Bella Watch Boutique is part of Its Time For Watch Limited.
To help us provide the best possible service, we capture personal information about you but we respect and protect your privacy and do all we can to honour the trust you place in us by being transparent about what personal information we collect and how we use it, vowing to handle your data fairly and lawfully at all times.
We are Its Time For Watch Limited of 2 Union Street BH1 1HA Brighton, United Kingdom.
This notice is to inform you about how we collect and protect any personal information you provide to us and how you can control what personal information we collect from you and what we do with it. It sets out how we intend to use your information, who we will share it with and what rights you have about use of your information.
This notice applies to all our activities under the above brands and however you provide personal information to us, whether you visit us online at any of our websites or visit our stores or contact us via social media or whether you telephone, email, write to or text us.
Here we provide you with details about:
- what personal information we collect;
- how we use your personal information;
- information about cookies;
- who we share your personal information with;
- the legal basis for using personal information provided to us;
- how we aim to protect your privacy;
- how long we will keep your personal information;
- international transfers of your information;
- your legal rights relating to your personal information.
What personal data do we collect?
We may collect the following information about you:
- your name, age/date of birth and gender;
- your contact details: postal address including billing and delivery addresses, telephone numbers (including mobile numbers) and e-mail address;
- purchases and orders made by you;
- your social media handles;
- your online browsing activities on any of our websites including what items you store in your shopping bag;
- your password(s);
- information about the device you use to browse our websites including the IP address and the device type;
- when you make a purchase or place an order with us, your payment card details;
- your communication and marketing preferences;
- your interests, preferences, feedback and competition and survey responses;
- your location;
- your correspondence and communications with us; and
- other publicly available personal data, including any which you have shared via a public platform (such as Instagram, YouTube, Twitter or public Facebook page).
This list is not exhaustive and, in specific instances, we may need to collect additional data for the purposes set out in this Notice. Some personal data are collected directly, for example when you set up an online account on our websites, or send an email to our Customer Relations team. Other personal data are collected indirectly, for example, when you browse our websites or undertake online shopping activity. We may also collect personal data from third parties who have your consent to pass your details to us, or from publicly available sources.
We may anonymise and aggregate personal data for insight and research but this will not identify anyone.
Our websites are not intended for children and we do not knowingly collect data relating to children.
Sharing data with third parties
We will never sell or rent your personal information to other organisations for marketing purposes.
We will not disclose your personal information to any third party, except for those referred to below.
We may share your data with:
- other companies within our group;
- purchasers, investors, funders and advisers if we sell our business or assets or restructure whether by merger, re-organisation or otherwise;
- our legal and other professional advisers, including our auditors;
- credit reference agencies where necessary for card payments;
- governmental bodies, regulators, law enforcement agencies, courts/tribunals and insurers where we are required to do so:-
to comply with our legal obligations and/or the administration of justice;
to exercise our legal rights (for example in court cases);
for the prevention, detection, investigation of crime or prosecution of offenders; and
for the protection of our employees and customers. - our service providers and suppliers.
In order to make certain services available to you, we have partnered with certain trusted third parties including IT, mailing, payment services, delivery and marketing service providers. We may need to share your personal information with some of our service partners. We only allow our service providers to handle your personal information when they have confirmed that they apply appropriate data protection and security controls. We also impose contractual obligations on service providers relating to data protection and security, which mean they can only use your information to provide services to us and to you, and for no other purposes.
Please see here for the types of service providers with whom we share personal data.
