Privacy Policy

• We collect what you give us: your name, email address, and the details of your inquiry, plus the routine server logs our host keeps to run the site securely. If we ever buy or consign a watch, we also collect the verification details the law requires. What we collect
• We use it to respond to you and to provide our services. How we use it
• We do not sell your personal information, and we do not share it for advertising. How we share it
• The public site uses no advertising cookies and no tracking technologies, and we count visits anonymously ourselves rather than through any third-party analytics service. Essential cookies or browser storage may be used for security, your preferences, visit counting, and administrative functions. Cookies and tracking
• You can request access, correction, or deletion of your information at any time by contacting us at concierge@viattoriwatches.com. Exercising your rights

The organization responsible for personal information collected through this website is Viattori Watches, an Ontario sole proprietorship registered under the Business Names Act, based in Oakville, Ontario, Canada. We provide private, appointment-only service and do not operate a public storefront. Our Privacy Officer is accountable for our handling of personal information and for this policy. You can reach us at concierge@viattoriwatches.com or +1 (437) 673-8708.

Contact form. When you submit our contact form, we receive your full name, email address, the reason for your inquiry, and your message. If you choose to include details about your watch, such as its brand, model, serial number, or value, those details are stored with your inquiry.

Direct communications. When you email or call us, we receive your email address or phone number, the contents of your message, and any photographs or documents you send.

Verification information. Should we ever buy or take a watch on consignment, we may request identification only where it is reasonably necessary for identity verification, fraud prevention, transaction security, or legal compliance: your name and address, a government-issued photo ID, and proof of ownership or purchase where available, together with the watch’s reference and serial numbers. Government identification is sensitive information and receives appropriate safeguards. Do not send identification documents by ordinary email; contact us first and we will arrange a secure or in-person method. We collect these details directly from you, not through this website.

Technical data. Our hosting provider keeps standard server logs, including IP address, browser type, pages requested, and timestamps, to operate and secure the site. We also count visits ourselves, in aggregate only: our first-party counter records that a visit happened and whether the browser had already visited that day, and stores nothing but daily totals: no IP addresses, no identifiers, and no browsing history. We run no advertising or fingerprinting technologies and use no third-party analytics services.

What we do not collect through this site. This site has no customer accounts and takes no payments, so we collect no login credentials and no payment card details through it. We do not collect precise geolocation or biometric data, and we do not buy data about you from third parties. The government identification described above is collected offline during a transaction, never through this website, and is the only sensitive category of information we handle.

Providing your information is voluntary, but we need it to respond to your inquiry.

We use personal information for the following purposes. For visitors in the EU or UK, the legal basis for each is noted in parentheses.

• To respond to your inquiry and prepare estimates (steps prior to a contract; our legitimate interest in responding to you).
• To perform agreed services: repair, restoration, and the sale of Viattori’s own editions, including the detailed estimate you approve before work begins (performance of a contract).
• To arrange shipping for watches in our care (performance of a contract; legitimate interests).
• To keep records the law requires, including tax, accounting, and service warranty records (legal obligation).
• To verify identity and ownership if we ever buy or consign watches, including checks against registers of lost and stolen watches, and to meet anti-money-laundering and reporting obligations under Canada’s FINTRAC regime where they apply, which may include qualifying transactions involving jewellery, precious metals, or precious stones (legal obligation).
• To protect the business and this site against fraud and abuse (legitimate interests).

We do not use contact-form or email information for marketing. We will not send you marketing messages unless you separately opt in, and you may withdraw that consent at any time. We make no automated decisions about you and build no profiles.

We do not sell your personal information, and we do not share it with third parties for advertising or cross-context behavioral advertising. We have not done so in the preceding 12 months.

We share information only with the following categories of recipients, and only as needed to run the business:

• Service providers that operate parts of the site for us: Netlify hosts this website and processes its contact-form submissions, and GitHub hosts the private systems we use to receive and track inquiries internally. Each is bound by its service terms to process your information only to provide the service.
• Shipping carriers, when we ship a watch for you.
• Professional advisers such as accountants and attorneys, where required.
• Registers of lost and stolen watches: where a watch’s provenance is in doubt, we may check its reference and serial numbers against industry stolen-watch registers, and we report matches to law enforcement as the law requires.
• Authorities and other parties where the law compels disclosure, where necessary to protect rights or safety, or as part of a sale or reorganization of the business, in which case we will notify you where feasible.

The public site does not use advertising or third-party analytics cookies, and no advertising, fingerprinting, or cross-site tracking technologies run here. Fonts are served from our own site and no third-party content is embedded. Our own visit counter marks the date of your last visit in your browser’s storage so you are not counted twice in a day; the mark is a date and nothing more. Essential cookies or browser storage may otherwise be used for security, for preferences such as your language choice, for pre-launch preview access, and for authenticated administrative functions used by our own staff. Our hosting platform may also set a strictly necessary cookie to serve the site securely; any such cookie is used for that purpose only.

Do Not Track. Because we do not track visitors across websites, this site behaves the same whether or not your browser sends a Do Not Track signal. No tracking occurs either way.

