Privacy Policy

Victor Bonnaire LLC is an independent vintage watch dealer and service provider based in Boulder, Colorado. We sell curated vintage timepieces, perform restoration and repair work, and operate a nationwide ship-in service. You can reach us at Team@VictorBonnaire.com.

We collect the following categories of personal information, depending on how you interact with us:

• Contact details: name, email address, phone number, and mailing or return address when you submit a form, place an order, consign a watch, or ship a watch in for service.
• Transaction details: the watch(es) purchased, sold, or serviced; price; payment confirmation reference; and shipping records. Payment card numbers are processed by our payment processor and are not stored on our servers.
• Watch information: brand, model, reference and serial numbers, photographs, and any condition notes you provide for service, consignment, or sale inquiries.
• Marketing preferences: your email address and any preferences if you subscribe to our newsletter or marketing list.
• Technical data: IP address (stored only in a one-way hashed form for abuse prevention), browser type, device type, referring URL, pages viewed, and approximate location derived from your IP.
• Communications: the contents of emails, contact form submissions, and other messages you send us.

We do not intentionally collect Social Security numbers, government ID numbers, biometric data, or precise geolocation, and we do not knowingly collect information from anyone under 16.

We use personal information to:

• Respond to inquiries and provide quotes, sale and service information, and follow-up communications.
• Process and fulfill orders, including shipping, insurance, and returns.
• Operate our consignment, ship-in service, and in-person workshop offerings.
• Maintain records of sales, services, and consignments for accounting, tax, warranty, and authenticity purposes.
• Send transactional emails (order confirmations, shipping updates, service updates, return authorizations).
• Send marketing emails about new arrivals, restorations, or events, only if you have opted in, and you can unsubscribe at any time.
• Protect the Site from fraud, abuse, and misuse, and to enforce our Terms of Service.
• Comply with legal obligations and respond to lawful requests from authorities.

Where applicable law (such as the EU/UK GDPR) requires us to identify a legal basis for processing, we rely on:

• Contract: to perform a sale, service, consignment, or ship-in agreement at your request.
• Legitimate interests: to operate, secure, and improve our business and Site, where these interests are not overridden by your rights.
• Consent: for marketing emails, optional cookies, or any other use you specifically agree to.
• Legal obligation: to comply with tax, accounting, anti-money-laundering, and other applicable laws.

We do not sell or rent your personal information. We share it only with the following categories of recipients, and only as needed to operate our business:

• E-commerce platform: Shopify Inc., which powers our product catalog, checkout, and customer records.
• Hosting and infrastructure: Lovable Cloud (built on Supabase) and Cloudflare, which host the Site and store contact, newsletter, and ship-in records.
• Payment processors: Shopify Payments and any payment networks used at checkout. Card data is handled by them, not by us.
• Shipping carriers: FedEx and any other carrier we use to ship a watch to or from you, including for insurance and signature confirmation.
• Email service providers: used to send transactional emails (order, shipping, service updates) and marketing emails if you have opted in.
• Analytics, error monitoring, and review platforms: limited technical data is processed by tools we use to understand site usage, debug issues, and collect verified reviews.
• Professional advisors: accountants, lawyers, and insurers, where reasonably necessary.
• Authorities: if required by law, court order, or to investigate or prevent fraud, theft, or harm.
• Successors: in connection with a sale, merger, or transfer of all or part of our business, subject to this Policy.

We require each service provider to handle your information only as needed to perform their services for us, and to protect it appropriately.

We and our service providers use cookies and similar technologies to keep your shopping cart working, remember your preferences, and understand how the Site is used. You can control cookies through your browser settings. Disabling certain cookies may impact functionality such as cart persistence and checkout.

Our checkout and storefront platform (Shopify) sets its own cookies in accordance with its privacy practices. You can review Shopify's privacy practices on their website.

We keep personal information only for as long as we have a legitimate business or legal reason to. Typical retention periods:

• Sale, service, and consignment records, at least seven (7) years, to meet tax, accounting, warranty, and authenticity-history obligations.
• Contact form submissions and ship-in intake records, up to three (3) years from the date of submission.
• Newsletter records, until you unsubscribe, after which we retain a suppression record to honor your opt-out.
• Server, security, and email-delivery logs, typically 30–90 days.

When we no longer need information, we delete it or anonymize it.

We use commercially reasonable administrative, technical, and physical safeguards to protect personal information from loss, misuse, unauthorized access, alteration, and disclosure. No method of transmission or storage over the internet is fully secure, and we cannot guarantee absolute security.

Depending on where you live, you may have rights to access, correct, delete, or receive a copy of your personal information; to object to or restrict certain processing; and to withdraw consent. Residents of California, Colorado, and certain other U.S. states have specific rights under their state privacy laws, including the right to know what we collect, the right to delete, and the right to opt out of "sales" or "sharing" of personal information for cross-context behavioral advertising.

We do not sell personal information, and we do not share it for cross-context behavioral advertising as those terms are defined under California and Colorado law.

To exercise any of these rights, email Team@VictorBonnaire.com with the subject line "Privacy Request." We may need to verify your identity before responding. We will not discriminate against you for exercising a privacy right.

You can unsubscribe from marketing emails at any time using the link at the bottom of any marketing email, or by emailing us. Even after you unsubscribe, we may still send you transactional messages about orders, services, or consignments.

We operate from the United States. If you access the Site or contact us from outside the U.S., your information will be transferred to, stored in, and processed in the United States, where data-protection laws may differ from those in your country.

We may update this Privacy Policy from time to time. When we do, we will update the "Effective" date above. If changes are material, we will use reasonable efforts to notify you, including by posting a notice on the Site.

Questions about this Privacy Policy or our privacy practices? Email Team@VictorBonnaire.com or use our contact form.