Privacy Policy

Kykis Luxury Watch Marketplace

Last updated: 1 August 2026

Kykis is committed to protecting your personal data. This Privacy Policy explains what data we collect, why we collect it, and how you can exercise your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Data Controller

The data controller for personal information collected on this Platform is Kykis, operating at kykis.com. For all data-related enquiries, contact us at privacy@kykis.com.

2. Information We Collect

We collect information you provide directly and information generated automatically:

2.1 Information You Provide

  • Account data: name, email address, password (hashed), location, phone number, and bio.
  • Listing data: watch descriptions, photographs, pricing, and condition details.
  • Communications: messages sent between buyers and sellers through our messaging system.
  • Payment data: subscription billing information processed by our third-party payment provider.

2.2 Automatically Collected Data

  • Log data: IP address, browser type, pages viewed, and timestamps.
  • Cookies: session cookies used for authentication and preference storage (see Section 7).
  • Usage data: interactions with listings, searches, and favourites.

3. How We Use Your Information

We use your data to:

  • Operate, maintain, and improve the Platform and its features.
  • Create and manage your account and authenticate your identity.
  • Facilitate communication between buyers and sellers.
  • Process subscription payments and send receipts.
  • Send transactional emails (account verification, password resets, notifications).
  • Detect, prevent, and respond to fraud, abuse, or security incidents.
  • Comply with legal obligations and enforce our Terms of Service.

4. Legal Basis for Processing

Under UK GDPR, we rely on the following lawful bases:

Purpose Legal Basis
Account creation & management Contract performance
Subscription billing Contract performance
Fraud prevention & security Legitimate interests
Legal compliance Legal obligation
Marketing communications Consent

5. Data Sharing

We do not sell your personal data. We may share data with:

  • Payment processors: to handle subscription billing securely.
  • Email service providers: to deliver transactional and notification emails.
  • Cloud hosting providers: to store Platform data securely.
  • Law enforcement or regulatory bodies: where required by law or to protect the rights and safety of our users.

All third-party processors are bound by data processing agreements consistent with UK GDPR requirements.

6. Data Retention

We retain your personal data for as long as your account is active, or as needed to provide services, comply with legal obligations, resolve disputes, and enforce our agreements. Upon account deletion, we remove personally identifiable data within 30 days, except where retention is required by law.

7. Cookies

We use the following cookies:

  • Session cookie: required for login and maintaining your session.
  • CSRF token cookie: required for security of form submissions.
  • Preference cookies: to remember optional display settings.

We do not use third-party advertising or tracking cookies. You may disable cookies in your browser settings, but this may affect Platform functionality.

8. Your Rights

Under UK GDPR you have the right to:

Access

Request a copy of your personal data.

Rectification

Correct inaccurate or incomplete data.

Erasure

Request deletion of your personal data.

Restriction

Restrict how we process your data.

Portability

Receive your data in a machine-readable format.

Object

Object to processing based on legitimate interests.

To exercise any of these rights, email privacy@kykis.com. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

9. Security

We implement industry-standard technical and organisational measures to protect your data, including encrypted data transmission (TLS/HTTPS), hashed password storage, and access controls. However, no internet transmission is 100% secure; you use the Platform at your own risk.

10. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes by email or by a prominent notice on the Platform. Continued use of the Platform after changes constitutes acceptance.

11. Contact Us

For any privacy-related questions or requests, please contact our Data Protection team at privacy@kykis.com or use our Contact page.