Privacy Policy
Last updated: 15 May 2025 | Version 1.0
1. Who We Are
PocketWatchShop.net ("we", "our", "us") is a division of Caruso Consulting Co Ltd (VAT ID: 0765554000332), registered at 2015 Main St, Vancouver, BC, V5T 3C2, Canada (Administration) · 47 Moo 1, T. Nawoong, Meaung, Phetchaburi, 76000, Thailand (Registered Office). We operate the website at https://pocketwatchshop.net and are the data controller for personal information collected through this site.
For all privacy-related enquiries, contact us at: [email protected] or by phone at +66 098 391 3877.
2. Data We Collect
2.1 Information You Provide
- Order information: name, delivery address, email address, phone number
- Payment information: processed exclusively by Stripe — we never receive or store your card number, CVV or bank details
- Communications: emails, enquiries or messages you send us
2.2 Information Collected Automatically
- Usage data: pages visited, time on site, browser type, device type, operating system
- IP address: used to determine approximate geographic location (country/region level)
- Cookies and tracking pixels: see Section 4 for full details
- Referral source: how you arrived at our website (search engine, social media, direct)
3. How We Use Your Data
We use the personal information we collect to:
- Process and fulfil your orders and send order confirmation and shipping notifications
- Respond to customer service enquiries and provide support
- Improve our website, product listings and user experience based on aggregated analytics
- Detect, prevent and investigate fraud, security incidents and abuse
- Comply with our legal obligations (including tax and accounting requirements)
- Send marketing communications where you have provided consent (you may opt out at any time)
- Serve relevant advertising through Google and Meta platforms (where consent is given)
Legal basis (where applicable): We process data under the lawful bases of contract performance (order fulfilment), legitimate interests (fraud prevention, analytics), legal obligation (financial records), and consent (marketing, advertising cookies).
4. Cookies & Tracking Technologies
| Cookie Type | Purpose | Provider | Duration |
|---|---|---|---|
| Strictly Necessary | Session management, security, basic site function | PocketWatchShop.net | Session |
| Analytics | Understanding how visitors use the site (page views, bounce rate, traffic sources) | Google Analytics (GA4) | Up to 2 years |
| Advertising / Tracking | Measuring ad performance, remarketing and conversion tracking | Meta (Facebook) Pixel, Google Ads | Up to 90 days |
| Preferences | Remembering your cookie consent choice | PocketWatchShop.net (localStorage) | 1 year |
You can control cookies through your browser settings or by clicking "Decline" in our cookie consent banner. Disabling analytics and advertising cookies will not affect your ability to browse or purchase. Note that strictly necessary cookies cannot be disabled as they are required for the site to function.
5. Third-Party Tools & Services
5.1 Stripe — Payment Processing
All payments are processed by Stripe, Inc. (stripe.com), a PCI-DSS Level 1 certified payment processor. When you make a purchase, you are interacting directly with Stripe's secure environment. We never receive, store or process your card details. Stripe's privacy policy is available at stripe.com/privacy.
5.2 Google Analytics (GA4)
We use Google Analytics 4 to understand how visitors interact with our website. Google Analytics uses cookies to collect anonymous usage data. IP addresses are anonymised before storage. You can opt out using the Google Analytics Opt-out Browser Add-on. Google's privacy policy: policies.google.com/privacy.
5.3 Meta (Facebook) Pixel
We may use the Meta Pixel to measure the effectiveness of our advertising on Facebook and Instagram, and to enable remarketing. The Pixel collects data about your activity on our website and links it with your Facebook account if you are logged in. You can manage your Facebook advertising preferences at facebook.com/ads/preferences. Meta's data policy: facebook.com/policy.
5.4 Google Fonts
Our website uses Google Fonts to display typography. When you visit, your browser may make a request to Google's servers, which may log your IP address. Google's privacy policy applies to this data.
6. Data Sharing & Disclosure
We do not sell, rent or trade your personal data. We share information only in the following circumstances:
- Service providers: Stripe (payments), Google Analytics (analytics), shipping carriers (delivery of orders) — all under strict data processing agreements
- Legal requirements: Where required by law, court order or regulatory authority
- Business transfers: In the event of a merger, acquisition or sale of assets, subject to the same privacy commitments
- With your consent: For any other purpose where you have given explicit consent
7. Data Retention
We retain personal data for as long as necessary to fulfil the purposes for which it was collected:
- Order records: Minimum 7 years for accounting and tax compliance
- Customer support communications: 3 years from last contact
- Analytics data: Up to 26 months (Google Analytics default)
- Marketing consent records: Until you withdraw consent, plus 1 year
8. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, alteration or disclosure. These include SSL/TLS encryption on all data transmissions, use of PCI-DSS compliant payment processors, and restricted access to personal data within our organisation. No transmission over the internet is 100% secure; however, we take commercially reasonable steps to protect your information.
9. Your Rights
Depending on your jurisdiction, you may have the following rights regarding your personal data:
- Access: Request a copy of the personal data we hold about you
- Correction: Request correction of inaccurate or incomplete data
- Deletion: Request deletion of your personal data ("right to be forgotten"), subject to legal retention obligations
- Portability: Receive your data in a structured, machine-readable format
- Objection: Object to processing based on legitimate interests or for direct marketing
- Withdrawal of consent: Withdraw consent for cookie-based tracking at any time via browser settings or our cookie banner
To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.
10. Children's Privacy
Our website and products are not directed at children under the age of 16. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected data from a child, please contact us immediately and we will delete it.
11. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements or services. The "Last updated" date at the top of this page indicates the most recent revision. Continued use of our website after changes constitutes acceptance of the updated policy. We encourage you to review this page periodically.
12. Contact Us
For any privacy-related questions, data access requests or concerns:
- Company: Caruso Consulting Co Ltd (PocketWatchShop.net)
- Address: 2015 Main St, Vancouver, BC, V5T 3C2, Canada (Administration) · 47 Moo 1, T. Nawoong, Meaung, Phetchaburi, 76000, Thailand (Registered Office)
- Email: [email protected]
- Phone: +66 098 391 3877
- VAT ID: 0765554000332