Privacy policy
Last Updated: September 2025
Notice at Collection
We collect personal information in categories such as identifiers (e.g. name and contact details), customer records (e.g. billing and shipping information), commercial information (e.g. purchase history), internet or electronic activity (e.g. IP address, cookies, browsing data), and inferences drawn from your interactions. We use this information for the business purposes described in this Policy (such as fulfilling orders, providing and improving services, personalizing content, and marketing). We do not sell your personal information for monetary compensation, but we may share certain personal data with third-party partners for advertising and analytics, which may be considered a “sale” or “sharing” under some state privacy laws. We retain each category of personal information only as long as necessary for the purposes described (see Section 7 below for retention details by category). If you wish to opt out of any sale or sharing of your personal information, you may submit an opt-out request (see Section 5 below to learn more about your privacy choices).
This Privacy Policy describes how Double M Merchandise Inc. (referred to as “Double M,” “we,” “us,” or “our”), the operator of the New York Watch Outlet website (the “Site”), collects, uses, and discloses your personal information. It also explains your privacy rights and how to exercise them, in compliance with applicable U.S. laws including the California Consumer Privacy Act (as amended by the CPRA), the Colorado Privacy Act, and the Virginia Consumer Data Protection Act. We are committed to safeguarding your privacy and being transparent about our data practices. By using our Site, you agree to the collection and use of information as described in this Policy. If you do not agree, please do not use the Site.
We may update this Privacy Policy from time to time to reflect changes in our practices or for legal reasons. If we make material changes, we will update the “Last Updated” date above and may provide additional notice (e.g. on our homepage or via email). We encourage you to review this Policy whenever you access our Site to stay informed about our practices.
1. Information We Collect
We collect personal information (also referred to as personal data) that you provide to us directly, that is collected automatically through your interactions with our Site, and in some cases from third parties. The types of personal information we collect include:
Information You Provide to Us: When you make a purchase or fill out forms on our Site (such as creating an account, checking out, contacting us, or subscribing to our newsletter), you provide information such as your name, email address, billing and shipping address, phone number, payment details, and any other information you choose to submit. This may also include information you provide through HubSpot forms on our Site (for example, when signing up for newsletters or inquiries). We treat all such information as personal and handle it in accordance with this Policy.
Payment Information: If you make purchases, your payment card information (credit card number, expiration date, etc.) is collected by our payment processor (e.g. credit card processing services or platforms like PayPal) directly. We do not store full payment card numbers on our servers. We receive confirmation of payment and limited information (such as a transaction ID or last four digits of your card) for record-keeping. Payment processors are independent controllers of your payment data and have their own privacy policies.
Information for Order Fulfillment: When you place an order, we collect details necessary to process the transaction, such as the items purchased, order number, and purchase date. We also collect shipping information (like your mailing address) to ship your order and share the minimum necessary details with our shipping/delivery partners to deliver your products (see Section 4 below (How We Share and Disclose Information)).
Communications: If you contact us (via email, phone, or Site forms), we will collect the information you provide in your correspondence (such as your name, email, and the content of your message or inquiry). We use this to respond to you and to improve our customer service. We may keep records of our communications with you.
Information Collected Automatically: When you visit or interact with our Site, we (and authorized third parties) use cookies and other tracking technologies to automatically collect certain data about your device and browsing actions. This may include your IP address, device identifiers, browser type, operating system, referring URLs, pages viewed, links clicked, and the dates/times of access. We also collect information about how you navigate and use the Site (e.g. what pages or products you view, the duration of visits, and crash logs). This data helps us analyze trends, administer the Site, and improve user experience. For example, we use Google Analytics to gather information on usage patterns (such as which pages are most visited and how users find our Site). These tools use cookies and similar technologies to collect data about your device and online behavior. (See Section 3 – Cookies and Tracking Technologies – for more detail.)
Information from Cookies and Similar Technologies: Cookies are small text files placed on your device that remember your preferences and activity. Our Site uses cookies, web beacons, and tracking pixels to personalize your experience and for analytics and advertising purposes. For instance, cookies allow us to remember your shopping cart, recognize you on return visits, and understand how users engage with our Site. We (and third parties acting on our behalf) may combine information from cookies with other data, such as the information you provide to us, to derive inferences about your preferences or to personalize content. Please see Section 3 (Cookies and Tracking Technologies) for more information on our use of cookies, the types of cookies we use, and how you can control them.
