Privacy policy

Last Updated: June 2025

Welcome to Javile. This Privacy Policy is published by POVIKO LTD, the legal entity operating https://javile.com/, a fashion watch retailer offering Men's Watches, Women's Watches, and Classic Watches to customers around the world. Our registered business address is 20 Wenlock Road, London, N1 7GU, United Kingdom.

We take your privacy seriously. This document explains in full detail exactly what personal data we collect when you browse or purchase from our store, why we collect it, how we use it, who we share it with, how long we keep it, and what rights you have over it. Please read this policy carefully. By using our website and services, you acknowledge that you have read and understood the practices described here.

If you have any questions about this policy at any time, you can contact us at support.javile@gmail.com, by phone at +44 7476 541478, or by post to the address above. Our support team is available Monday to Friday, 08:00–16:00 GMT, and we aim to respond to all enquiries within 48 hours.

1. Who We Are (Data Controller)

For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, the data controller is:

  • Legal business name: POVIKO LTD
  • Trading as: Javile
  • Address: 20 Wenlock Road, London, N1 7GU, United Kingdom
  • Email: support.javile@gmail.com
  • Phone: +44 7476 541478

As data controller, POVIKO LTD determines the purposes and means by which your personal data is processed. We are committed to handling your information lawfully, fairly, and transparently.

2. What Personal Data We Collect

When you visit our website, create an account, or place an order for our men's, women's, or classic fashion watches, we collect the following categories of personal data:

2.1 Identity and Contact Information

  • Full name — provided when you create an account or complete a purchase
  • Email address — used to send order confirmations, shipping notifications, and customer service communications
  • Phone number — provided optionally or required for certain shipping carriers to arrange delivery

2.2 Address Information

  • Shipping address — required to deliver your watch order to the correct location
  • Billing address — required to process your payment and prevent fraud

2.3 Payment Information

  • Payment card details — we do not store your full card details on our servers. All payment data is processed securely through our third-party payment processors (see Section 5). We may retain a tokenised reference to your payment method where our processor allows it for repeat purchases.

2.4 Technical and Usage Data

  • IP address
  • Browser type and version
  • Device type and operating system
  • Pages viewed, time spent on pages, and navigation paths
  • Referring URLs (the website that directed you to javile.com)
  • Click behaviour and interactions on product listings, watch categories, and promotional content

2.5 Cookie and Tracking Data

We collect data through cookies and similar tracking technologies. Please see Section 6 for full details on how we use cookies.

2.6 Communications Data

  • Any information you provide when you contact us by email or phone, including the content of messages, enquiries, and complaints

3. Why We Collect Your Data and How We Use It

We collect and process your personal data for specific, clearly defined purposes. We only process data where we have a lawful basis to do so under UK GDPR. Below is a detailed breakdown of our purposes and the corresponding lawful bases:

3.1 To Process and Fulfil Your Orders

Lawful basis: Contract performance. When you purchase a watch from Javile — whether a men's dress watch, a women's fashion piece, or a classic timepiece — we need your name, shipping address, billing address, and payment details to process payment, arrange dispatch through our shipping carriers, and deliver your order to you. Without this data, we cannot fulfil the contract you have entered into with us.

3.2 To Send Order Confirmations and Shipping Updates

Lawful basis: Contract performance. We use your email address and phone number to send you confirmations of your order, dispatch notifications, tracking information, and updates regarding the delivery of your watches.

3.3 To Provide Customer Support

Lawful basis: Contract performance / Legitimate interests. We use your contact and order data to respond to your enquiries, resolve complaints, process returns or exchanges, and provide after-sales support. Our team is available Monday to Friday, 08:00–16:00 GMT, and responds within 48 hours.

3.4 To Prevent Fraud and Ensure Payment Security

Lawful basis: Legitimate interests / Legal obligation. We use billing address information, IP addresses, and payment data signals to detect and prevent fraudulent transactions, unauthorised purchases, and other potentially illegal activity on our platform.

3.5 To Improve Our Website and Product Offerings

Lawful basis: Legitimate interests. We analyse anonymised or aggregated usage data — such as which watch categories are most visited, which products are added to cart most often, and how customers navigate our site — to improve our website design, product curation, and overall shopping experience.

3.6 To Send Marketing Communications (Where You Have Consented)

Lawful basis: Consent. If you have opted in to receive marketing emails from us, we may send you information about new arrivals, promotions, and special offers on our watch collections. You can withdraw your consent and unsubscribe at any time by clicking the unsubscribe link in any marketing email or by contacting us directly at support.javile@gmail.com.

3.7 To Comply with Legal Obligations

Lawful basis: Legal obligation. We may be required to retain and process certain data to comply with UK tax law, accounting regulations, anti-money laundering requirements, or in response to lawful requests from regulatory authorities or law enforcement.

