Chronoly legal

Privacy Policy

This policy explains how Chronoly collects, uses, stores and protects personal information when you use our marketplace, messaging, verification and account services.

Last updated: 29 July 2026
UK GDPR and Data Protection Act 2018

Who we are

Chronoly operates an online marketplace for buyers, private sellers and professional watch dealers.

For the personal information described in this policy, Chronoly is generally the data controller. This means Chronoly decides why and how that information is processed.

Before public launch, this section should also include Chronoly's registered legal entity name, business address, company number and privacy contact email.

Information we collect

The information collected depends on how you use Chronoly and which features you choose to access.

  • Account details, such as your name, email address, username, account type and login identifiers.
  • Profile details, including your display name, profile image, biography, location, website, Instagram account and dealer information.
  • Listing information, including watch details, prices, descriptions, photographs, videos, location and availability.
  • Marketplace activity, such as saved listings, watchlists, searches, messages, reports and listing interactions.
  • Verification information, including identity, address, contact and business documentation where submitted.
  • Support and safety information, including enquiries, complaints, reports, evidence and correspondence.
  • Technical information, such as IP address, browser type, device details, timestamps, session information and security logs.
  • Payment or subscription information relating to future Chronoly fees, memberships or boosted listings. Full card details should normally be handled by the payment provider rather than stored by Chronoly.

Chronoly does not need users to provide information about health, religion, political opinions, sexual orientation or other special-category information. Users should avoid including unnecessary sensitive information in profiles, listings or messages.

How we collect information

Chronoly may collect personal information:

  • Directly from you when you register, edit a profile, create a listing, send a message, submit verification documents or contact support.
  • Automatically when you use the website, through login sessions, security records, cookies and similar technologies.
  • From other users when they message you, report an account, leave a review or provide information relating to a marketplace dispute.
  • From service providers that support authentication, hosting, storage, email, payments, fraud prevention or analytics.
  • From publicly available business registers, dealer websites or other lawful sources when checking a professional seller.

How we use personal information

  • Create and administer Chronoly accounts.
  • Publish profiles, listings, photographs and other marketplace content selected for public display.
  • Provide watchlists, saved listings, searches, messaging and seller tools.
  • Review identity, seller and dealer verification requests.
  • Detect fraud, counterfeits, account misuse, spam and security threats.
  • Investigate reports, enforce platform rules and protect users.
  • Provide customer support and respond to account or privacy requests.
  • Maintain, monitor, troubleshoot and improve Chronoly.
  • Produce aggregated marketplace insights and dealer analytics that do not directly identify individuals where reasonably possible.
  • Comply with legal duties and respond to lawful requests.

Our lawful bases

Chronoly must have a lawful basis whenever it processes personal information. The basis used depends on the activity.

  • Performance of a contract: where processing is needed to create your account and provide the Chronoly services you request.
  • Legitimate interests: where processing is reasonably necessary to operate and improve the marketplace, prevent fraud, protect users, moderate content and secure the service.
  • Legal obligation: where Chronoly must retain or disclose information to comply with applicable laws, court orders or regulatory duties.
  • Consent: where required, for example for certain non-essential cookies or optional direct-marketing communications.

Where consent is the lawful basis, you may withdraw it at any time. Withdrawal does not make earlier processing unlawful.

Profiles and listings

Information placed in a public profile or public listing can be viewed by other users, visitors and search engines. This may include your display name, profile photo, biography, general location, verification badge, seller type, listings and reviews.

Do not place private contact details, home addresses, payment information, identity-document numbers or other unnecessary personal information in public listing descriptions or photographs.

Removed listings or profile information may remain temporarily in backups, security records, search-engine caches or records retained for legal and fraud-prevention purposes.

Messages and communications

Chronoly stores marketplace messages and uploaded message media so conversations can be delivered to participants and reviewed where necessary for safety, support or dispute handling.

Messages are intended for the users participating in the conversation, but authorised Chronoly personnel may access relevant communications where reasonably necessary to investigate abuse, fraud, technical issues or legal concerns.

Users should not send passwords, complete payment-card information, identity documents or sensitive banking information through marketplace chat.

Verification information

Identity and business verification may involve information such as your legal name, date of birth, address, telephone number, business email, company details and supporting documents.

Verification documents are intended to be private and should only be accessible to authorised personnel and relevant service providers. Chronoly may use them to assess account authenticity, dealer status, fraud risk and compliance with platform requirements.

Verification information may be retained for a reasonable period after review where needed to prevent repeated fraud, respond to disputes or demonstrate that checks were completed.