Information from Third Parties: In some cases, we may obtain information about you from third-party sources. For example, if you log in via a social media account or choose to share information with us via a social network, that platform may provide us with certain information (subject to your settings on that platform). We may also receive updated shipping or contact information from our carriers or payment processors to correct our records. Additionally, if you interact with our pages or accounts on social media (such as Facebook or Instagram), we may receive aggregate information about your engagement with our content. We will treat information from third parties in accordance with this Policy and any additional restrictions imposed by the source of the data.
Categories of Personal Information (for CCPA/CPRA): For residents of California and certain other states, below is how the personal information above may be classified into the categories defined by law:
- Identifiers: name, email address, telephone number, postal address, IP address, and other similar identifiers.
- Customer Records Information: payment information (billing address, last four digits of payment card, order details) and account login credentials (if you create an account).
- Commercial Information: records of products or services purchased, obtained, or considered, and purchasing histories or tendencies.
- Internet or Other Electronic Network Activity: browsing history, clickstream data, interaction with our Site, and analytics data (e.g. pages visited, time stamps).
- Geolocation Data: coarse location information inferred from your IP address (e.g. city or region).
- Inferences: inferences drawn from the above data (e.g. product preferences or interests) to personalize your experience or marketing.
We do not intentionally collect sensitive personal information such as Social Security numbers, driver’s license numbers, precise geolocation, or biometric identifiers. We do not knowingly collect or process any personal information from children under 13 (see Children’s Privacy below). If you choose not to provide certain personal information, you may not be able to use some features of the Site (for example, we need basic details to process an order).
2. How We Use Your Information
We use the personal information we collect for the following business and commercial purposes:
- To Fulfill Orders and Provide Services: We use your information to process transactions and payments, fulfill and ship your orders, provide receipts or order confirmations, and handle returns or exchanges. This includes managing payments (via third-party payment processors) and enabling order delivery through shipping carriers.
- To Communicate with You: We use contact information (like email or phone) to send you service-related communications. This includes responding to your inquiries or requests, sending order and shipping updates, providing customer support, and notifying you of important changes (e.g. regarding your account or this Policy). These communications are part of our services to you.
- To Send Promotional Materials: In accordance with your preferences and applicable law, we may use your email or contact details to send you marketing communications, such as newsletters, special offers, or product updates. (You can opt out of marketing emails at any time – see Your Rights and Choices below.) We also use information about your past purchases or browsing behavior to personalize these communications and make them more relevant to your interests.
- For Analytics and Improvement: We analyze usage information (including through Google Analytics and HubSpot) to understand how our Site is used and to improve our website, products, and services. This helps us debug issues, test new features, and enhance functionality and user experience. For example, analyzing traffic patterns and feedback allows us to optimize navigation, update our inventory to meet demand, and improve content. We also use analytics to measure the effectiveness of our marketing campaigns and understand customer demographics in aggregate.
- For Personalization: We may use cookies and data about you to personalize your experience on our Site. For instance, we might remember your preferences (such as language or currency), recommend products you may like based on your browsing or purchase history, and tailor content or features to you. (Personalized advertising is addressed separately below.)
- For Advertising and Retargeting: With your consent or as allowed by law, we (or third parties on our Site) may use information about your visits and shopping behavior to show you targeted advertisements on our Site or on other platforms. For example, we might work with advertising partners (like Google or social networks) to display ads for our products on other websites you visit. This might involve sharing hashed identifiers or cookie data with those partners to deliver relevant ads and measure their effectiveness. (See Cookies and Tracking Technologies below for more details on advertising cookies and your choices, including how to opt out of targeted advertising.)
- To Prevent Fraud and for Legal Compliance: We use personal information to detect and prevent fraud, abuse, or illegal activities on our Site. For example, we may use certain data to screen for suspicious transactions or security risks. We also use and disclose information as needed to comply with legal obligations – for instance, maintaining appropriate business records, handling chargebacks, paying taxes, responding to lawful requests by authorities, or fulfilling reporting obligations.
