1. Data controller
Crown & Calibre Ltd is the data controller responsible for your personal data. We are registered in England and Wales (Company No. 09128473) with our registered office at 28 King Street, Manchester, M2 4WY.
This Privacy Policy explains how we collect, use, store and protect personal information when you visit crown-calibre.co.uk, contact us, purchase goods or interact with our services. It applies to all personal data we process about individuals in the United Kingdom and, where applicable, the European Economic Area.
2. Data we collect
We may collect the following categories of personal data:
- Identity data: name, title and date of birth (where relevant for age verification).
- Contact data: email address, telephone number, postal address and delivery address.
- Transaction data: details of orders, payments, warranty registrations and service history.
- Technical data: IP address, browser type, device information and pages visited on our website.
- Communication data: content of enquiries, correspondence and feedback you send to us.
- Marketing data: your preferences for receiving marketing communications from us.
We do not routinely collect special category data (such as health information). If you provide such data voluntarily, we will process it only with your explicit consent or as otherwise permitted by law.
3. How we use data
We use your personal data for the following purposes:
- Processing and fulfilling orders, including delivery and warranty registration.
- Responding to enquiries submitted via our contact form, email or telephone.
- Providing aftercare, servicing and authenticity verification.
- Maintaining our watch registry and certificate of authenticity records.
- Improving our website and services (with your consent for analytics cookies).
- Sending marketing communications about new models and company news (with your consent).
- Complying with legal and regulatory obligations, including tax and accounting requirements.
4. Legal basis
Under the UK General Data Protection Regulation (UK GDPR), we process personal data on the following legal bases:
- Contract: processing necessary to perform a contract with you or take steps at your request before entering a contract (e.g. processing an order).
- Legitimate interests: processing necessary for our legitimate business interests, such as improving our services, fraud prevention and maintaining our authenticity registry, provided your rights do not override these interests.
- Consent: where you have given clear consent, such as for marketing emails or non-essential analytics cookies.
- Legal obligation: processing necessary to comply with a legal requirement, such as tax record-keeping.
5. Sharing data
We do not sell your personal data. We may share data with:
- Delivery couriers and payment processors, solely to fulfil your order.
- Professional advisers (accountants, solicitors) where necessary for our business operations.
- Analytics providers, only where you have consented to non-essential cookies.
- Regulatory or law enforcement authorities, where required by law.
All third-party processors are bound by data processing agreements requiring them to protect your data and use it only for specified purposes.
6. Retention
We retain personal data only for as long as necessary for the purposes described in this policy:
- Order and transaction records: seven years (for tax and accounting purposes).
- Warranty and service records: duration of warranty plus six years.
- Enquiry correspondence: two years from last contact.
- Marketing consent records: until you withdraw consent, plus a reasonable period to record the withdrawal.
- Website analytics data: up to 26 months (where consented).
7. Your rights
Under UK GDPR, you have the following rights:
- Access: request a copy of the personal data we hold about you.
- Rectification: request correction of inaccurate or incomplete data.
- Erasure: request deletion of your data where there is no compelling reason for continued processing.
- Restriction: request that we limit processing in certain circumstances.
- Portability: request transfer of your data to another organisation in a structured format.
- Objection: object to processing based on legitimate interests or for direct marketing.
- Withdraw consent: withdraw consent at any time where processing is based on consent.
To exercise any of these rights, contact us at [email protected]. We will respond within one month. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
8. Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure or destruction. These include encrypted connections (HTTPS), access controls and staff training on data protection.
While we take reasonable steps to protect your data, no method of transmission over the internet is completely secure. We cannot guarantee absolute security but will notify you and the ICO of any breach affecting your rights where required by law.
9. Contact us
For questions about this Privacy Policy or our data practices, contact:
Crown & Calibre Ltd
28 King Street, Manchester M2 4WY
Email: [email protected]
Telephone: +44 161 834 5520
See also our Cookie Policy for information about cookies and similar technologies.