Privacy Policy

White Label Ecommerce

Operated by Elevation Lab Marketing Services - FZE

Effective date: 13 September 2026
Last updated: 13 September 2026

1. Who we are

This Privacy Policy explains how we collect, use, share and protect personal data when you visit white-labelecommerce.com, purchase or use White Label Ecommerce, take part in our community, attend our live sessions, or contact us.

The data controller is:

Elevation Lab Marketing Services - FZE
Flexi Desk, DUQE Square Business Center, Quarter Deck, Mina Rashid, QE2
Dubai, United Arab Emirates
Trade Licence No. 3503
Email: support@whitelabeler.ai

In this policy, "we", "us" and "our" mean Elevation Lab Marketing Services - FZE. "You" and "your" mean the person whose personal data we handle, whether you are a visitor, a lead, a customer or a community member.

If you use the Whitelabeler software, that product has its own privacy policy published at whitelabeler.ai which applies to your use of the software in addition to this policy. Where the two overlap, the Whitelabeler policy governs data processed inside the software itself.

2. Scope of this policy

This policy covers personal data we handle as a controller. It does not cover:

• personal data you collect from your own customers through the ecommerce stores you build and operate. In that relationship you are the controller and you are responsible for your own privacy policy, consent collection, and compliance;
• personal data handled by third party platforms you choose to use, such as Shopify, Meta, TikTok, Google, your suppliers or your logistics agent, each of which has its own privacy policy;
• websites we link to, which we do not control.

3. What personal data we collect

3.1 Data you give us

• Identity and contact data. Name, email address, phone number, country, and where relevant your business or company name.
• Account data. Username, password in hashed form, login records, access entitlements and product history.
• Transaction data. Purchase records, enrollment option selected, payment plan status, invoices, refund and guarantee claim history, billing address and the last four digits and card type of the payment method used.
• Guarantee claim data. Where you submit a claim under the Performance Money Back Guarantee, the evidence you provide, which may include screenshots or video of completed modules, advertising creatives, campaign results, advertising spend invoices, store URLs and evidence of community participation.
• Community data. Posts, comments, questions, profile information, uploads and direct messages within our community spaces.
• Session data. Information you share during weekly live meetings, mastermind calls and done with you media buying sessions, including anything visible on a screen you choose to share.
• Support data. The content of emails, support tickets and other correspondence with us.
• Content you submit to our tools. Product details, brand information, logos, images, page URLs, screenshots and written prompts you enter into the creative and AI tools.

3.2 Data we collect automatically

• Device and technical data. IP address, browser type and version, operating system, device type, screen size, language and time zone.
• Usage data. Pages viewed, referring and exit pages, time on page, clicks, scroll depth, video watch data, module and lesson progress, downloads, feature usage and session duration.
• Cookies and similar technologies. As described in section 6.

3.3 Data we receive from third parties

• Payment confirmation data from Stripe, including whether a payment succeeded, failed or was disputed. We do not receive or store your full card number.
• Advertising and analytics data from Meta, Google and TikTok, including aggregated campaign and conversion reporting, and audience matching signals.
• Scheduling data from the booking tool used for media buying sessions, including your selected time slot and any answers to booking questions.

3.4 Data we do not want

Please do not send us special category data, such as information about health, race, religion, political opinions, sexual orientation, biometric or genetic data, or criminal records. We do not need it and we do not ask for it. If you send it to us anyway, you consent to us holding it for as long as it takes to respond to you, after which we delete it.

4. How we use your data, and our legal basis

Where the EU or UK General Data Protection Regulation applies to you, the legal bases we rely on are set out alongside each purpose.

Where we rely on legitimate interests, we have assessed that our interest does not override your rights and freedoms. You may object at any time, as described in section 10.

Under the UAE Personal Data Protection Law, we process your data on the basis of your consent, the performance of a contract with you, our legitimate interests, and compliance with legal obligations, as set out above.

5. Who we share your data with

We do not sell your personal data for money. We share it only as described here.

Service providers who process data on our behalf:

• Stripe, for payment processing, fraud screening, subscription and payment plan management, and dispute handling.
• Our hosting and infrastructure providers, which host white-labelecommerce.com, including our pages, forms, checkout, member accounts, the training library and the community.
• Whitelabeler, which provides the software included with your purchase.
• Our email sending provider, used to deliver service messages and marketing emails.
• Our scheduling provider, used to book media buying sessions and live calls.
• Meta, Google and TikTok, for analytics, conversion measurement and advertising, as described in section 6.
• Artificial intelligence providers, which process the content you submit into our creative and AI tools in order to generate output for you, as described in section 7.
• Video conferencing and recording tools, used to run and record live meetings and sessions.
• Professional advisers, including accountants, auditors, insurers and lawyers, where necessary.