Cookies and analytics

Chronoly may use cookies and similar technologies for login sessions, account security, preferences, performance and analytics.

  • Essential technologies help users sign in, maintain sessions and access secure features.
  • Security technologies help detect misuse and protect accounts.
  • Preference technologies remember selected settings.
  • Analytics technologies help understand how the marketplace is used and where improvements are needed.

Non-essential cookies should not be activated until any required consent has been obtained. More information will be provided in Chronoly's Cookie Policy.

Read the Cookie Policy →

Who we share information with

Chronoly does not sell personal information. Information may be shared where reasonably necessary with:

  • Hosting, database, storage, authentication and infrastructure providers.
  • Email, communications, analytics, customer-support and payment providers.
  • Identity-verification, security and fraud-prevention providers.
  • Professional advisers, such as lawyers, accountants and insurers.
  • Police, courts, regulators, tax authorities or other bodies where disclosure is legally required or reasonably necessary to protect rights and safety.
  • A purchaser, investor or successor organisation in connection with a genuine business sale, investment, restructuring or transfer.

Public profile and listing information is also shared with anyone who visits or uses the marketplace.

International transfers

Some service providers may process personal information outside the United Kingdom.

Where required, Chronoly will use an approved transfer mechanism or another lawful safeguard, such as an adequacy regulation, the UK International Data Transfer Agreement or an approved UK addendum to standard contractual clauses.

How long we keep information

Chronoly keeps personal information only for as long as reasonably necessary for the purpose for which it was collected and for related legal, security and business needs.

Retention periods may depend on:

  • Whether your account remains active.
  • The type and sensitivity of the information.
  • Fraud-prevention and marketplace-safety requirements.
  • Ongoing complaints, reports, disputes or legal claims.
  • Accounting, tax, regulatory and other legal obligations.

Chronoly may anonymise information so it can no longer identify you and retain that anonymised information for research, security or marketplace analysis.

Your data-protection rights

Depending on the circumstances, UK data-protection law may provide rights to:

  • Ask for a copy of personal information held about you.
  • Correct inaccurate or incomplete personal information.
  • Ask for personal information to be deleted.
  • Ask Chronoly to restrict how information is used.
  • Object to processing based on legitimate interests or to direct marketing.
  • Receive certain information in a portable format.
  • Withdraw consent where processing relies on consent.
  • Complain to the Information Commissioner's Office.

These rights are not absolute. Chronoly may need to keep or continue using information where a lawful exception applies. Chronoly may also request information to verify the identity of the person making a request.

Security

Chronoly uses technical and organisational measures intended to protect personal information against unauthorised access, alteration, loss or disclosure.

Measures may include secure authentication, restricted database access, row-level security, private document storage, encrypted connections, access controls, logging, backups and software updates.

No website or internet transmission can guarantee absolute security. Users are responsible for choosing a strong password, protecting login credentials and notifying Chronoly of suspected account misuse.

Marketing communications

Chronoly may send important service messages relating to your account, listings, security, verification or changes to the platform. These are not promotional messages and may be necessary to provide the service.

Promotional emails should only be sent where Chronoly has a lawful basis to do so. Users will be able to unsubscribe from optional marketing, although this will not stop essential account or security communications.

Children’s privacy

Chronoly is intended for adults aged 18 and over. We do not knowingly permit children to create marketplace accounts or knowingly collect personal information from children for this purpose.

If you believe that a child has provided personal information to Chronoly, please contact us so the matter can be reviewed.

Third-party services and links

Chronoly may contain links to dealer websites, social-media pages, payment services or other external services.

Those organisations are responsible for their own use of personal information. Their privacy policies apply when you leave Chronoly or provide information directly to them.

Changes to this policy

Chronoly may update this Privacy Policy to reflect changes to the marketplace, service providers, processing activities or applicable law.

Material changes may be communicated through the platform, by email or by another reasonable method. The date at the top of this page will show when the policy was last updated.

Complaints

Please contact Chronoly first if you have concerns about how your personal information has been used so that we can investigate.

You also have the right to complain to the Information Commissioner's Office, the United Kingdom's data-protection regulator. This right is not affected by contacting Chronoly first.

Contact

To make a privacy request, ask a question or report a concern, use the Chronoly contact page and select the privacy or account request option.

Before launch, Chronoly should display its dedicated privacy email address and registered business details here.

Add Chronoly's legal entity name, registered address, company number and privacy email before public launch. The policy should also be checked against the exact services and third-party providers used in production.

Back to top ↑