| Type of External Service Provider | Reason For Sharing Your Information |
|---|---|
| Database Administrators | Administration of our Marketing databases |
| Mailing Houses | Delivery of Postal Mailings |
| Electronic Mail Administrators | Delivery of email campaigns including electronic newsletters and administration of on-line competitions |
| Couriers and Logistics service providers | Goods delivery |
| Software Providers | Administration of sales and returns |
| Marketing Consultancies and Advertising Services Providers | Analysis of marketing data and customer insight for the development and administration of marketing campaignsDelivery of offers, promotions and other marketing campaignsWebsite tracking to assist with personalising your on-line buying experienceFacilitate customer product and service reviews |
| Watch and Jewellery Manufacturers | Administration of Guarantees, Repairs and Marketing communications. No marketing communications will be sent by a 3rd party brand without your explicit opt in. Opt out information will be given through each of the 3rd party supplier’s communications. Alternatively, pls contact our customer services who will manage this process on your behalf. |
| Call recording providers | Call recording to facilitate Customer Care, administration of enquiries and complaints and facilitate telephone orders and order fulfilment for the Watchshop website |
| Electronic platform providers | To create on-line accounts, to fulfil website orders and electronic newsletter distribution |
| Email Administrators | Provision of email system |
| Live Engagement Platform Providers | Delivery of Live Chat environment |
| Payment Service Providers | Website payment services |
| Website Hosting Service providers | Administration of our websites, fulfilment of on-line orders and electronic marketing campaigns |
| Order fulfilment providers | Facilitate fulfilment of orders on websites and customer care |
| Electronic Repair administrators | Repair processing and workshop administrationFacilitating watch repairs by post, Facilitating communications with our repair services |
Legal basis for using data
We are required to set out the legal basis for our ‘processing’ of your personal data.
We collect and use customers’ personal data:
- as necessary to perform our contract with you
– for the purposes of complying with our duties and exercising our rights under contracts for the sale of goods or services to customers; or - as necessary for the pursuit of our legitimate interests including:
– selling and supplying goods and services to our customers;
– promoting, marketing and advertising our products and services;
– sending promotional communications which are relevant and tailored to individual customers (including administering loyalty schemes);
– to administer competitions and promotions and identify and contact competition winners;
– understanding our customers’ behaviour, activities, preferences, and needs;
– improving existing products and services and developing new products and services;
– protecting customers, employees and other individuals and maintaining their safety, health and welfare;
– good governance, accounting and managing and our operations and complying with our legal obligations;
– preventing, investigating and detecting crime, fraud or anti-social behaviour and prosecuting offenders, including working with law enforcement agencies;
– handling customer contacts, queries, complaints or disputes;
– managing insurance claims by customers;
– protecting our company, its employees and customers, by taking appropriate legal action against third parties who have committed criminal acts or are in breach of legal obligations to us;
– handling any legal claims or regulatory enforcement actions taken against us; and
– fulfilling our duties to our customers, colleagues, shareholders and other stakeholders or - as necessary for complying with our legal obligations including
– where you exercise your rights under data protection laws;
– for compliance with legal and regulatory requirements; or
– to establish or defend our legal rights; or - based on your consent
You have the right to withdraw consent at any time. Where consent is the only legal basis for processing your personal data, we will cease to process your personal data for that purpose after consent is withdrawn.
How we protect your data
Our controls
Its Time For Watch Limited is committed to keeping your personal data safe and secure.
Our security measures include:
- encryption of data;
- regular cyber security assessments of all service providers who may handle your personal data;
- regular planning to ensure we are ready to respond to cyber security attacks and data security incidents;
- security controls which protect the our IT systems infrastructure and our premises from external attack and unauthorised access; and
- internal policies setting out our data security rules for our personnel
- regular training for our employees.
What you can do to help protect your data
You should always be cautious when sharing your personal data. No one from our company will ever ask you to confirm any bank account or credit card details via email. If you receive an email claiming to be from Its Time For Watch Limited asking you to do so, please ignore it and do not respond.
If you are using a computing device in a public location, we recommend that you always log out and close the website browser when you complete an online session.
In addition, we recommend that you take the following security measures to enhance your online safety:
- keep your account passwords private because anyone who knows your password may access your account or be compromised if your account is accessed without authority.
- when creating a password, use a difficult word/number combination of at least 8 characters and something that is not easily guessed by hackers such as dictionary words, your name, email address, or other personal data that can be easily obtained. Also, frequently change your password. You can do this accessing your account, clicking ‘your account’, clicking ‘your data’ and selecting ‘change password’.
- avoid using the same password for different online accounts.
How long we keep your data
We will not retain your data for longer than necessary for the purposes set out in this Notice. Different retention periods apply for different types of information, and our Data Retention Policy sets out the length of time we will usually retain personal data and where these default periods might be changed.
