Version of
Privacy policy
We collect only what we need to sell you a watch or answer your request, and we never sell your data.
Who we are
The controller of your personal data is Cro Watches, . Contact for anything about your data: email.
What we collect and why
- When you buy a watch: your name, delivery address or chosen Omniva parcel locker, email, phone number and order details. We use them to deliver your order and handle returns (performance of the contract), and to keep invoices and accounting records (a legal obligation). Payments are processed by Stripe; we never see your full card number.
- When you search for a parcel locker by address: the address you type is passed through our server to the OpenStreetMap map service to find the nearest lockers. Your IP address is not passed on and we do not store the address. If you tap "Use my location", your location is used only inside your browser and is never sent to us.
- When you request a watch ("Find a watch"): your name, email, country, the watch details and any photos you upload. We use them to prepare your quote (steps you asked for before a contract).
- When you write a review: your rating, text, the name and country you enter and (if you add one) a photo. We publish them on the site with your consent. You can ask us to delete your review at any time.
- When you email us: your email address and message, to reply to you (our legitimate interest in answering questions).
Who we share it with
- Stripe, for payments.
- Cloudflare, which hosts this website, receives the forms ("Find a watch", reviews) and counts anonymous visits.
- OpenStreetMap, only for the address typed in the parcel-locker search (without your name or IP address).
- Omniva, postal and courier companies, to deliver your watch.
- Resend, to send you emails about your order (confirmation and tracking number).
- Trustpilot: after we ship your order, Trustpilot may send you one email inviting you to review us. For this we share your name, email and order reference (our legitimate interest in collecting honest reviews). Writing a review is up to you, and you can ask us not to send the invitation.
- Our accountant, for bookkeeping.
- Public authorities, only when the law requires it.
Stripe and Cloudflare may process data in the USA. These transfers are protected by the EU–US Data Privacy Framework or the European Commission's standard contractual clauses.
How long we keep it
- Orders, invoices and accounting records: 10 years, as Lithuanian accounting law requires.
- Watch requests that did not lead to a purchase: 12 months.
- Reviews: while they are published on the site, or until you ask us to delete them.
- Emails: up to 2 years after our last contact.
Your rights
You can ask us to show you the data we hold about you, correct it, delete it, limit how we use it, or send it to you in a portable format. You can also object to how we use it. Just email us, and we reply within one month.
If you think we have handled your data wrongly, you can complain to the State Data Protection Inspectorate of Lithuania (Valstybinė duomenų apsaugos inspekcija, vdai.lrv.lt) or to the data protection authority in your own country.
Cookies
We use Cloudflare Web Analytics to count visits. It does not use cookies and does not follow you to other websites; it only records anonymous page views (page, country, browser and the site you came from). Our fonts are stored on our own server.
We also use Microsoft Clarity without cookies to see how the site is used (clicks, scrolling and mouse movement on each page), so we can fix what doesn't work. Anything you type into forms is hidden from it, and it cannot recognise you from one page or visit to the next. Microsoft processes this data for us and may do so in the USA, under the EU–US Data Privacy Framework. We keep it for up to 30 days. We do this based on our legitimate interest in improving the site (GDPR Art. 6(1)(f)); you can object at any time by emailing us.
Your browser remembers the contents of your cart in its local storage, so the watches stay there when you move between pages. This stays on your device and is never sent to us.
We don't use any tracking or advertising cookies. If we ever add them, we will ask for your permission first.
When you pay, you are taken to Stripe's secure checkout, which uses its own cookies that are needed for safe payment. See Stripe's privacy policy for details.