Privacy Policy | Centerstone Vinyl Wrap

1. Introduction

Welcome to Centerstone Vinyl Wrap ("we," "our," or "us"). We respect your privacy and are committed to protecting your personal data. This privacy policy will inform you as to how we look after your personal data when you visit our website (wrap.centerstone.ae) and tell you about your privacy rights and how the law protects you.

2. The Data We Collect

We may collect, use, store and transfer different kinds of personal data about you which we have grouped together as follows:

Identity Data: includes first name, last name, title.
Contact Data: includes email address, telephone number, and installation address.
Technical Data: includes internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform.
Usage Data: includes information about how you use our website, products and services.
Creator Spaces Application Data: includes creator and social profile details, mobile number, email, emirate and community, application responses, review status, and photos of the submitted space. We do not ask for a full address at the application stage.
Influencer Offer Data: includes the referral code entered, the related influencer and campaign, discount eligibility, selected wrapping services, name, mobile number, emirate, area or community, optional notes, and whether you chose the estimate form or WhatsApp. The offer form does not ask for a street or unit address.

3. How We Use Your Data

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

To provide you with a quote or estimate for our services.
To manage our relationship with you, including notifying you about changes to our terms or privacy policy.
To improve our website, products/services, marketing, customer relationships and experiences.
To receive, evaluate, secure and administer Creator Spaces applications, including allowing an applicant to look up an application status using the mobile number submitted with it.
To validate influencer referral offers, provide discount eligibility, create or update a sales lead, open a requested WhatsApp conversation, measure campaign performance, prevent duplicate submissions, and attribute later sales outcomes to the relevant campaign.

4. Creator Spaces Applications

Creator Spaces application details are stored privately using Firebase services provided by Google. Submitted photos are stored privately using Cloudflare R2 object storage. Photos are used to assess the proposed surface and collaboration fit and are not made public through the status tracker. The tracker shows only the application reference, submitted space type, public status message, and relevant dates linked to the mobile number entered.

We retain an application while it is being evaluated. Incomplete drafts are removed after 24 hours. Declined, withdrawn, or manually deleted applications and their photos are scheduled for permanent deletion after a 30-day recovery period. We may retain non-identifying aggregate statistics, such as application counts by date, space type, emirate, content category, and review outcome, after the underlying personal information and photos are deleted. If selected, the information may be retained as needed to assess and administer the collaboration under the separate creator agreement. If you want to withdraw your application, correct your details, or request deletion, contact info@centerstone.ae. Some limited records may be retained where reasonably necessary for security, disputes, or legal obligations.

5. Influencer Offers and Attribution

When you use an influencer referral offer, the referral code is checked on our server. If it belongs to an active campaign, the campaign and discount percentage are recorded with your lead in our private sales portal. If you choose WhatsApp, we first create or update that same lead and record the click, then redirect you to WhatsApp with a prefilled message containing the lead reference and referral code. We can record that WhatsApp was opened, but we cannot confirm that a message was sent.

We collect anonymous offer-page and campaign events such as page views, successful code checks, form starts, completed leads, WhatsApp clicks, device class, referring site, and campaign tags in the URL. Raw anonymous analytics events are retained for up to 90 days. We may retain non-identifying daily totals for historical campaign reporting. Customer contact details are stored only in the private sales portal and are used to respond to the enquiry and manage the estimate. Campaign reports may use linked lead and estimate records to show sales status and approved value; where those records are not linked, we report the coverage gap rather than treating the revenue total as complete.

6. Data Security and Service Providers

When you use the application tracker, the mobile number you enter is sent to Firebase to find the matching applicant-safe status record. No SMS verification is used. Firebase App Check, Cloudflare Turnstile, and server-side rate limits protect the tracker and application form from automated abuse.

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorized way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know.

7. Contact Us

If you have any questions about this privacy policy or our privacy practices, please contact us at:
Email: info@centerstone.ae
Phone: +971 52 293 5520
Address: 1110, IT Plaza Building, Dubai Silicon Oasis, Dubai - UAE