Privacy Policy
1. Introduction
At TrueNorthNat, protecting your personal information is our highest priority. This Privacy Policy transparently informs you about what data we collect, how we process it, and what control you have over your information, especially in the context of luxury watch manufacturing and repair services.
Our data processing practices comply with applicable Canadian privacy laws and the European General Data Protection Regulation (GDPR), where it applies to our activities in providing watchmaking and repair services to clients.
2. Collection and Processing of Personal Data
The collection and processing of your data is strictly purpose-limited to providing, conducting, and personalizing our watchmaking services and related services. This includes:
2.1. Data that you actively provide to us:
- Registration information such as name, email address, phone number, and timepiece details
- Payment information when ordering watch services or products
- Feedback, comments, and communications as part of our service process
2.2. Automatically collected data:
- Technical information such as IP address, device type, and browser version when using our website
- Service history and appointment records
- Communication preferences to optimize our customer support
2.3. Cookies and tracking technologies: We use necessary cookies and, with your consent, analysis cookies to continuously improve our services. You can adjust your cookie settings in your browser at any time or use our website without optional cookies.
3. Purpose of Data Processing
We process your personal data for the following purposes:
- Service administration – For the organization and personalized provision of our watch manufacturing and repair services
- Client management – For managing appointments, orders, payments, and sending relevant service information
- Service tracking – To monitor and analyze the status of your timepiece during the service process
- Quality assurance – For continuous improvement of our watchmaking and repair services
4. Legal Basis for Processing
Our data processing is based on the following legal foundations:
- Contractual fulfillment in providing watchmaking services and managing client data (Art. 6 Para. 1 lit. b GDPR)
- Legitimate interest in improving our service offerings and optimally designing our client experience (Art. 6 Para. 1 lit. f GDPR)
- Fulfillment of legal obligations, particularly in the area of accounting (Art. 6 Para. 1 lit. c GDPR)
- Your express consent for collection of certain service data and for marketing measures (Art. 6 Para. 1 lit. a GDPR)
5. Sharing with Third Parties
Your data will only be shared with third parties in the following cases:
- Payment service providers – For secure processing of payments for our services
- IT service providers – For the operation of our workshop management systems and website as part of contracted processing
- Specialized suppliers – For sourcing specific watch components, but only with the information necessary for the order
We will under no circumstances share your data with uninvolved third parties for advertising purposes.
6. Data Security
To protect your data, we implement advanced security measures, including encrypted data transmission, secure storage, and strict access controls for our staff. We take particular care to protect sensitive client information and details about valuable timepieces.
Physical documents containing personal data are stored in locked cabinets and securely destroyed after the statutory retention periods expire.
7. Data Storage Duration and Deletion
Your data will only be stored as long as necessary for the stated purposes:
- Contact and contract data are stored for the duration of the client relationship plus statutory retention periods.
- Service records may be retained for up to 7 years after service completion for warranty purposes and continued client support.
- Payment data are stored in accordance with legal retention requirements for up to 10 years.
You have the right to request early deletion of your data, provided there are no legal retention obligations to the contrary.
8. Your Rights
As a client, you have the following rights:
- Access to the data stored about you
- Correction of incorrect or incomplete data
- Deletion of your data under the legally provided conditions
- Restriction of processing under certain conditions
- Data portability in a structured, common format
- Objection to processing based on legitimate interest
To exercise these rights, please contact us by email at privacy@truenorthnat.com or in person at our workshop.
9. GDPR-specific Provisions
As a Canadian company with clients from the EU area, we follow the principles of the General Data Protection Regulation (GDPR) and guarantee the following rights:
- Cross-border data transfers – When transferring data to countries outside the EU/EEA, we ensure that appropriate protective measures are taken, such as standard contractual clauses or adequacy decisions.
- Data Protection Officer – Our Data Protection Officer is available for inquiries regarding the processing of your personal data and can be reached at privacy@truenorthnat.com.
- Right to complain – You have the right to lodge a complaint with a data protection supervisory authority, particularly in the EU member state of your residence, your workplace, or the place of the alleged violation.
- Data minimization – We only collect data that is necessary for the stated purposes and store it only as long as necessary and legally required.
For EU citizens using our watchmaking services, additional special protective measures according to GDPR apply, including extended information obligations and stricter consent requirements.
10. Changes to the Privacy Policy
We reserve the right to update this Privacy Policy as needed to reflect legal requirements or organizational changes. The current version will always be published on our website and displayed in our workshop.
For significant changes, we will inform our clients by email or through a notice at our atelier.
If you have questions about data protection, we are available at any time in person, by phone, or by email. The protection of your data is not only a legal obligation for us but an essential part of our professionalism and respect for our clients, especially when handling valuable and personal timepieces.