Privacy Policy
Effective Date: 1st March 2025
Last Updated: 1st March 2025
1. Introduction
Key and Box, a trading name of WatchLabs Ltd. ("Company," "we," "our," or "us"), is committed to protecting the privacy of individuals who visit our website and use our services ("Users" or "you"). This Privacy Policy outlines how we collect, use, disclose, and safeguard your personal information.
2. Information We Collect
We may collect the following types of information:
Personal Information: Information that identifies you as an individual, such as your name, email address, postal address, phone number, and payment details.
Usage Data: Information about your interaction with our services, including IP address, browser type, operating system, referring URLs, and pages viewed.
Cookies and Similar Technologies: We use cookies and similar tracking technologies to enhance your experience. You can manage your cookie preferences through your browser settings or refer to our Cookie Policy for detailed information about the types of cookies we use and how to disable them.
Payment Information: We do not store full payment card details. Payment transactions are processed securely through our third-party payment provider (Stripe), which handles data in accordance with its own privacy policies.
3. How We Use Your Information
We use the collected information for the following purposes:
To Provide and Maintain Our Services: Including account creation, processing transactions, and delivering customer support.
To Improve Our Services: By analysing usage patterns to enhance functionality and user experience.
To Communicate with You: Sending administrative information, updates, security alerts, and promotional materials.
To Enforce Our Terms and Policies: Ensuring compliance with our terms of service and other policies.
3.a Legal Basis for Processing
We process personal information under the following legal bases:
Contractual Necessity: To provide and maintain our services.
Legitimate Interests: To improve our platform and enhance security.
Legal Obligations: To comply with applicable laws and regulations.
Consent: Where required, for marketing communications and non-essential cookies.
4. Data Sharing and Disclosure
We do not sell or rent your personal information. We may share your information in the following circumstances:
With Service Providers: Third-party vendors who assist in providing our services, including cloud storage & hosting providers, payment processors, analytics and marketing platforms, and security and fraud prevention providers. Where possible, we use pseudonymisation and encryption before sharing data.
For Legal Requirements: If required by law or in response to valid requests by public authorities.
Business Transfers: In connection with any merger, sale of company assets, financing, or acquisition of all or a portion of our business.
5. Data Security
We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission over the internet or electronic storage is 100% secure.
6. Data Retention
We retain your personal information only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.
7. Your Rights
Depending on your jurisdiction, you may have the following rights regarding your personal information:
Access: Request a copy of the personal information we hold about you.
Correction: Request correction of inaccurate or incomplete information.
Deletion: Request deletion of your personal information.
Objection: Object to the processing of your personal information.
Restriction: Request restriction of processing your personal information.
Data Portability: Request transfer of your personal information to another entity.
You can exercise these rights by contacting legal@keyandbox.com. We will respond to requests within one month, in accordance with UK GDPR. If you are unsatisfied with our response, you have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) at www.ico.org.uk.
8. International Data Transfers
Your information may be transferred to and maintained on servers located outside of your jurisdiction, where data protection laws may differ. We take steps to ensure that your data is treated securely and in accordance with this Privacy Policy.
9. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on our website and updating the "Last Updated" date. You are advised to review this Privacy Policy periodically for any changes.
10. Contact Us
If you have any questions about this Privacy Policy, please contact us at legal@keyandbox.com.
