Privacy policy

Watch by Juls is a jewelry and timepiece dealer located at 36 West 47th Street, W8-9, New York City. For any question about this policy or your personal data, contact us at watchbyjuls@gmail.com or +1 (917) 828-1306.

Information you give us: your name, email address, telephone number, shipping and billing address, and the contents of any enquiry or message you send us.

Payment information: card and payment details are collected and processed directly by our payment providers (Stripe and PayPal). They are transmitted straight to the provider and are never stored on our servers. We retain only a transaction reference, the amount, and the status of the payment.

Account information: if you create an account, we store your email address and a securely hashed password. We never store your password in a readable form.

Technical information: IP address, browser type, device type, and pages viewed. We use this to keep the site secure and to understand which pieces are of interest.

To process, fulfil and deliver your orders, and to contact you about them.

To respond to enquiries, valuations, and buy/sell/trade requests.

To detect and prevent fraud, and to protect the security of the site.

To meet our legal, tax and accounting obligations. [REVIEW: retention periods for transaction records vary by jurisdiction.]

We do not sell your personal information, and we do not share it with third parties for their own marketing purposes.

Payment processors (Stripe, PayPal) — to take payment.

Shipping and insurance partners — to deliver and insure your order.

Our hosting and database providers (Vercel, Supabase) — who store the data on our behalf under contract.

Law enforcement or regulators, where we are legally required to do so.

We use strictly necessary cookies to keep you signed in and to remember the contents of your bag. These are required for the site to function.

[REVIEW: if you later add analytics or advertising cookies, you must add a consent banner that obtains opt-in consent before those cookies are set, for EU/UK visitors.]

All traffic is encrypted in transit using HTTPS/TLS.

Our database enforces row-level security: your order history and account details are readable only by you and by authorised staff, and are never exposed to other visitors.

Administrative access is role-restricted, and payment provider secrets are held server-side only — they are never sent to the browser.

No system is perfectly secure, but we review these measures regularly.

You may request a copy of the personal data we hold about you, ask us to correct it, or ask us to delete it. Write to us at the email address above and we will respond within the period required by applicable law.

You can close your account at any time. We may need to retain certain transaction records to meet legal obligations even after account closure.

[REVIEW: GDPR additionally grants rights to data portability, restriction of processing, and objection; CPRA grants a right to opt out of "sharing". Confirm which apply to your customer base.]

This site is not directed at children under 16, and we do not knowingly collect their personal information.

We may update this policy from time to time. The date below reflects the most recent revision. Material changes will be communicated to account holders by email.