Legal
Privacy Policy
Your privacy matters to us. This policy explains how we handle your personal data.
Last reviewed: July 2026
Crown Vault Ltd (trading as The Crown Vault, “we”, “us”, “our”) is committed to protecting your privacy and handling your personal data openly and in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This policy explains what we collect, why, how we use and share it, and the rights available to you.
1. Who we are
Crown Vault Ltd (trading as The Crown Vault) is the data controller for personal data collected through https://www.thecrownvault.co.uk. We are registered in England & Wales, Company No. 17036066, registered office Crown House, 94 Armley Road, Leeds LS12 2EJ. For any privacy matter, contact us at info@thecrownvault.co.uk.
For any privacy matter, contact our data protection team at info@thecrownvault.co.uk or call +44 7868 170938.
2. The data we collect
- Identity & contact data — name, billing and delivery address, email address, telephone number.
- Order & transaction data — watches purchased, sold or part-exchanged, order value, payment method and payment status. We do not take card payments or store card numbers; payment is by bank transfer or cryptocurrency, and cryptocurrency payments are handled by our vetted digital-asset partner.
- Identity-verification data — proof of identity and address, and source-of-funds information where required by anti-money-laundering (AML) law, particularly for high-value and cryptocurrency transactions.
- Valuation & sale data — details of a watch you ask us to value, buy or part-exchange.
- Technical & usage data — IP address, device and browser type, and pages viewed, collected via cookies and similar technologies (see our Cookie Policy).
- Communications — the content of your enquiries, emails, calls and messages to us.
3. How we use your data & our lawful basis
| Purpose | Lawful basis |
|---|---|
| Processing orders, payments, valuations, deliveries and returns | Performance of a contract |
| Identity and source-of-funds checks | Legal obligation (AML regulations) |
| Customer service and responding to enquiries | Legitimate interests / contract |
| Fraud prevention and securing our business and website | Legitimate interests / legal obligation |
| Improving our website and services (analytics) | Consent (non-essential cookies) |
| Sending marketing about watches and services | Consent, or legitimate interests for existing customers |
| Meeting tax, accounting and other legal requirements | Legal obligation |
4. Marketing
Where you have consented, or where permitted for existing customers, we may send you news and offers. You can opt out at any time via the unsubscribe link in any email or by contacting us — this will not affect service messages about an order.
5. Who we share your data with
We share personal data only where necessary, with:
- Payment, cryptocurrency and finance partners who process transactions;
- Insured couriers and logistics providers who deliver and collect watches;
- Identity-verification and fraud-prevention providers;
- IT, hosting, communications and professional-services providers who support our business;
- Law enforcement, regulators or authorities where we are legally required to do so.
We require all providers to protect your data and to use it only for the purposes we specify. We never sell your personal data.
6. International transfers
Where a provider is outside the UK, we ensure an appropriate safeguard is in place — such as a UK adequacy decision or the International Data Transfer Agreement — so your data receives an equivalent level of protection.
7. How long we keep it
We keep personal data only as long as necessary for the purposes above. Transaction and AML records are typically retained for at least six years to meet legal, tax and regulatory obligations; marketing data is kept until you opt out.
8. Security
We apply appropriate technical and organisational measures — including encryption in transit, access controls and staff confidentiality — to protect your data against loss, misuse and unauthorised access.
9. Your rights
Under UK data protection law you have the right to:
- be informed about how we use your data;
- access a copy of your data;
- have inaccurate data corrected;
- have your data erased (where no legal obligation requires us to keep it);
- restrict or object to processing, including direct marketing;
- data portability; and
- withdraw consent at any time.
To exercise any right, contact info@thecrownvault.co.uk. We will respond within one month. We do not use solely automated decision-making that produces legal effects concerning you.
10. Cookies
We use cookies and similar technologies as set out in our Cookie Policy.
11. Children
Our website and services are intended for adults aged 18 and over. We do not knowingly collect data relating to children.
12. Changes to this policy
We may update this policy from time to time. The “last reviewed” date above shows when it was last changed; material changes will be highlighted on this page.
13. Complaints
If you have a concern, please contact us first and we will do our best to resolve it. You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk or on 0303 123 1113.