4. Legal Bases for Processing (UK GDPR Summary)

Under UK GDPR, we rely on the following lawful bases across our processing activities:

  • Contract performance — processing necessary to fulfil orders and provide services you have requested
  • Legitimate interests — fraud prevention, website analytics, and improving our services, where these interests are not overridden by your rights
  • Legal obligation — compliance with UK laws and regulations
  • Consent — marketing communications and non-essential cookies, where you have given clear, informed consent

5. Third-Party Services and Data Sharing

We do not sell your personal data to third parties. However, to operate our store effectively and deliver your watch orders, we share relevant data with the following trusted third-party service providers:

5.1 Payment Processors

  • Stripe — We use Stripe to process credit and debit card payments securely. When you enter your payment details at checkout, that information is transmitted directly to Stripe and is subject to their privacy policy and PCI-DSS compliance standards. Javile does not store raw card numbers on our servers. For more information, visit: https://stripe.com/gb/privacy
  • Shopify Payments — Our store is powered by Shopify, and where Shopify Payments is enabled, Shopify also processes transaction data. Shopify is PCI-DSS compliant and maintains its own privacy policy available at: https://www.shopify.com/legal/privacy

5.2 Shopify (E-Commerce Platform)

Our entire store infrastructure runs on Shopify Inc. Shopify stores and processes your order data, account information, and browsing behaviour on our behalf as a data processor. Shopify's servers are located in the United States and Canada, meaning your data may be transferred internationally. Such transfers are conducted under appropriate safeguards including Standard Contractual Clauses.

5.3 Shipping Carriers

To deliver your Men's Watches, Women's Watches, and Classic Watches to your door, we share your name, shipping address, and phone number with our logistics partners, which may include:

  • USPS (United States Postal Service)
  • FedEx
  • Other regional or international carriers depending on your delivery location

These carriers use your data solely for the purpose of delivering your order and may send you delivery notifications directly.

5.4 Analytics Providers

We use analytics tools (such as Google Analytics) to understand how visitors use our website. These tools collect anonymised data such as page views, session durations, and device types. This data does not directly identify you as an individual. Google Analytics operates under its own privacy policy and data processing terms.

5.5 Legal and Regulatory Authorities

We may disclose your personal data to law enforcement agencies, regulatory bodies, or courts if required to do so by law or in response to a valid legal request.

6. Cookie Policy

Cookies are small text files placed on your device when you visit a website. We use cookies and similar tracking technologies on javile.com for a variety of purposes.

6.1 Types of Cookies We Use

  • Strictly Necessary Cookies: These cookies are essential for our website to function. They enable core features such as shopping cart functionality, account login sessions, and secure checkout. These cookies cannot be disabled without affecting how the site works.
  • Performance and Analytics Cookies: These cookies collect information about how visitors use our website — for example, which pages are visited most frequently and how customers navigate between our watch categories. This information is used in aggregated, anonymised form to improve our website.
  • Functional Cookies: These cookies remember your preferences — such as your selected currency or country — to provide a more personalised browsing experience.
  • Marketing and Targeting Cookies: Where you have given consent, these cookies track your browsing habits to help us display relevant advertisements and promotions for our watch collections. They may be set by us or by trusted third-party advertising networks.

6.2 Managing Cookies

You can manage and control cookie preferences through your browser settings. You can set your browser to refuse all or some cookies, or to alert you when websites set or access cookies. Please note that disabling certain cookies may affect the functionality of our website. Where required by law, we will ask for your consent before placing non-essential cookies on your device.

7. International Data Transfers

POVIKO LTD is based in the United Kingdom. However, some of our third-party service providers — including Shopify (Canada/USA) and Stripe (USA) — are based outside the UK. When your personal data is transferred to countries outside the UK, we ensure that appropriate safeguards are in place, such as:

  • UK International Data Transfer Agreements (IDTAs) or UK Addendum to EU Standard Contractual Clauses
  • Adequacy decisions recognised by the UK Information Commissioner's Office (ICO)
  • Binding Corporate Rules or equivalent mechanisms

By using our website and services, you acknowledge that your data may be transferred internationally in accordance with these safeguards.

8. Data Retention

We do not keep your personal data for longer than is necessary for the purposes for which it was collected. Our data retention practices are as follows:

  • Order and transaction data (including your name, address, and purchase history): retained for a minimum of 6 years from the date of purchase in accordance with UK tax and accounting regulations (HMRC requirements).
  • Customer account data: retained for as long as your account remains active, plus a reasonable period thereafter to enable account reactivation or resolve disputes.
  • Marketing consent records: retained for as long as you remain subscribed, plus sufficient time to demonstrate compliance if challenged.
  • Customer support communications: retained for up to 3 years from the date of the last interaction, to resolve any follow-up issues or disputes.
  • Analytics and cookies data: retained in accordance with the retention periods set by the relevant analytics platforms (typically up to 26 months for Google Analytics data).
  • Fraud prevention data: retained for up to 5 years where applicable, to protect our business and other customers from fraudulent activity.

When data is no longer required, it is securely deleted or anonymised so that it can no longer be associated with you as an individual.

9. Data Security

We take the security of your personal data very seriously and implement a range of technical and organisational measures to protect it from unauthorised access, loss, destruction, or disclosure. These measures include:

  • SSL/TLS encryption: All data transmitted between your browser and our website is encrypted using industry-standard Secure Sockets Layer (SSL) / Transport Layer Security (TLS) technology. You will see a padlock icon in your browser address bar when browsing our site.
  • PCI-DSS compliance: Payment data is handled exclusively through PCI-DSS compliant processors (Stripe and Shopify Payments). We do not store raw payment card information on our own servers at any time.
  • Access controls: Access to personal data is restricted on a strict need-to-know basis. Only authorised members of our team who require access to fulfil orders or provide customer support are permitted to view customer data.
  • Secure infrastructure: Our website is hosted on Shopify's secure, enterprise-grade infrastructure, which undergoes regular security audits and penetration testing