Privacy

Who is responsible

Oliver Rosendal operates the Relax storefront and the shared enquiry and operations system. Contact support@relaxwatchco.com or use the contact details below to ask about your personal information.

Information we collect and its sources

We collect the name, email address, telephone number, business name, destination, address, watch selections, quantities and instructions you provide through forms or customer-care messages. For a project enquiry, we also store the brief and any reference files you choose to upload. Order and tracking information comes from our operations team, the payment provider and fulfilment partners.

The cart remains in browser storage until you continue to checkout. Checkout details and enquiries are stored in our database. Private order links contain an access key; keep the link confidential. We use limited technical information, including a hashed network identifier, to prevent abuse.

How we use information

We use your information to respond to enquiries, agree specifications, administer and fulfil accepted orders, communicate about delivery, handle returns and refunds, keep business records and protect the service. This processing supports requested pre-contract steps, contracts, applicable legal obligations and our legitimate interests in operating and securing the business. We do not add you to marketing lists merely because you send an enquiry.

Optional visitor analytics and your choices

If you allow analytics, we measure visits to the public Relax store to improve product presentation and checkout. This is based on your consent. We record a random browser identifier, a session identifier, the consent version and time, public page paths, product selections, photo interactions, category and sorting choices, scroll milestones, visible-page engagement and checkout steps or broad error categories. Search events record the number-of-results group, never the words you type. We also record a broad known traffic source, approximate network country and screen-width group. We do not put names, emails, addresses, full IP addresses, full referring URLs, arbitrary campaign text, form entries or payment-card details in browsing events. We do not use fingerprinting, advertising pixels or session replay.

With analytics consent, a visit can be linked to an order you place so that we can measure which visits led to verified live purchases. This uses a separate order-to-session reference; browsing events do not contain your contact details. Only the store owner can view the reports, which present aggregate activity. These analytics are not shared with the fulfilment supplier or sold to advertisers.

The __Host-relax_privacy cookie remembers your choice for up to 90 days. It is necessary to respect that choice. Only after you opt in, the HttpOnly __Host-relax_analytics cookie stores a random analytics token for up to 90 days, and relax-analytics-session in session storage groups activity until 30 minutes of inactivity or 24 hours. The server stores a hash of the browser token. These optional cookies and session data are separate from your essential shopping cart and order access. If saving a refusal fails, relax-privacy-pending-rejection remembers to retry that refusal on your next visit.

Choose Essential only to browse and shop without optional analytics. You can withdraw consent through Privacy choices in the footer. This stops analytics and deletes the browsing records and order-attribution links associated with the current browser token; it does not delete orders or accounting records required for the purchase. An unsuccessful save is shown on screen and retried on the next visit. Browser Do Not Track and Global Privacy Control signals are also respected.

Analytics permission and linked records expire 90 days after consent. Expired records are immediately excluded from measurement and reports; physical deletion runs on the next analytics request or dashboard refresh. There is no separate scheduled cleanup job, so expired records can remain stored while the service is inactive. A new consent period does not extend the old records. Clearing cookies can break our ability to associate a deletion request with an old pseudonymous browser record; those records still expire. Other business records follow the separate retention rules below.

Hosting, payments and fulfilment

The website, database and private file storage run on Cloudflare through ChatGPT Sites. Administrative access uses ChatGPT sign-in. Customer checkout does not require ChatGPT sign-in.

When Stripe payments are enabled, Stripe processes payment information through its hosted checkout. We record payment references and status; we do not collect or store card numbers. Transactional email is enabled only after an email service and sender have been configured. Until then, notifications remain queued in the operations system.

Oliver handles fulfilment coordination and shares with our fulfilment partner only the recipient name, delivery address and contact details, ordered items and approved custom instructions needed to prepare and send your order. Card data, internal CRM notes and unrelated customer history are excluded. Delivery carriers receive the information needed for transport and tracking.

International processing and retention

Hosting and service providers may process data outside your country. Fulfilment in Asia requires the delivery information needed for your shipment to be shared with the fulfilment partner. The applicable provider, recipient and transfer arrangements must be documented before live payment and automatic fulfilment delivery are activated.

We retain information for as long as needed to handle your enquiry, fulfil the contract, resolve claims and meet applicable accounting and record-keeping duties. Unsuccessful enquiries and unneeded reference files should be removed when no longer required. Ask us about retention or request deletion; records that must be retained for legal obligations are handled separately.

Security and your rights

Access to operations records and uploaded files is restricted to the store owner. We use server-side permission checks and private storage. No service can guarantee perfect security. Do not include unnecessary sensitive information in reference files or project notes.

You may contact us to request access, correction, deletion or restriction of processing, object where applicable, or request portability. We may need to verify your identity and retain records required by law. We do not discriminate against you for exercising your rights. You may complain to the competent data-protection authority.

Children, external links and changes

The service is intended for adult customers. Contact us if a child has provided information that should be removed. External websites have their own privacy terms. We update this notice when the actual service changes and publish the revision date here.