Privacy Policy

We take the protection of your personal data seriously. This policy explains what personal data we collect when you visit www.pocket-watches.co.uk or place an order, why we use it and what rights you have. It is provided in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, the Privacy and Electronic Communications Regulations 2003 (PECR) and, as our company is established in the European Union, the EU General Data Protection Regulation (EU GDPR).

1. Who is responsible for your data

NOVENTRACOMMERCE OÜ
Juhkentali 8, 10132 Tallinn, Estonia
Email: contact@pocket-watches.co.uk
Telephone: +372 5918 7274

We are the controller of your personal data for the purposes described in this policy.

2. Legal bases and retention periods

We process your personal data on the following legal bases:

• Performance of a contract (Article 6(1)(b) GDPR): processing your order, delivery, invoicing and customer service;
• Legal obligation (Article 6(1)(c) GDPR): keeping invoices and accounting records, handling cancellations;
• Legitimate interests (Article 6(1)(f) GDPR): security and proper operation of the Website, fraud prevention, improving our services;
• Consent (Article 6(1)(a) GDPR): non-essential cookies, product reviews and marketing communications.

Order and invoicing data are kept for 7 years to meet our accounting and tax obligations. Customer account data is kept while your account is active and for 3 years after your last contact with us. Server logs are kept for a maximum of 12 months. Cookie retention periods are set out in our Cookie Policy.

3. Hosting and server logs

The Website is hosted in France by o2switch SAS, Chemin des Pardiaux, 63000 Clermont-Ferrand, France. Each time you visit the Website, the server automatically records log data (IP address, date and time, page visited, browser and operating system) which is needed for the security and technical operation of the Website (legitimate interests). Login attempts to the Website are also checked against known attack patterns to protect our customers’ accounts.

4. Encryption

All pages of the Website are protected by SSL/TLS encryption, shown by the padlock in your browser.

5. Orders and customer account

When you place an order, we process the data you enter (first and last name, billing and delivery addresses, email address, telephone number and order details) to perform the contract: preparing and shipping your order, invoicing and after-sales service. Your name, delivery address and, where needed for delivery notifications or customs clearance, your email address and telephone number are passed to the carrier and, for international shipments, to the customs authorities.

If you create a customer account, your data is stored so that you can place future orders more easily and view your order history. You can ask us to delete your account at any time, subject to our legal retention obligations.

On our order tracking page, we use your order number and email address only to display the status of your order.

6. Payment

Payments are processed by Viva.com (operated by Vivabank Single Member Banking S.A., Amarousiou-Chalandriou 18–20, 151 25 Marousi, Greece, a credit institution authorised by the Bank of Greece). When you pay, you are redirected to the secure Viva.com payment page, which collects your payment details (card number, expiry date, cardholder name) directly, as well as technical data used to prevent fraud (IP address, device information). We never receive your full card details. Viva.com acts as an independent controller for the processing of your payment, under its own regulatory obligations. Viva.com privacy policy: viva.com.

If you use Apple Pay or Google Pay, the privacy terms of Apple Distribution International Ltd. (Ireland) or Google Ireland Limited (Ireland) also apply.

7. Contact and customer service

When you contact us by email, telephone or through our contact form, we process your contact details and the content of your message in order to answer you (performance of a contract or our legitimate interest in answering enquiries). This correspondence is kept for 3 years after your last contact.

8. Online cancellation (“Cancel contract”)

When you use our online cancellation function, we process your name, email address and order details to record your request and send you an acknowledgement of receipt (legal obligation).

9. Product reviews

If you post a review, we publish your first name or nickname, your rating and your comment. Your email address is not published; it is only used to check whether you have bought the product (the “verified owner” label). This processing is based on your consent, which you can withdraw at any time by asking us to delete your review.

10. Abandoned basket reminders

If you enter your email address at checkout but do not complete your order, we store your email address, your name and the contents of your basket so that we can send you a reminder by email. A message below the email field informs you of this. This processing is based on our legitimate interest in helping customers complete orders they have started; you can object at any time, in particular through the unsubscribe link included in every reminder email. Incomplete baskets are deleted regularly.

11. Statistics (Jetpack)

We use the statistics features of Jetpack (Jetpack Stats and WooCommerce Analytics), services of Automattic Inc. (USA) and Aut O’Mattic A8C Ireland Ltd. (Ireland), to measure visits to the Website and how our shop is used, so that we can improve it. This involves processing data such as the pages viewed, the referring page, the browser and device used, shop events (for example products added to the basket) and a truncated IP address. This processing is based on our legitimate interest in analysing and improving our services; you can object at any time (see “Your rights”). Data may be transferred to the United States; Automattic is certified under the EU-US Data Privacy Framework and its UK Extension.

12. Google Merchant Center

We send our product catalogue (which contains no personal data) to Google Merchant Center so that our products can appear in Google search results. No personal data about you is shared with Google for this purpose.

13. Fonts (Google Fonts)

To display fonts, the Website loads Google Fonts provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. When the fonts are loaded, your IP address is transmitted to Google. This processing is based on our legitimate interest in a consistent presentation of the Website. Data may be transferred to Google LLC (USA); Google is certified under the EU-US Data Privacy Framework and its UK Extension.

14. Cookies

The Website uses cookies. Strictly necessary cookies (basket, login, security, storing your cookie choice) are set without consent. Any other cookies are only set with your consent, which you can withdraw at any time via the “Cookie settings” link at the bottom of every page. Details are set out in our Cookie Policy.

15. Who we share your data with

Your data is used by our internal teams and, only as far as necessary, by our service providers: payment provider, carriers, hosting provider and technical service providers. We do not sell your personal data.

16. International transfers

Some of our service providers process data outside the United Kingdom or the European Economic Area. Where this is the case, the transfer is covered by an adequacy decision or adequacy regulations, or by appropriate safeguards such as the European Commission’s standard contractual clauses together with the UK International Data Transfer Addendum.

17. Your rights

You have the right to access, rectify and erase your data, to restrict processing, to data portability, to object to processing (in particular to direct marketing) and to withdraw your consent at any time, without affecting the lawfulness of processing carried out before the withdrawal.

To exercise your rights, email us at contact@pocket-watches.co.uk or write to us at the address above. We will reply within one month.

18. Complaints

If you believe that our processing of your data does not comply with data protection law, you can complain to the Information Commissioner’s Office (ICO), Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF, telephone 0303 123 1113, ico.org.uk. As our company is established in Estonia, you can also complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon), www.aki.ee. We would, however, appreciate the chance to deal with your concerns first, so please contact us beforehand.

19. Customers in the United States

We do not sell your personal information and we do not share it for cross-context behavioural advertising. You can ask us at any time to access or delete the personal information we hold about you by contacting us as described above.

20. Is providing your data mandatory?

The information marked as required in the order form is necessary to conclude and perform the contract; without it, we cannot process your order. We do not make decisions that have legal or similarly significant effects on you based solely on automated processing.

21. Changes to this policy

We may update this policy to reflect changes in our services or in the law. The current version is always available on this page.

Last updated: October 2026