Privacy Policy

1. Introduction

Chronotime LTD (“WatchTraderHub”, “we”, “us”, or “our”) is committed to protecting your privacy and ensuring the security of your personal data. This Privacy Policy explains how we collect, use, store, and protect your information in compliance with the General Data Protection Regulation (GDPR) and Bulgarian data protection laws.

2. What Data We Collect

2.1 Information You Provide

• Account Information: Name, email address, company details, VAT number
• Business Information: Inventory data, pricing, watch specifications
• Payment Information: Billing address, payment method (processed by Stripe)
• Communications: Support tickets, emails, feedback

2.2 Information We Collect Automatically

• Usage Data: How you interact with our platform
• Technical Data: IP address, browser type, device information
• Cookies: See Section 9 for detailed cookie information

2.3 Data From Integrated Services

• Information necessary to sync with Chrono24, eBay, Shopify, WooCommerce, Etsy, and Wristler.eu
• Limited to data required for inventory synchronization

3. Legal Basis for Processing

We process your personal data based on the following legal grounds:

3.1 Contract Performance

• To provide our services and manage your account
• To process payments and maintain transaction records
• To sync your inventory with integrated platforms

3.2 Legitimate Interests

• To improve our services and user experience
• To ensure platform security and prevent fraud
• To provide customer support

3.3 Legal Obligations

• To maintain financial records as required by Bulgarian law
• To respond to lawful requests from authorities

3.4 Consent

• To send marketing communications (newsletter)
• To use analytics and performance cookies

4. How We Use Your Data

We use your personal data to:

• Provide and maintain WatchTraderHub services
• Process payments and manage subscriptions
• Sync your inventory with selected platforms
• Provide customer support
• Send service-related communications
• Send marketing emails (only with consent)
• Analyze usage to improve our services
• Ensure security and prevent fraud
• Comply with legal obligations

5. Data Sharing and Third Parties

5.1 Service Providers

We share data with trusted service providers who assist us in operating our platform:

• Stripe: Payment processing (GDPR compliant)
• Resend: Email delivery (GDPR compliant)
• Cloudflare R2: Secure image storage (GDPR compliant)
• Vercel: Platform hosting (GDPR compliant)

5.2 Integration Partners

With your explicit instruction, we share necessary data with:

• Chrono24, eBay, Shopify, WooCommerce, Etsy, Wristler.eu
• Only data intended for publishing and required identifiers are shared

5.3 Legal Requirements

We may disclose data when required by:

• Bulgarian or EU law
• Valid court orders or legal processes
• Tax authorities for accounting purposes

5.4 No Sale of Data

We never sell, rent, or trade your personal data to third parties.

6. Data Security

We implement appropriate technical and organizational measures to protect your data:

• Encryption in transit and at rest
• Regular security assessments
• Access controls and authentication
• Secure data centers within the EU
• Regular backups and disaster recovery procedures

All our service providers are GDPR compliant and use EU-based servers.

7. Data Retention

We retain your data for the following periods:

• Active Accounts: As long as your account remains active
• Inactive Accounts: 12 months after last sign-in
• After Account Deletion: 30 days before irreversible purge
• Financial Records: 7 years as required by Bulgarian tax law
• Support Communications: 12 months
• Marketing Consent Records: Until withdrawn plus 3 years for legal proof

8. Your Rights Under GDPR

You have the following rights regarding your personal data:

8.1 Right to Access

Request a copy of your personal data we hold

8.2 Right to Rectification

Request correction of inaccurate or incomplete data

8.3 Right to Erasure (“Right to be Forgotten”)

Request deletion of your data (subject to legal retention requirements)

8.4 Right to Data Portability

Receive your data in a structured, machine-readable format

8.5 Right to Object

Object to processing based on legitimate interests

8.6 Right to Restrict Processing

Request limitation of data processing in certain circumstances

8.7 Right to Withdraw Consent

Withdraw consent for marketing or optional cookies at any time

To exercise any of these rights, contact us at support@watchtraderhub.com. We will respond within 30 days.

9. Cookie Policy

9.1 What Are Cookies

Cookies are small text files stored on your device that help us provide and improve our services.

9.2 Types of Cookies We Use

9.3 Cookie Consent

Upon first visit, you can choose which optional cookies to accept through our cookie consent banner. You can change your preferences at any time through your account settings.

10. International Data Transfers

All data processing occurs within the European Union. We do not transfer personal data outside the EU. All our service providers maintain data centers within the EU and are GDPR compliant.

11. Children's Privacy

WatchTraderHub is not intended for users under 18 years of age. We do not knowingly collect personal data from anyone under 18. If we discover such data has been collected, we will promptly delete it.

12. Data Breach Notification

In the event of a personal data breach, we will:

• Notify the Bulgarian Commission for Personal Data Protection within 72 hours
• Notify affected users without undue delay if the breach poses high risk to their rights
• Document all breaches and actions taken

13. Updates to This Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. We will notify you of significant changes via email or platform notification. Continued use after changes constitutes acceptance.

14. Contact Information

For privacy-related questions, concerns, or to exercise your rights: