Privacy Policy

This policy explains what personal data TIMEVAULT® collects, why, who it is shared with, how long it is kept, and the choices you have. Horological Atelier Ltd is the controller of your personal data. Questions can be sent to info@asset-provenance.com.

What we collect

• Account details: your name, email address, an optional phone number, and your password (stored only in scrambled, one-way form).
• Identity verification: collectors verify with Stripe Identity, using a photo of one government-issued ID and a live selfie. Stripe does the check and we receive only the result. If the instant check is unavailable you can upload one ID document to us instead.
• Watch and ownership records: the details, photographs, service history and ownership transfers of the watches you register or receive.
• Partner links: if you reach us through a partner's link, we record which partner, and nothing else about the link, against your account. Clicks on partner links from our menu are only counted - we keep nothing about who clicked.
• Enquiries: anything you send us through the Contact page or the in-app Support page.
• Payments: handled by Stripe. We never see or store your card number.
• Security and usage records: your IP address, browser type and sign-in activity, kept to protect accounts and investigate misuse.

Why we use it

• To provide the service you asked for (your account, your records, transfers and certificates).
• To verify identity and keep the platform trustworthy.
• To protect accounts, prevent fraud and meet legal obligations.
• To respond to your questions and send service messages such as email confirmation and password resets.

We do not sell your personal information, and we do not use it for advertising.

Who we share it with

• Service providers that run the platform for us: Amazon Web Services (hosting, file storage and email delivery, with data held in London) and Stripe (payments).
• Stripe Identity for the identity check: Stripe reads your ID, checks it is genuine and compares your face with the photo on it (biometric processing, only with your explicit consent). We receive the result, not your ID photo or selfie. Stripe handles that data under its own privacy policy.
• The Watch Register, only when you or another person runs its optional check on a watch, in which case the watch details entered for that check are shared with it.
• Insurance or service partners, only when you choose to engage with them through the platform.
• Authorities, where the law requires it.

TIMEVAULT® never discloses who owns a watch to other users or to the public. Public checks only ever return whether a watch is registered.

How long we keep it

• Identity checks are held by Stripe, which keeps and deletes your ID photo and selfie under its own policy. An ID you uploaded to us instead is deleted 90 days after you register.
• IP address and browser details recorded for security are deleted after 180 days, or sooner if you ask us to erase your data.
• Account details are kept while your account is open, and for as long afterwards as the law or a legitimate need to resolve disputes requires.
• Provenance records: information written to the cryptographic provenance ledger (asset records, transfer history, service records) is permanent by design, which is what makes a TIMEVAULT® record trustworthy. The ledger holds asset events only: no name, email, IP address or ID. If you ask us to erase your data we delete or anonymise your account and remove your personal records; the asset history stays, with a random reference that no longer points to you.

Your rights

Under UK and EU data protection law you can ask to access, correct, delete, restrict or object to our use of your personal data, and to receive a portable copy of data you gave us. If you live in the United States, including California and other states with privacy laws, you can ask what personal information we hold, request correction or deletion, and you will not be treated differently for doing so. We do not sell or share personal information for advertising, so there is nothing to opt out of.

Signed-in users can make a request from Privacy & Data in their account. Otherwise email info@asset-provenance.com. You can also complain to the UK Information Commissioner's Office (ico.org.uk). See also Your Data Rights (GDPR).

Cookies

We use only strictly necessary cookies to keep you signed in. We use no analytics or advertising cookies. Details are in our Cookie Policy.

Changes

If we change this policy in a way that matters, we will update this page and, where needed, ask you to agree again. Our Terms of Service explain the rest of how the platform works.