Last updated: 30 September 2026
Atelier Craig takes care to protect the personal data provided by visitors, customers and people who leave a watch with the workshop. This policy explains what data we use, why we use it, who may receive it and how you can exercise your rights.
1. Data controller and contact
The data controller is Nicolas Craig, a sole trader trading as Atelier Craig. His administrative contact details are in the Legal noticeFor any question or request about your personal data, email nicolas@ateliercraig.com.
2. Data We Use and Why
- Enquiries and appointments: your name and contact details, your enquiry, and the information needed to reply, prepare a quote or arrange an appointment.
- Repairs and watch intake: Identity and contact details, preferred communication language, description of the watch and accessories, reported problem, condition noted at intake, photographs, the value declared by the customer, quote, approvals, signature, correspondence, payment information and repair tracking information. We use these details to record the intake, carry out and document the service, communicate with you, manage warranties and respond to requests. Complete job files and internal workshop notes are not published. Online tracking shows only the file linked to your own access.
- Orders: Contact details, billing and delivery addresses, products ordered, amounts, payment status, and information needed for delivery, invoicing and after-sales support.
- Reviews: Rating, title, review text, display name and email address submitted through the form. After moderation, the display name, rating and text may appear publicly on the site; the email address is not shown with the review.
- Website operation and security: Limited technical data such as IP address, browser information, connection logs and information needed to operate the site, prevent abuse, protect security and measure visits.
3. Legal bases
We use data needed for a quote request, appointment, repair or order to take steps at your request before a contract or to perform the contract. Billing data and certain records are retained to meet legal obligations. Technical data needed to secure the site is used in our legitimate interest in protecting the site and its users. Reviews are submitted voluntarily and published after moderation. Where processing relies on your consent, you may withdraw it at any time for the future.
4. Recipients and service providers
We do not sell your data. It is accessible only to Atelier Craig and, where necessary, to providers that operate the site or deliver the requested service: Infomaniak for hosting and the site’s email delivery; Calendly for appointments; Jetpack/Automattic for certain site features, security and statistics; WooCommerce for orders; the payment provider selected at checkout (options may include WooPayments, Stripe or PayPal); and La Poste, Packlink or the selected carrier when you request shipping. These providers receive only the information needed for their service. Data may also be disclosed to authorities where the law requires it.
Some providers may process data outside the European Economic Area. Where such a transfer occurs, it must be covered by safeguards required by applicable law. Please also consult the privacy notices of the providers concerned.
5. How long we keep data
- Requests from people who do not become customers are kept for no more than three years after collection or the last contact initiated by the person, unless a legal obligation or dispute requires longer retention.
- A repair file is kept while the service is being handled and for the periods needed to manage warranties and defend legal rights. Only necessary records are then archived for the period required by legal obligations or applicable limitation periods.
- Accounting records and invoices are kept for the periods required by law, including ten years for accounting documents.
- Published reviews remain visible until removed or deleted; information needed for moderation is kept only as long as needed for that purpose.
- Email logs for messages sent by the site are automatically deleted after 14 days.
When applicable retention periods end, data is deleted or anonymised unless it must be kept to meet a legal obligation or defend a legal claim.
6. Cookies and third-party content
The site may use cookies or similar technologies for necessary functions such as navigation, language preferences, the shopping basket, customer accounts and site administration. Jetpack may also provide visitor statistics. Embedded content or external services, including Calendly, may set their own cookies and receive data when you use them. Where the law requires consent for non-essential trackers, it must be obtained before they are stored or accessed. You can also manage cookies in your browser settings. The providers’ privacy notices describe their own processing.
7. Your rights
Under applicable law, you may request access to, correction or deletion of your data, restriction of processing, object to certain processing or request portability of data you provided. You may withdraw consent where processing depends on it. To exercise your rights, contact nicolas@ateliercraig.com. We may reasonably verify your identity to protect your data.
You may also lodge a complaint with the CNIL, the French data protection authority, via CNIL complaint page.
8. Updates
This policy may be updated if our data processing or applicable requirements change. The latest update date appears at the top of the page.