Global Privacy Control. Because we do not sell or share personal information, there is no sale or sharing for a Global Privacy Control signal to stop. Visitors sending a GPC signal already receive the treatment the signal requests.

The Instagram link in our footer is an outbound link only. Nothing from Instagram loads on this site, and once you leave, Instagram’s own privacy policy governs.

We are an Ontario business, and Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) governs our handling of personal information. You have the right to access the personal information we hold about you, to correct it, to know how it has been used and to whom it has been disclosed, and to withdraw your consent to its use, subject to legal and contractual restrictions and reasonable notice. Quebec residents have additional rights under Law 25, including data portability.

If you are unsatisfied with our response to a request, you may complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca).

United States state privacy laws such as the California Consumer Privacy Act grant residents specific rights where those laws apply. Where applicable, United States residents may exercise the following rights, and we consider reasonable requests of this kind from any United States resident:

• To know and access the personal information we hold about you.
• To correct inaccurate information.
• To delete your information.
• To receive a portable copy of information you provided.
• To opt out of the sale or sharing of personal information and of targeted advertising. As stated above, we do none of these.
• To exercise these rights without discrimination or retaliation.

An authorized agent may submit a request on your behalf with proof of authorization. If we decline a request, you may appeal by replying to our decision email; we will explain the outcome, and where your state law provides it, you may also contact your state Attorney General.

If you are in the European Economic Area, the United Kingdom, or Switzerland and those laws apply to our handling of your personal data, you have the right to access, rectify, and erase your personal data; to restrict or object to its processing, including processing based on our legitimate interests described above; to data portability; and to withdraw any consent at any time without affecting prior processing.

We answer verified requests free of charge, generally within 30 days, subject to any extension applicable law permits. Where applicable, you also have the right to lodge a complaint with your national supervisory authority (the European Data Protection Board publishes a directory of members at edpb.europa.eu) or, in the UK, the Information Commissioner’s Office (ico.org.uk).

Viattori is located in Canada, and information submitted through this site is processed in Canada. The European Commission recognizes Canada’s federal privacy law as providing adequate protection for personal data handled in commercial activities, so your data may flow to us from the EU on that basis. Our service providers, including Netlify, GitHub and Automattic (whose Akismet service screens contact-form submissions for spam), may process data in the United States under their own safeguards; contact us for more information about the safeguards that apply.

• Inquiries that do not lead to an engagement: deleted within 24 months of our last contact with you.
• Customer and transaction records, including service records supporting our 6-month service warranty and identity-verification records, if any: kept for the warranty period and thereafter as tax and accounting law requires, generally six years under Canadian tax law, and as anti-money-laundering law requires where it applies to a transaction.
• Shipping documentation: kept as our carriers and the law require.
• Server logs: kept by our hosting provider for a short, rolling period set by the provider and then deleted.

When no fixed period applies, we keep information only while an ongoing relationship, legal obligation, or dispute exists. When a period expires, we delete or anonymize the information and instruct our service providers to do the same.

This site and its contact form use HTTPS encryption in transit. Access to inquiries is limited to the people who need it to respond, and we use reputable service providers. Government identification and other sensitive verification records receive heightened safeguards: they are collected through secure or in-person methods we arrange with you, access to them is restricted, and they are kept only as long as the law requires. Our responsibility for watches in our physical care is described in our Terms & Conditions.

No method of transmission or storage is completely secure. If a breach affects your personal information, we will notify you and the relevant authorities as the law requires, and we keep a record of every breach of security safeguards for 24 months, whether or not it required notification.

This is a general-audience website for adult-oriented services. We do not knowingly collect personal information from anyone under 16. If you believe a child has submitted information to us, contact us at concierge@viattoriwatches.com and we will delete it promptly.

This site links to third-party platforms, currently Instagram and WhatsApp. Those platforms operate under their own privacy policies, which we do not control; if you choose to message us on WhatsApp, your messages are also handled under WhatsApp’s own policy. No third-party content, pixels, or widgets are embedded in this site, so no data flows to those platforms merely from your visiting it.

Our digital business card at card.viattoriwatches.com is a Gravatar profile served by Automattic through our own address. That page, including its cookie notice, runs under Automattic’s privacy policy, not this one; nothing you do there reaches us.

If we change this policy, we will post the new version here with a new effective date. For material changes, we will give prominent notice on the site, or direct notice by email where we hold an open inquiry from you, before the change takes effect. We will not apply a material change to previously collected information without your consent. Prior versions are available on request.

To ask a question or exercise any right in this policy, contact our Privacy Officer:

Privacy Officer
Viattori Watches
PO Box 30002, RPO Dundas Neyagawa, Oakville, ON L6H 7L8
Canada
concierge@viattoriwatches.com
+1 (437) 673-8708

We verify requests by matching your email address against our records and may ask for additional confirmation. Access and correction requests are generally answered within 30 days, subject to any extension applicable law permits; if we need longer, we will tell you why and when to expect our response. Requests are free of charge, and exercising your rights will never affect how we treat you.

If you are in another jurisdiction, we respond to your request under the privacy rights your local law provides, where applicable.

The Privacy Officer above is the person accountable for our personal-information practices under Canadian privacy law.