At The White Company, we are committed to protecting your personal information and being transparent about how we use it. This Privacy Policy explains what information we collect, why we collect it, how we use it, who we share it with, how we protect it and the rights you have.

The White Company (UK) Ltd is responsible for looking after your personal information whenever you shop with us, visit our stores or use our website.

Under UK data protection law, we are the data controller. This means we decide how your personal information is used so that we can provide our products and services, whilst protecting your privacy and respecting your rights.

The White Company (UK) Ltd is based at:

2 Television Centre

101 Wood Lane

London

W12 7FR

Company Registration Number: 2998082

• We collect information to process orders, manage your account and provide customer support.
• We use information to improve our products and services, prevent fraud and meet our legal obligations.
• We only send marketing where permitted by law and you can opt out at any time.
• We only share information with trusted partners where necessary.
• We protect your information using appropriate technical and organisational measures.

We collect personal information when you shop with us, visit our stores, use our website or app, contact us, or interact with us on social media. We also receive information from trusted third parties who help us provide our products and services.

We only collect information that is relevant for the purposes described in this Privacy Policy.

When you create an account, place an order, contact us or otherwise interact with us, you may provide us with information such as:

• your name and title
• your postal address, email address and telephone number
• your social media username where you contact us through social media
• your day and month of birth
• details of your orders, purchases and transactions
• your marketing preferences
• information you provide in enquiries, correspondence or forms you submit
• responses to customer surveys, reviews or competitions
• information needed to verify your identity when you exercise your privacy rights information you provide when contacting our Customer Services team, including call recordings where calls are recorded for training, quality assurance, security and fraud prevention purposes.

You choose whether to provide most of this information. However, some details are required so that we can process your order or provide the services you have requested.

When you visit our stores or use our website, we automatically collect certain information to help us operate our business, improve our services and protect our customers.

This may include:

• CCTV images to help protect our customers, colleagues, premises and products;
• information about the use of vouchers and gift cards.

• your IP address
• device, browser and operating system information
• the pages you visit and how you use our website
• the date, time and duration of your visit
• the website you visited before arriving at ours
• your use of vouchers and promotional codes
• your marketing consent and preference history
• information collected through cookies and similar technologies. More information is available in our Cookie Policy.

We also use website analytics and technology to understand how customers use our website, improve performance, prevent fraud and enhance your experience. Where required by law, we will ask for your consent before using non-essential cookies or similar technologies.

We also receive information from trusted third parties where this is necessary to provide our products and services or where we are legally permitted to do so.

These may include:

• payment providers, such as Worldpay, PayPal and Klarna (where you choose Klarna at checkout)
• delivery, fulfilment and warehousing partners
• advertising, analytics and social media providers
• customer review providers
• fraud prevention and identity verification providers
• search and retail technology providers
• customers who ask us to send gifts directly to you.

We also receive information through cookies and similar technologies when you use our website. Please see our Cookie Policy for more information.

We use technology, analytics and limited profiling to help us detect fraud, improve customer service and enhance your shopping experience.

We do not make decisions that have legal or similarly significant effects on you based solely on automated processing without appropriate human involvement.

We use your personal information to provide our products and services, improve your experience, protect our customers and business, and meet our legal responsibilities.

• We will only use your personal information where we have a valid legal reason to do so. Depending on how you interact with us, this may be because:
• you have given us your consent
• we need your information to fulfil a contract with you
• we have a legal obligation to use it
• we have a legitimate business interest that does not override your rights and freedoms.

• process, fulfil and deliver your orders
• process payments, refunds and payment enquiries
• provide customer support and respond to your enquiries
• manage your account
• administer competitions and promotions
• arrange deliveries through our fulfilment, warehousing and delivery partners.

We use your information for these purposes because it is necessary to fulfil our contract with you or to take steps before entering into a contract.

• send you marketing communications by email, SMS, push notification or other electronic channels
• keep you updated about our products, services, offers and events
• ask you to review or update your marketing preferences from time to time.

You can change your marketing preferences or unsubscribe at any time. More information is available in the Marketing Communications section of this Privacy Policy.

