Privacy Policy

1. Who we are

This website is operated by Assay Atelier Ltd, referred to as "we", "us", or "our". We are a private limited company registered in England and Wales under company number 17290909. Our registered office is Suite 6 C1 Coalport House, Stafford Court, Stafford Park 1, Telford, TF3 3BD, United Kingdom.

We design and sell bracelets, watch straps, and related products that act as wearable vaults for your own gold bars. For the purposes of UK data protection law, Assay Atelier Ltd is the controller of the personal data described in this policy.

2. Information we collect

We may collect the following types of information:

• Contact details - information such as your name, email address, and shipping address.
• Order information - items purchased, configuration details, order history, and billing information processed by our e-commerce platform and its payment providers. We never see or store your full card details.
• Website usage data - analytics about how you use the site, such as pages visited, time spent and, when we test design changes, which version of a page you saw. This is only collected if you accept analytics cookies.
• Waitlist signup - the email address you give us to join the pre-launch waitlist, and which part of the site you signed up from. We only add you once you confirm via the email we send you.
• Communication history - emails or messages you send us, for example compatibility questions.

3. How we use your information

We use your information for the purposes below. UK data protection law requires us to have a lawful basis for each one, which we have listed alongside it.

• Processing and delivering your orders - necessary to perform our contract with you.
• Answering compatibility, support, and other enquiries - our legitimate interest in responding to people who contact us, or steps taken at your request before entering a contract.
• Sending waitlist and educational emails - your consent, which you give by confirming your subscription and can withdraw at any time using the unsubscribe link in any email.
• Understanding how the site is used and improving it - your consent to analytics cookies, given through the cookie banner.
• Keeping records and complying with legal obligations - our legal obligations, for example tax and accounting rules.

4. Cookies & analytics

We use two categories of cookies. Essential cookies keep the site working, for example remembering your cart and your cookie choices, and do not need your consent. Analytics cookies are set only after you accept them in the cookie banner: Google Analytics 4 uses them to understand which pages are used and how, and we use one of our own to show you the same version of a page on each visit while we test design changes.

You can change your choice at any time using the "Cookie preferences" link in the footer, or by clearing cookies in your browser settings.

5. Third-party services

We share limited information with trusted third parties who help us operate our business:

• Our e-commerce platform and its payment processors, to take payment securely and manage orders.
• Shipping providers, to deliver your order.
• Google Analytics 4, to understand site usage, only if you accept analytics cookies.
• Kit (Kit.com, formerly ConvertKit), to store our waitlist and send the email updates you subscribe to. You can unsubscribe from any email we send, and you can ask us to delete your address entirely using the contact details below.

These providers only receive the information necessary to perform their services and are contractually required to protect it. Some of them, including Google and Kit, are based in the United States. Where your data leaves the UK we rely on the UK Extension to the EU-US Data Privacy Framework, or on the UK International Data Transfer Agreement or Addendum, to protect it.

6. Data retention

We keep your information only as long as we need it. Order records are kept for six years after the order to meet UK tax and accounting rules. Waitlist and marketing email addresses are kept until you unsubscribe or ask us to delete them. Enquiry emails are kept for up to two years after our last exchange. Analytics data is retained by Google Analytics for fourteen months.

7. Your rights

Under UK data protection law you have the right to:

• Access the personal information we hold about you.
• Have inaccurate information corrected.
• Have your data deleted, where applicable and lawful.
• Restrict or object to how we process your data, including for direct marketing.
• Receive the data you gave us in a portable format.
• Withdraw consent at any time, where we rely on consent.

To exercise any of these rights, contact us using the details below. We will respond within one month. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK data protection regulator, at ico.org.uk.

8. Contact us about privacy

If you have any questions about this Privacy Policy or how we handle your data, you can contact us by email or by post at our registered office above:

privacy@assayatelier.com