All Oceans Watches
Privacy Policy
This site does one thing: it takes reservations for watches that are not yet in production. This page explains exactly what happens to the details you give us when you make one.
Who is responsible for your data
All Oceans Watches is the controller of the personal data described on this page.
For anything on this page, including a request to see or delete your data, write to info@alloceanswatches.com.
What we collect
When you submit a reservation, we store:
- Your first and last name.
- Your email address.
- Your phone or WhatsApp number, if you choose to give one. It is optional.
- The model you reserved, including the strap you selected.
- Any message you write in the form.
- The date and time you reserved, and the reference we assign to it.
- A one-way cryptographic hash of your IP address, and your browser’s user agent string. The hash cannot be reversed back into an IP address. It exists so we can stop automated abuse of the form, not to identify you.
- The fact that you ticked the consent box, when, and the wording that was on screen.
We do not collect payment details, because nothing is charged. We do not ask for a date of birth, an address, or anything else we have no use for.
Why we hold it, and on what basis
Your consent is the legal basis for holding your reservation, under Article 6(1)(a) of the GDPR. You give it by ticking the box on the form, and you can withdraw it at any time. We use the details to contact you about the model you reserved and to send you one confirmation email.
Our legitimate interest in keeping the form usable, under Article 6(1)(f), is the basis for the hashed IP address and the user agent. Without them the form can be flooded automatically, which costs us email allowance and buries genuine reservations.
What we send you
One confirmation email when you reserve, and then nothing until there is something real to tell you about that model. We do not run a newsletter and we do not send marketing on the strength of a reservation. If that ever changes, we will ask you separately first.
Every reservation is one person, one model. If you reserve a second model you will get a confirmation for that one too; reserving the same model twice does not produce a second email.
Who else processes it
We do not sell your data, and we do not share it for advertising. It reaches four service providers, each doing one job on our behalf:
- Supabase hosts the database the reservations are stored in. The database is located in the European Union (Ireland).
- Vercel Web Analytics records anonymous page views, as described under Cookies and analytics below. It never sees your reservation.
- Resend delivers the confirmation email.
- Vercel hosts this website and runs the code that receives the form.
Supabase, Resend and Vercel are United States companies, so some processing may take place outside the European Economic Area. Those transfers rely on the European Commission’s Standard Contractual Clauses.
How long we keep it
Until the launch of the model you reserved is concluded and we have finished contacting you about it, or until you ask us to delete it, whichever comes first. We review the list at least once a year and remove reservations that are no longer live.
If you ask us to delete your data, we do it and we do not keep a copy. Ask by emailing info@alloceanswatches.com from the address you reserved with, or quote your reservation reference.
Your rights
Under the GDPR you can ask us to:
- Give you a copy of the data we hold about you.
- Correct anything that is wrong.
- Delete it.
- Restrict what we do with it, or object to us holding it.
- Hand it to you in a portable format.
- Stop relying on your consent. Withdrawing consent does not undo anything done while it was valid, and it cancels the reservation, since your details are the reservation.
Email info@alloceanswatches.com and we will answer within one month. There is no charge.
Complaints
If you are unhappy with how we have handled your data, you can complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens, at autoriteitpersoonsgegevens.nl. We would rather you told us first, but you do not have to.
Cookies and analytics
This site sets no tracking cookies, carries no advertising or social media pixels, and nothing here follows you to another website.
We do measure how the site is used, through Vercel Web Analytics. It counts page views and tells us which pages people arrive on and leave from. It does this without cookies and without building a profile of you: no identifier is stored on your device, and nothing it records can be traced back to an individual or joined up with your reservation. It is there so we know whether the site is working, not who you are.
One cookie exists: a sign-in cookie on the private staff page at /admin. It is set only when a member of staff signs in, it is strictly necessary for that page to work, and it is never set for visitors.
Security
Reservations are held in a database that rejects public access outright; only our server-side code can read them, and the staff page behind /admin requires a password. Traffic to this site is encrypted in transit. No system is perfect, but we hold as little as possible, which is the part that matters most.
Children
This site is meant for adults and we do not knowingly collect data from anyone under 16. If you believe a child has reserved a watch here, tell us and we will remove it.
Changes to this page
If we change how we handle your data we will update this page and the date at the top. If a change materially affects data we already hold under your consent, we will contact you before it takes effect.