• understand how customers use our website and services
• improve our products, website and customer experience
• analyse customer feedback, surveys and reviews
• measure the effectiveness of our marketing and promotions
• personalise our communications where appropriate
• operate and improve our websites, systems and business processes
• provide training and quality assurance for our Customer Services team.

These activities are carried out because they are in our legitimate interests as a retailer and help us improve the services we provide to our customers.

• prevent and detect fraud and other criminal activity
• protect our customers, colleagues and business
• investigate suspicious activity
• maintain the security of our systems and services
• record and manage customer service calls where appropriate
• evidence transactions and resolve disputes.

These activities help us maintain a safe and secure shopping environment and are carried out where we have a legitimate interest or legal obligation to do so.

In some circumstances, we must use your information to comply with the law.

This includes:

• maintaining records relating to your privacy rights
• responding to legal requests from regulators or law enforcement where required
• managing health and safety incidents
• investigating and resolving complaints
• complying with legal, regulatory and accounting requirements.

If you choose not to provide information that we need to fulfil a legal obligation or provide our products and services, we may be unable to process your order or respond to your request.

We use technology, analytics and limited profiling to help improve our services, prevent fraud and support customer service.

We do not make decisions that have legal or similarly significant effects on you based solely on automated processing without appropriate human involvement.

We'd like to keep you informed about our latest products, collections, events, offers and promotions.

We will only send you marketing communications where we are allowed to do so by law.

Depending on the circumstances, this may be because:

• you have asked to receive marketing from us
• you have given us your consent
• you have previously purchased from us or shown an interest in our products, and the law allows us to contact you unless you have chosen to opt out.

If you are a business customer or corporate contact, we may send you information about our products and services where this is in our legitimate business interests and your rights are not overridden.

Our marketing communications may include:

• new products and collections
• product launches
• exclusive offers and discounts
• competitions and promotions
• events
• news and inspiration from The White Company.

When we first collect your personal information, we'll explain your marketing choices and, where appropriate, ask for your consent.

Every marketing email or SMS we send includes a simple way to unsubscribe, and you can update your marketing preferences at any time.

If you withdraw your consent or opt out of marketing, we'll stop sending you marketing communications. We may still contact you about your orders, account or other important service-related information where necessary.

We want our marketing to be relevant and useful.

To help us do this, we may use information about how you interact with our website, emails and products to better understand your interests and preferences.

This may include information about:

• products you have viewed or purchased
• items added to your basket
• your browsing activity on our website
• whether you open or interact with our emails
• your previous purchases and preferences.

We use this information to personalise the products, recommendations and offers you receive and to improve the effectiveness of our marketing.

Where required by law, we will ask for your consent before using non-essential cookies, tracking technologies or similar technologies. More information is available in our Cookie Policy.

We work with carefully selected marketing, advertising and analytics providers to help us deliver, improve and measure our marketing campaigns. All our service providers are required to protect your personal information and may only use it in accordance with our instructions and applicable data protection laws.

Meta Platforms Ireland Limited ("Meta")

We work with Meta to understand how customers interact with our website and to measure the effectiveness of our advertising. To do this, we may share limited information such as your name, email address, telephone number, postal address, website activity and purchase information.

Where appropriate, this information is hashed before it is shared to provide an additional layer of protection.

Meta processes this information in accordance with its own Privacy Policy and is responsible for certain processing activities as an independent controller, including the creation of advertising audiences, campaign measurement and, where applicable, international transfers of personal information.

Epsilon

We work with Epsilon, an advertising and analytics partner, to help us understand how customers interact with our website, measure the effectiveness of our advertising and provide more relevant advertising.

Where you have agreed to the use of advertising cookies or similar technologies, Epsilon and its advertising partners may recognise your browser or device and collect information about your browsing activity when you visit our website. This may include information about the pages and products you view, your interactions with our website and online purchases.

We may also provide Epsilon with limited information, such as your name, email address, postal address and purchase information, to help measure advertising performance and make our advertising more relevant. Where appropriate, this information is protected using measures such as hashing or pseudonymisation before it is used.

Epsilon may combine this information with information it receives from its advertising partners to understand whether different browsers or devices may relate to the same person or household and to measure and personalise advertising across websites and devices.

