should be reviewed before an online checkout or named payment integration is activated.

Enquiries and Bespoke Requests

Enquiry records may contain contact details, product references, material preferences, intended applications, dimensions, shapes, finishes, edge profiles, quantities, project locations, delivery countries, preferred dates and free-text notes. The information is used to understand the request, assess feasibility, identify an appropriate contact and continue the conversation.

Bespoke and custom-project information may be retained as part of the project or quotation history because dimensions, approvals, references and production instructions can be important to avoid mistakes and to respond to later questions. Only provide information that is relevant to the request.

When you choose a specific public contact or begin a conversation from a salesperson card, the website may record the selected contact or department in the enquiry details so that the request can be routed appropriately.

File Uploads

The Contact & Consultation system can accept JPG, PNG, WEBP and PDF references, subject to the displayed file-size and attachment limits. Uploaded files may contain drawings, inspiration images, measurements, order-condition photographs or project specifications.

The website validates supported file types, generates server-side filenames and stores enquiry attachments in a protected directory configured for the inquiry system. Authorised personnel may access a file when it is needed to review or respond to the enquiry.

Do not upload identity documents, payment-card information, confidential third-party material or other sensitive information unless it is genuinely required and an appropriate secure method has been agreed. Files may be retained with the related enquiry or project record for as long as reasonably needed for communication, support, dispute handling, security or legal obligations.

Marketing Communications

The Journal newsletter form records an email address, consent and subscription type in the existing inquiry system. That record may be used to manage requests for new Journal articles, material stories, product news or other communications described at the point of sign-up.

Marketing messages should be sent only where there is an appropriate permission or other lawful basis. You may ask to stop marketing communications by contacting the public privacy contact or by using an unsubscribe method included in a message when one is available.

A request to stop marketing does not normally prevent necessary transactional, enquiry, project, security or support messages. The website should be reviewed if an external email-marketing platform or automated preference centre is introduced.

Cookies and Analytics

The current PHP pages may use a secure session cookie or equivalent session mechanism for functions such as CSRF protection, form state, rate limiting and duplicate-submission prevention. These functions support website security and form operation.

The reviewed public project does not load a behavioural advertising pixel or a dedicated analytics script in its active PHP templates. It does load Google Fonts from Google-operated domains as part of the existing theme, which means a visitor's browser may send standard request information, including an IP address and user-agent information, to those domains when retrieving font resources.

There is no separate cookie-preference centre in the supplied project. If analytics, advertising, additional preference cookies or another non-essential technology is introduced, the Cookie Policy, consent controls and this Privacy Policy should be updated before or when that technology becomes active. You can also manage browser storage through your browser settings, although disabling essential session functions may affect forms.

Sharing Information

Personal information may be available to authorised Marble Trays personnel who need it to answer an enquiry, review a project, provide support or administer the website. Access should be limited to the purpose for which the information is needed.

Information may also be processed by service providers that support website hosting, server operation, email delivery, communications, file storage, security, payment, delivery, professional advice or other services required to operate the business. A provider should receive only the information reasonably necessary for its role and may have its own privacy obligations.

Information may be disclosed where reasonably necessary to comply with law, respond to a lawful request, protect rights and safety, investigate fraud or abuse, resolve a dispute, or support a legitimate business reorganisation. This policy does not claim that information is never shared, because providers and transaction partners may need access to complete requested services.

International Processing

Marble Trays is based in the United Arab Emirates, while visitors, customers and technology providers may be located in other countries. Website hosting, email, fonts, WhatsApp, payment, delivery or other supporting services may involve processing outside your country or outside the UAE.

Data-protection rules can differ between countries. Where required, reasonable contractual, organisational or legal measures should be used for international processing. The exact location of processing depends on the providers and services active at the time.

Data Retention

Information is kept only for as long as reasonably needed for the purpose described, for security, to maintain business records or to meet applicable obligations. The supplied project does not define universal fixed deletion periods, so the table uses purpose-based retention wording rather than invented deadlines.

Data Security

The website uses measures intended to reduce unauthorised access and misuse, including prepared database statements, server-side validation, output escaping, CSRF tokens, upload-type controls, protected upload storage, session protections, rate limiting and restrictions on direct access to configuration and include directories.

Operational safeguards may also include access controls, secure connections, hosting security, backups, maintenance and limited staff access. No website, transmission method or storage system can be guaranteed completely secure, so this policy does not promise absolute security.

If you believe information has been submitted incorrectly or a security issue affects your information, contact the privacy contact using the details on this page.

Your Rights and Choices

Depending on your location and applicable law, you may have rights or choices concerning personal information. A request may require reasonable verification and may be limited by legal, security, accounting or record-keeping obligations.

• Ask what personal information is held about you or how it is used.
• Request correction of inaccurate or incomplete information.
• Request deletion where the information is no longer needed and no overriding reason requires retention.
• Request restriction of, or object to, certain processing where applicable.
• Withdraw marketing permission or ask to stop Journal marketing communications.
• Ask a question about cookies, sessions or third-party website resources.
• Request a copy of information in an appropriate form where applicable.
• Complain to an appropriate authority where you believe your rights have not been respected.

Children’s Privacy

The website and its enquiry services are intended for adults purchasing, specifying or seeking information about natural-stone products and projects. They are not designed as services directed specifically to children.

The project does not define or verify a universal minimum age for every jurisdiction, so this policy does not invent one. If you believe a child has submitted personal information without appropriate involvement, contact the privacy contact so the circumstances can be reviewed.

Third-Party Links and Services

The website may link to or load resources from third parties, including WhatsApp, Google Fonts, social platforms, maps, payment channels, delivery providers or other services used during a transaction or communication. Those providers operate under their own terms and privacy practices.

Following a third-party link or using an external communication or payment service may transmit information directly to that provider. Review the provider's privacy information before submitting sensitive information through an external service.

Policy Updates

This policy may be updated when the website's data practices, forms, providers, legal requirements or business operations change. The approved legal-update date and policy version are stored in the Privacy Policy page content and should be changed only when the wording has been reviewed.

The current version will be published at this route. Significant changes may also be communicated through the website or an appropriate direct channel where required.

Contact Us

Use the public privacy contact below to ask about this policy, correct information submitted through the website, change a marketing preference or submit another privacy-related request. Describe the request clearly and include enough information to identify the relevant enquiry or communication, but do not send unnecessary identity documents or payment information through ordinary email.

Before disclosing information about an order, enquiry or project, the team may need to take reasonable steps to verify that the request comes from the appropriate person.