Privacy Policy

Before launch: add the trading address under “Who we are”, and revisit the Analytics section once you have chosen a provider (there is no analytics on the site today, and this policy says so). This is a working draft, not legal advice — have it reviewed before you take real traffic.

This policy explains what personal data G-Shocked collects, why, who it is shared with, and what your rights are. It describes what the site actually does today, not what it might do later.

Last updated: 6 September 2026.

Who we are

G-Shocked is run by Rob King, a sole trader in the United Kingdom. For data protection purposes, Rob King is the data controller.

• Email: [email protected]
• Postal address: [ADDRESS TO BE ADDED]

We are not required to have a Data Protection Officer, and we do not have one. Email the address above with any data protection question and it comes straight to the person responsible.

What we collect, and why

Newsletter signup

When you sign up we store your email address, which of the two options you ticked (newsletter, and optionally deal alerts), the date and time, the page you signed up from, your IP address, your browser’s user-agent string, and a copy of the exact wording you were shown when you consented.

The IP address and consent wording are not there to profile you. UK GDPR Article 7(1) requires us to be able to demonstrate that you consented, so we keep a record of precisely what you agreed to and when. We store a version number and a hash of that wording so it cannot be quietly rewritten after the fact.

Lawful basis: consent (UK GDPR Art. 6(1)(a)), and consent under PECR reg. 22 for the marketing itself.

Comments

If you leave a comment, WordPress stores the name, email address and comment text you submit, along with your IP address and user-agent — this is standard WordPress behaviour and helps with spam. Your email address is not published and is not added to the newsletter.

Lawful basis: legitimate interests — running a usable comment section and keeping it free of spam.

Server logs

Our web server records requests, including IP addresses, in the ordinary way. These are used for security and diagnosing faults, not for tracking you around the site.

Analytics

We currently run no analytics of any kind. No Google Analytics, no tracking pixels, no advertising tags. If that changes we will update this policy and say so here before we start.

Affiliate links

Some links to retailers are affiliate links. When you click one, the retailer — Amazon, for example — may set its own cookies and collect data under its own privacy policy, which we do not control. We do not receive your personal data back from them, only anonymous, aggregated commission reporting that does not identify individual buyers.

We do not set advertising or tracking cookies of our own.

Who we share it with

We do not sell your data, and we do not share it for anyone else’s marketing. These are the only processors that handle it on our behalf:

• Resend (Plus Five Five, Inc., United States) — sends our newsletter and confirmation emails. Messages are routed through Resend’s Ireland (EU) region, but Resend stores account data, delivery logs and email metadata in the United States. See Resend’s privacy policy.
• Cloudflare, Inc. (United States) — provides DNS, sits in front of the site as a proxy, and forwards email sent to our @g-shocked.com addresses. See Cloudflare’s privacy policy.

The site itself is self-hosted on our own hardware in the United Kingdom. Your data is not on a third-party web host.

Transfers outside the UK

Both processors above are United States companies, so some of your data is transferred outside the UK. Those transfers rely on the UK International Data Transfer Addendum to the EU Standard Contractual Clauses, incorporated into each provider’s data processing agreement.

How long we keep it

• Signups that are never confirmed — deleted automatically after 30 days. If you never click the confirmation link, we do not keep your address.
• Confirmed subscribers — kept until you unsubscribe.
• After you unsubscribe — your IP address and user-agent are erased automatically, because they are no longer needed. We keep your email address, the date you unsubscribed, and the consent record. That is deliberate: it evidences that we honoured your request, and it stops your address being re-added by a later import. If you would rather we deleted it entirely, ask and we will.
• Comments — kept indefinitely so threads stay readable, unless you ask us to remove yours.

Your rights

Under UK GDPR you can ask us to give you a copy of your data, correct it, delete it, restrict how we use it, or provide it in a portable format. You can object to processing, and you can withdraw consent at any time.

Withdrawing consent is deliberately as easy as giving it: every marketing email has a one-click unsubscribe link, and your email client’s own unsubscribe button works too. You can also use our unsubscribe page. No login, no reason required, no retention offers.

For anything else, email [email protected]. We will respond within one month. There is no charge.

If you are unhappy with how we have handled your data, you can complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113. We would rather you told us first so we can put it right.

Automated decision-making

We do not carry out any automated decision-making or profiling that produces legal or similarly significant effects.

Changes to this policy

If we want to use your data for something new, we will tell you before we start rather than quietly amending this page. Material changes to how we use newsletter data will be sent to subscribers by email.