Privacy policy
Privacy Policy
Last updated: 19 April 2026
Your data deserves the same care as your timepieces. This policy explains, in plain English, what we collect, why we collect it, and what rights you have over it. We comply with the UK GDPR, the Data Protection Act 2018, and the EU GDPR.
1. Who is responsible
CHAIBI Yanis, trading as Gentleman's Winder — 26 rue du Moulin, 67205 Oberhausbergen, France. SIRET 88517141300028 — VAT FR56885171413. For any privacy question: contact@gentlemanwinder.com.
2. What we collect
- Your name, email, delivery address and phone number (if you provide one).
- Your order history: items purchased, amounts, and a payment token. We never see your full card number — that stays with Stripe, PayPal and Shopify Payments.
- Technical data: IP address, browser type, device, pages visited — through first-party analytics.
- Any messages you send us through contact forms or email.
3. Why we collect it
- To process and deliver your order (contractual necessity).
- To provide customer support and manage returns (contractual necessity).
- To send transactional emails — order confirmation, dispatch, delivery (contractual necessity).
- To send occasional updates and offers, only if you have opted in (consent, revocable at any time).
- To prevent fraud and keep the site secure (legitimate interest).
- To meet our accounting and tax obligations (legal obligation).
4. Who we share it with
We share only what is strictly necessary, and only with carefully chosen partners:
- Shopify — hosting and checkout infrastructure.
- Stripe, PayPal, Shopify Payments — payment processing.
- Royal Mail, DPD, DHL — delivery.
- Klaviyo — transactional and opted-in marketing emails.
- Google and Meta — analytics and advertising, only with your consent through the cookie banner.
We never sell your data. Ever.
5. International transfers
Some of our partners are based outside the UK and EU, primarily in the United States. All transfers are protected by Standard Contractual Clauses or equivalent safeguards approved by the UK ICO and the European Commission.
6. How long we keep it
- Order and billing records: 10 years, as required by accounting law.
- Marketing subscribers: until you unsubscribe, or 3 years of inactivity.
- Support conversations: up to 3 years after the last message.
- Cookies: see our cookie banner for individual durations.
7. Your rights
Under the UK and EU GDPR you have the right to:
- Access a copy of your data.
- Correct anything that's inaccurate.
- Ask us to delete your data ("right to be forgotten").
- Restrict or object to how we use it.
- Move your data elsewhere (portability).
- Withdraw consent at any time.
- Lodge a complaint with the ICO (ico.org.uk) or the French CNIL (cnil.fr).
To exercise any of these rights, email contact@gentlemanwinder.com. We respond within 30 days — usually within 48 hours.
8. Cookies
We use three types of cookies: essential (to run the site), analytics (Google Analytics), and marketing (Meta Pixel, Google Ads). Analytics and marketing cookies only run after you give consent through the cookie banner on your first visit. You can change your preferences at any time from the banner.
9. Security
Payments are encrypted end-to-end over HTTPS and processed by PCI-DSS compliant providers. Our admin accounts use two-factor authentication. We never store your card details on our side.
10. Children
Our products and website are not directed at anyone under 16. We do not knowingly collect data from minors.
11. Changes
If we update this policy, the "Last updated" date at the top will change, and any material change will be flagged on our homepage.
12. Contact
For any privacy question, email contact@gentlemanwinder.com. A human replies within 24 working hours.