Privacy Policy

Welcome to Winsor Brand ("Winsor", "we", "us", or "our"). We hold the privacy and trust of our patrons in the highest regard. This Privacy Policy details how our luxury watch maison collects, uses, safeguards, and manages personal data when you interact with our digital boutique, reserve timepieces, register an international warranty, or visit authorized showroom locations.

In order to provide our patrons with bespoke horology services and white-glove delivery, we collect the following categories of data:

• Patron Profile & Identity Data: Full name, email address, direct phone number, and single-sign-on credentials securely synchronized via Clerk.
• Order & Delivery Logistics: Delivery destination address, billing contact details, gift packaging messages, and courier tracking identifiers.
• Payment Transaction Logs: Merchant settlement references, timestamps, and verification proofs. Raw credit/debit card numbers are tokenized by PCI-DSS Level 1 payment processors; Winsor Brand does not store credit card numbers on its servers.
• Timepiece Ownership Records: Serial numbers, reference model numbers, 1-Year International Warranty registrations, and boutique service histories.
• Technical & Browsing Telemetry: Device identifiers, browser type, regional location, currency preference, and interaction analytics.

We process your information strictly for legitimate commercial, operational, and fulfillment requirements:

• Timepiece Fulfillment: Verifying acquisitions, assembling custom box sets, and dispatching orders via insured luxury courier.
• Patron Portal Management: Maintaining your Patron account, computing loyalty status, saving wishlist selections, and managing saved delivery addresses.
• Warranty Registry: Validating watch authenticity and maintaining service records under our 1-Year International Guarantee.
• Client Concierge Relations: Assisting with bespoke order inquiries, transit status updates, and authorized boutique fittings.

Winsor Brand does not sell, rent, or monetize your personal data. Information is shared exclusively with vetted operational service providers bound by strict confidentiality agreements:

• Authentication: Clerk handles end-to-end user identity verification and multi-factor authentication.
• Payment Gateways: Authorized acquiring banks and payment gateways (e.g., PayHere, Stripe) for secure checkout processing.
• Logistics Partners: Certified luxury freight and express couriers to fulfill delivery and obtain signature on delivery.
• Cloud Infrastructure: MongoDB Atlas encrypted cloud database clusters with automated geo-replicated backups.

We implement comprehensive physical, electronic, and procedural safeguards:

• 256-Bit SSL/TLS Encryption: All communications between your browser and our infrastructure are encrypted in transit.
• Role-Based Access Control: Strict administrative permission boundaries ensuring only authorized personnel have access to fulfillment records.
• Encrypted Database Storage: All database volumes utilize AES-256 encryption at rest.

Personal records are retained only for as long as required to maintain your active timepiece registry and fulfill statutory requirements:

• Patron Profiles & Warranties: Retained for the lifetime of your active profile to guarantee perpetual timepiece support.
• Tax & Commercial Records: Maintained for up to 7 years in compliance with international commercial accounting legislation.

You retain statutory rights over your personal information:

• Right to Access & Rectify: You can view and edit your profile, saved addresses, and preferences at any time in your Patron Dashboard.
• Right to Erasure: You may submit an account and data erasure request by contacting our compliance office.
• Marketing Opt-Out: Unsubscribe from marketing dispatches with a single click at the bottom of any email.

We use cookies and browser storage strictly to preserve cart contents, currency selections, and session security. For complete details on managing cookie preferences, consult our Cookie Policy.

For questions, concerns, or data rights requests, contact our Compliance Office: