Privacy Policy

1. Data controller

The Royal Watchery Ltd ("TRW", "we") is the data controller for personal data collected via this website. Contact: info@theroyalwatchery.com.

2. Data we collect

We collect the data needed to fulfil orders, run our contractual relationship and — with consent — send marketing: name, email, shipping/billing address, payment data (processed directly by Stripe, never stored on our servers).

We also collect, from your first visit and without asking for prior consent, browsing and interaction data (pages and products viewed, add-to-cart actions, completed purchases, traffic source, device and IP address) through Google Analytics 4 and the Meta Pixel. Through automatic advanced matching, the Meta Pixel also transmits to Meta, in hashed form (SHA-256), the contact details you enter in site forms — email address, first and last name, phone number — in order to match your visit to your Meta account. Details are in our Cookie Policy.

3. Legal basis

Processing is based on (a) contract (Art. 6.1.b GDPR), (b) legal obligations (Art. 6.1.c GDPR), (c) consent (Art. 6.1.a GDPR) for the newsletter, (d) legitimate interest (Art. 6.1.f GDPR) for site security, for statistical measurement of site usage and for measuring and optimising our advertising campaigns. You may object at any time to processing based on legitimate interest, using the methods described in our Cookie Policy or by writing to us.

4. Retention

Contract data: 10 years (tax obligation). Marketing data: until consent is withdrawn. Technical logs: max 12 months.

5. Third parties

Data is shared with Stripe (payments), Printify (fulfilment), our hosting provider (dedicated server and database), transactional email providers, Google Ireland Limited (usage statistics) and Meta Platforms Ireland Limited (measurement and advertising). With Meta we act as joint controllers, limited to the data collected through the pixel. We do not sell data. Some providers are outside the EEA, including in the United States: those transfers rely on the EU-US Data Privacy Framework or on EU Standard Contractual Clauses.

6. Your rights

Access, rectify, erase, restrict, port and object to processing. Complaints: your local data protection authority. Requests: info@theroyalwatchery.com.

7. Security

End-to-end HTTPS, RLS on databases, payments handled directly by Stripe (PCI-DSS Level 1).

8. Changes

We may update this notice. The current version is always published on this page.