In summary, various laws, accounting and regulatory requirements applicable to us require us to retain certain records for specific amounts of time. In relation to your personal data, we will hold this only for so long as we require that personal data for legal or regulatory reasons or for legitimate organisational purposes and we will not keep your data for longer than is necessary for the purposes for which we collect them.
For more detail on typical retention periods, please see below.
Record Retention Periods
| Record | Type of Personal Data | Retention Period |
|---|---|---|
| Contracts with Suppliers | Names | 10 years after expiry |
| Supplier details | Names,addresses,email addresses, telephone numbers | Permanently |
| Rental and hire purchase agreements | Names | 10 years after expiry |
| Payment Services agreements | Names | 10 years after expiry |
| Cookies | Webtracking information including IP addresses | 5 years |
| Customer Deposits | Names | Permanently |
| Contracts with Customers | Names,addresses, telephone numbers, transactional details | 10 years from date of transaction For “By Appointment” Permanently |
| Contracts with Customers – bank transfers | Names, addresses, telephone numbers, bank and branch | 14 days |
| Contracts with Customers – waiting lists | Names and products | Until Purchase or as long as customer requires |
| Contracts with Customers – Pre-Owned Watches | Names addresses, age and product | 3 years |
| Contracts with Customers | Email addresses | Website emails 7years Customer care emails 7 years Store support emails 2 years |
| Customer Complaints | Names, addresses, telephone numbers, email addresses | 7 years |
| Promotional Materials | Names and Customer images | 3 years |
| Customer listings for Promotional communications | Names and Addresses, email addresses | 30 days |
| Marketing Databases | Names and Addresses, email addresses | 15 years |
| Social Media communications | Names, addresses, email addresses, transactional data, hobbies, interests, payment reference | Permanently |
| Product and Service Reviews by Customers | Names, emails and products services purchased | Personal Data: 12 months Review Content: Permanently |
| Bella Watch Boutique and Its Time For Watch Protection | Names, addresses, telephone numbers, email addresses, insurance policy number, item claimed for, call recordings | Permanently |
| Call recordings | Telephone numbers, call recordings | 28 days |
| Repair Records with Its Time For Watch and Bella Watch Boutique | Names, addresses and watch and damage/repair details, watch photo, contact details, repair reference number and guarantee number | Permanently |
| Repair Records | Names, addresses and watch and damage/repair details | 7 years |
| Customer Live Chat Forum | Voice recordings images and messaging | |
| Visitor Records | Names and Images of Attendees at our premises | As long as required for security purposes |
International transfers
To deliver products and services to you, it is sometimes necessary to share your personal information outside of the European Economic Area (the EEA). This will typically occur when service providers are located outside the EEA or if you are based outside the EEA. These transfers are subject to special rules under data protection laws.
If we transfer your personal information outside the EEA, we will ensure that the transfer will be compliant with data protection law and all personal data will be secure. Our standard practice is to assess the laws and practises of the destination country and relevant service provider and the security measures that are to be taken as regards the data in the overseas location;
Your rights
You have the following rights:
- the right to be informed about our processing of your personal data which is the aim of this Notice;
- the right to request access to personal data that we hold about you at any time;
- the right to ask us to update and correct any out-of-date or incorrect personal data that we hold about you;
- the right to object to processing of your personal data and/or to withdraw any consent you have given us and to opt out of any marketing communications that we may send you.
- the right to prevent processing that is likely to cause damage or distress to you or anyone else;
- the certain rights in relation to automated decision-making processes including the right to object to profiling;
- the right to request that we erase or destroy your personal data in certain circumstances (the right to be forgotten) for example when the data are no longer necessary for the purpose for which we collected them;
- the right to have your personal data provided to you by us in a structured, commonly used and machine-readable format and the right to have that data transmitted to another data controller. This is known as the right to data portability.
If you wish to exercise any of the above rights, you can always:
- call our Customer Relations Team on telephone 07362 732112 but we will ask you to put your request in writing
- email us at either [email protected] or
- contact us by post to Customer Relations, Its Time For Watch Limited, 2 Union Street Brighton BN1 1HA, United Kingdom