Each processor is engaged under terms that require them to act only on our instructions and to protect your data.

Other sharing:

• Within the community. Our community runs on our own site at white-labelecommerce.com rather than on a third party community platform, so we hold community content directly. What you post is visible to other members and to our team. Do not post anything you are not comfortable sharing, and do not post other people's personal data.
• With a sourcing or logistics agent, only where you ask us to introduce you, and only the contact details needed to make the introduction.
• Where required by law, to a court, regulator, law enforcement body or government authority.
• In a payment dispute, we may share your access logs, login records, download records, session attendance and correspondence with the payment provider or card network as evidence.
• In a business transaction, if we merge with, are acquired by, or sell assets to another business, your data may transfer as part of that transaction. We will tell you before it happens.

6. Cookies, pixels and tracking

We use cookies and similar technologies for three purposes.

• Strictly necessary. Logging you in, remembering your session, securing checkout and preventing fraud. These cannot be turned off.
• Analytics. Understanding which pages perform, where visitors come from and how people move through our site. We use Google Analytics for this.
• Advertising. Measuring conversions and showing you relevant ads. We use the Meta pixel, the TikTok pixel and Google advertising tags. These may set cookies, and may transmit a hashed version of your email address or other identifiers to those platforms so they can match you to an account and build advertising audiences.

Where required by law, we ask for your consent before setting analytics or advertising cookies, and you can change or withdraw that choice at any time through the cookie settings link on our site. You can also block or delete cookies in your browser, though strictly necessary cookies are required for the site to function.

The advertising platforms listed above act as independent controllers for some of their own processing. Their policies apply in addition to ours.

Global Privacy Control. Where required by law, we treat an enabled Global Privacy Control browser signal as a valid request to opt out of advertising cookies and of the sharing of personal data for cross context behavioural advertising.

7. Artificial intelligence processing

Parts of our Services use artificial intelligence to generate copy, images, creatives and page layouts.

• Content you submit into those tools, including product details, brand information, images and prompts, is transmitted to third party AI providers in order to generate your output.
• Do not submit personal data about other people, customer lists, or confidential third party information into these tools.
• AI output may be inaccurate or similar to output generated for other users. You are responsible for reviewing it before you publish it.
• We do not use your submitted content to train our own models. Third party AI providers process it under their own terms, and we select providers that do not train their public models on customer content submitted through business APIs.

8. International transfers

We are established in the United Arab Emirates. Our service providers operate in a number of countries, including the United States and the European Union. This means your personal data will be transferred outside your home country, including outside the European Economic Area and the United Kingdom.

Where we transfer personal data out of the EEA or the UK, we rely on appropriate safeguards, which will normally be the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum, or an adequacy decision where one applies. Where we transfer personal data out of the UAE, we rely on the transfer conditions permitted under the UAE Personal Data Protection Law, including adequate protection, appropriate contractual safeguards, or your explicit consent.

You may request a copy of the safeguards we use by emailing support@whitelabeler.ai.

9. How long we keep your data

We keep personal data only as long as we need it.

• Account and entitlement records: for as long as you hold access, which for lifetime program access means for as long as we operate the offering, and then for six years after your last interaction.
• Transaction, invoice and tax records: at least five years from the end of the relevant financial year, as required by UAE tax and commercial law, and longer where a dispute is open.
• Guarantee claim evidence: six years from the date of the decision, so that we can evidence how a claim was assessed.
• Marketing contact data: until you unsubscribe, and then a minimal suppression record indefinitely so that we do not email you again.
• Support correspondence: three years from the last message.
• Session recordings: for as long as the recording is made available to members, and then archived for up to three years.
• Website analytics and cookie data: normally up to 26 months, depending on the platform.
• Community posts: for as long as the community operates, unless you delete them or ask us to.

Where we no longer need data, we delete it or irreversibly anonymise it.

