Privacy Policy

Royal Windsor Watches Ltd ("we", "us", "our") is a luxury watch and bullion retailer registered in England & Wales. Our showroom is at 12 Castle Hill, Windsor SL4 1PD.

We are the data controller for the personal information described in this policy. For any privacy-related questions, contact privacy@royalwindsorwatches.com.

We collect personal information that you provide to us directly, including:

• Name, email address, telephone number and postal address.
• Identity documents required for anti-money-laundering (AML) checks on high-value transactions.
• Payment and bank details when buying, selling or trading in stock.
• Records of items you have viewed, reserved, purchased or sold to us.
• Communications you send us (email, phone, WhatsApp, in-store).

We also automatically collect technical data when you use our website, including IP address, browser type, device information and pages visited.

We use your information to:

• Process orders, valuations, trade-ins and vault storage instructions.
• Comply with our legal obligations under UK AML regulations and HMRC reporting.
• Authenticate watches and bullion and arrange insured shipping.
• Respond to enquiries and provide aftersales service.
• Send service updates and — where you have opted in — marketing communications.
• Detect and prevent fraud and protect our staff, premises and stock.

We rely on contract performance, legal obligation, legitimate interests (running our business and preventing fraud) and, for marketing, your consent. You may withdraw consent at any time by emailing privacy@royalwindsorwatches.com.

We share personal data only where necessary, with:

• Payment providers and banks to process transactions.
• Insured couriers (Brinks, Loomis, Ferrari Group) for delivery.
• LBMA-approved vaulting partners where you opt into vault storage.
• Authentication and grading partners where applicable.
• HMRC, law enforcement and regulators where required by law.

We do not sell your personal data to third parties.

Transaction records are retained for at least seven years to meet HMRC and AML obligations. Marketing data is kept until you unsubscribe. Other personal data is held only as long as needed for the purpose collected.

Under UK GDPR you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request erasure where there is no overriding legal duty to keep it.
• Restrict or object to processing.
• Request portability of data you provided to us.
• Lodge a complaint with the Information Commissioner's Office (ico.org.uk).

We use a small number of essential cookies to operate the website and, with your consent, analytics cookies to understand how the site is used. You can manage cookies in your browser settings at any time.

We use industry-standard encryption (TLS) on our website and restrict access to personal data to staff who need it. Identity documents collected for AML checks are stored in an encrypted, access-controlled environment.

We may update this policy from time to time. The date of the most recent revision is shown below. Significant changes will be notified by email where appropriate.