Privacy & Data Protection Policy

1. Data Controller Identification

The data controller responsible for the processing of personal data on this platform is:

2. Data We Process & Purposes

• Transactional & Email Data: When you purchase an exhibition placement, your email address and checkout session details are processed to issue digital invoices, deliver order receipts, and send outbid displacement notifications.
• Product Telemetry (PostHog): We collect privacy-conscious, first-party analytics on page views, listing interactions, and modal clicks to optimize directory performance. We do not sell or broker behavioral data to third-party ad networks.
• Cloud Photography (Cloudinary): Uploaded dial and wrist shots are stored on secure cloud infrastructure and transformed for responsive delivery.

3. Payment Security & Stripe PCI Compliance

WatchRank does not collect, process, or store raw credit card numbers, CVVs, or bank details on our servers.

All payment transactions are handled directly through Stripe, Inc., a certified PCI-DSS Level 1 Service Provider. Your payment data is tokenized and encrypted according to bank-grade cryptographic standards.

4. Your GDPR Rights

Under Articles 15 through 20 of the EU GDPR, European Union residents possess statutory rights regarding their personal information:

• Right of Access: Request a copy of your stored transactional records.
• Right to Rectification: Request correction of inaccurate listing details.
• Right to Erasure (Right to be Forgotten): Request the removal of your listings and contact information.
• Right to Object & Restrict Processing: Request restrictions on automated notifications.

To exercise your rights, email support@watchrank.com. We respond to all verified privacy requests within 30 calendar days.