10. Your rights

Subject to the law that applies to you, you have the right to:

• Access the personal data we hold about you and receive a copy.
• Correct data that is inaccurate or incomplete.
• Delete your data, where we no longer have a lawful reason to keep it. This does not override our obligation to keep transaction and tax records.
• Restrict how we process your data while a concern is being resolved.
• Object to processing based on legitimate interests, and to object to direct marketing at any time with no reason needed.
• Portability, meaning to receive data you gave us in a structured, commonly used, machine readable format.
• Withdraw consent at any time, where we relied on consent. This does not affect processing that already happened.
• Not be subject to a decision based solely on automated processing that produces legal or similarly significant effects. We do not make such decisions. Guarantee claims are reviewed by a person.

10.1 If you are in California

You have the right to know what personal information we collect, use and disclose, the right to delete it, the right to correct it, the right to opt out of sale or sharing, and the right not to be discriminated against for exercising those rights.

We do not sell personal information for money. However, our use of advertising pixels described in section 6 may be treated as "sharing" personal information for cross context behavioural advertising under California law. You can opt out using the cookie settings link on our site, by enabling Global Privacy Control, or by emailing us.

The categories of personal information we have collected in the last twelve months are identifiers, commercial information, internet and network activity, geolocation inferred from IP address, audio and visual information from recorded sessions, professional or employment information, and inferences drawn from the above. We collect these for the business purposes set out in section 4. We do not knowingly collect the personal information of anyone under 18.

10.2 If you are in the UAE

You have the rights set out in the UAE Personal Data Protection Law, including the right to request information about processing, the right to data portability, the right to correction and erasure, the right to restrict or stop processing, and the right to object to automated processing. You may also lodge a complaint with the UAE Data Office.

11. How to exercise your rights

Email support@whitelabeler.ai with the subject line "Privacy Request" and tell us which right you want to exercise. We may ask you to verify your identity before we act, so that we do not disclose your data to someone else.

We respond within 30 days. If your request is complex, we may extend that period and will tell you why within the original 30 days. There is no charge, unless a request is manifestly unfounded or excessive, in which case we may charge a reasonable fee or refuse and explain why.

You may use an authorised agent where the law permits, with written proof of authorisation.

12. Marketing

If you buy from us, enter your email on one of our pages, or register for a workshop or webinar, we may send you marketing emails about our products, offers, training and content.

Every marketing email contains an unsubscribe link, and you can also opt out by emailing us. Opting out of marketing does not stop service messages about your account, billing, scheduling and access, which we must send while you hold an entitlement.

13. Security

We use technical and organisational measures appropriate to the risk, including encryption in transit, access controls, hashed passwords, restricted administrative access, and vetting of our service providers. Payment card data is handled by Stripe under its own PCI DSS compliance and does not reach our systems in full.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If a personal data breach occurs that is likely to result in a risk to your rights, we will notify the relevant supervisory authority and, where required, you, within the timeframes the law sets.

You are responsible for keeping your login credentials confidential and for not sharing your account.

14. Children

Our Services are for adults. We do not knowingly collect personal data from anyone under 18. If you believe a child has provided us with personal data, contact us and we will delete it.

15. Recording of live sessions

Weekly live meetings, mastermind calls and done with you media buying sessions may be recorded so that members can watch them later, and so that we have a record for quality and dispute resolution.

We give notice before recording. If you do not want to appear in a recording, keep your camera and microphone off and do not submit questions during the session. Tell us in advance if you want a media buying session left unrecorded and we will accommodate that where possible.

Do not display customer data, payment details or third party personal data on screen during a shared session.

16. Links to other sites

Our pages link to third party tools, platforms and services, some of which pay us a commission for referrals. We are not responsible for their privacy practices. Read their policies before you give them your data.

17. Changes to this policy

We may update this policy to reflect changes in our Services, our providers or the law. The current version is always published at white-labelecommerce.com with the date it was last updated. Where a change is material, we will notify you by email or by a notice on the site before it takes effect.

18. Contact and complaints

For any privacy question, request or concern, email support@whitelabeler.ai.

If you are not satisfied with our response, you may complain to a supervisory authority:

• United Arab Emirates: the UAE Data Office.
• European Economic Area: the data protection authority in your country of residence or place of work.
• United Kingdom: the Information Commissioner's Office.
• California: the California Privacy Protection Agency or the California Attorney General.

We would rather hear from you first, and we read everything.

Elevation Lab Marketing Services - FZE
Flexi Desk, DUQE Square Business Center, Quarter Deck, Mina Rashid, QE2
Dubai, United Arab Emirates
Trade Licence No. 3503