Epsilon is responsible for certain processing activities as a controller. You can find out more by reading:

• [Epsilon’s Privacy Policy]
• [Epsilon’s current list of advertising partners]
• [Epsilon’s Consumer Rights Portal]

You can also manage your choices through our cookie preference centre. Where we rely on your consent, you can withdraw it at any time.

Some of the organisations we work with are based outside the UK or European Economic Area (EEA) or may store or process personal information in other countries.

Where this happens, we take steps to ensure that your personal information continues to receive an appropriate level of protection and is handled securely and in accordance with applicable data protection laws.

For example, we may transfer personal information:

• to trusted service providers who support our customer service operations, telephony and contact centre services
• to fulfilment and delivery partners where you have asked us to deliver an order outside the UK
• to trusted marketing or technology providers where you have agreed to receive services that require international processing.

Where required, we protect international transfers using recognised legal safeguards, including:

• UK adequacy regulations
• the UK International Data Transfer Agreement (IDTA)
• the UK Addendum to the EU Standard Contractual Clauses (SCCs)
• other lawful transfer mechanisms approved under UK data protection law.

These safeguards are designed to ensure your personal information continues to receive a level of protection that is broadly equivalent to that provided under UK data protection law, regardless of where it is processed.

Protecting your personal information is important to us.

We use appropriate technical and organisational security measures to protect your personal information from unauthorised access, loss, misuse, alteration or disclosure.

We regularly review our security measures to help ensure they remain effective and appropriate.

Although we work hard to protect your personal information, no method of transmitting information over the internet or storing it electronically can be guaranteed to be completely secure.

If you create an online account with us, we recommend that you:

• choose a strong, unique password
• keep your password confidential
• avoid reusing passwords across different websites
• consider using a password manager
• enable multi-factor authentication where it is available.

If you use a shared or public computer, remember to log out and close your browser when you have finished your session.

We will never ask you to provide your password or full payment card details by email. If you receive a message claiming to be from The White Company asking for this information, please do not respond and contact our Customer Services team if you are unsure whether the message is genuine.

Our website, emails and social media pages may contain links to websites operated by other organisations.

These websites have their own privacy policies and we encourage you to read them before providing any personal information.

We are not responsible for the content, privacy practices or security of third-party websites, even where you access them through links from our website.

We only keep your personal information for as long as it is needed for the purposes described in this Privacy Policy.

How long we keep your information depends on the type of information, why we collected it and any legal or regulatory requirements that apply.

Once we no longer need your personal information, we will securely delete, anonymise or otherwise dispose of it in accordance with our data retention policies.

In some circumstances, we may need to keep your personal information for longer than our standard retention periods. For example:

• where we are required to do so by law
• to establish, exercise or defend legal claims
• to investigate fraud or other security incidents
• where you have asked us to retain your information or where you have exercised one of your privacy rights and we are required to keep certain records
• where we need to maintain suppression records so that we can continue to respect your marketing preferences.

Where appropriate, we will securely delete or anonymise your personal information once it is no longer required.

Our services are not directed at children and we do not knowingly collect personal data from children without appropriate consent where required by law.

Please check this page regularly for changes to this policy. This policy was last updated on 1st August 2026, the date that appears at the beginning of this policy on our site.

You can contact us with your queries in relation to this policy or for any other reason by:

Post:

The White Company (UK) Ltd

2 Television Centre

101 Wood Lane

London

W12 7FR

Email: customerservice@thewhitecompany.com

Phone: 020 375 89 222

(Monday to Friday 8.00am to 6.00pm, Saturday 9.00am to 5.00pm, Sunday 10.00am to 4.00pm).

If you are unhappy with how we have handled your personal data, or with our response to a request you have made under data protection law, you can raise a data protection complaint with us using the contact details below. We aim to respond to all privacy requests within one month, although this may be extended where permitted by law if your request is particularly complex. We ask that you contact us first, so we have the opportunity to resolve your complaint before you raise it with the UK Information Commissioner’s Office.

Data Protection Officer:

DPO@thewhitecompany.com