- To Enforce Our Policies and Rights: We may use personal information to enforce our Terms of Service and other agreements, to ensure the security of our Site, and to protect our company, our customers, and others. This includes using information to investigate or take action regarding potential violations, fraud, or security issues.
- With Your Consent or As Otherwise Disclosed: We will use your personal information for any other purpose for which you specifically provide it or otherwise consent to at the time of collection. If we seek to process your information for a purpose that is materially different from those listed above, we will notify you or obtain your consent as required by law.
We do not use personal information for automated decision-making that produces legal or similarly significant effects (such as credit scoring or employment decisions) without human involvement. Any automated processing we do (e.g., basic personalization or segmented marketing) is intended to improve your experience and is not legally significant.
3. Cookies and Tracking Technologies
Our Site uses cookies, pixel tags, web beacons, and similar tracking technologies (collectively, “cookies”) to enable site functionality, understand user behavior, and market our products. Cookies are small data files stored on your browser or device that can remember information about your visit. They help make your interactions with the Site easier and faster by, for example, remembering your login status or the items in your cart, and they provide us with insights into how the Site is being used. We (and authorized third parties) use both session cookies (which expire when you close your browser) and persistent cookies (which remain for a set period or until deleted).
Types of Cookies We Use
We use the following categories of cookies on our Site to perform different functions:
- Essential Cookies: These cookies are necessary for the Site to function properly and cannot be turned off in our systems. They enable core features such as security, network management, and accessibility – for example, keeping you logged in during your visit or enabling the checkout process. Without these cookies, services you have asked for (like adding items to your cart or completing a purchase) cannot be provided. These cookies do not gather information for marketing or remember your internet activity on other sites.
- Functional Cookies: These cookies enable enhanced functionality and personalization on our Site. They may be set by us or by third-party providers whose services we have added (for example, a live chat feature or product review tool). Functional cookies remember your preferences and choices to help us tailor the Site to you – such as your preferred language, region, or items you’ve viewed. If you disable these cookies, some or all of these services may not function properly.
- Analytics/Performance Cookies: These cookies collect information about how visitors use our Site, so we can measure and improve its performance. For instance, they allow us to count visits and traffic sources, see which pages are popular, and understand how visitors move around the Site. The data obtained is generally aggregated and anonymous. We use analytics tools (such as Google Analytics) which set their own cookies to track user interactions. The information from these cookies helps us improve the Site’s functionality, debug errors, and optimize content for user experience. We have configured Google Analytics in compliance with privacy best practices, and you can opt out of Google Analytics as described below (see Your Choices).
- Advertising/Marketing Cookies: These cookies are used to deliver targeted advertisements and marketing communications to you, both on our Site and across other websites. They may be set through our Site by advertising partners and social media platforms. They work by uniquely identifying your browser and device and can build a profile of your interests to show you relevant ads on other sites. For example, if you browse our products, you may later see ads for our watches on other websites (this is sometimes called retargeting). Advertising cookies also help us measure the effectiveness of our ad campaigns (e.g., whether an ad resulted in a purchase). Note: Some of our advertising partners may use cookies or trackers to collect your data for personalized ads; any such “sale” or “sharing” of data is subject to your rights to opt out (see Your Rights and Choices). If you disable these cookies, you will still see ads, but they will be less relevant to you.
In addition to cookies, we may use web beacons (small graphic images or scripts) in our emails or on our Site. These are used to confirm whether you opened an email or interacted with certain content, helping us understand the effectiveness of our communications.
Third-Party Analytics and Tools: We want to be transparent that third-party service providers may set cookies on our Site to assist us. In particular:
- Google Analytics: We use Google Analytics to collect data on Site usage and user interactions. Google Analytics cookies track things like your page views, referral source (e.g., a search engine or ad), and time spent on pages, which helps us compile reports and improve the Site. Google may also set additional cookies (such as the _ga cookie) to help distinguish users. We have configured Google Analytics to respect “Do Not Track” where possible and to not share data with Google for its own advertising use. However, Google’s ability to use and share information collected by Google Analytics about your visits is governed by the Google Analytics Terms of Service and Google’s Privacy Policy. You can opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on (see Your Choices below).
- HubSpot: We use HubSpot as our customer relationship management (CRM) and marketing platform. When you fill out a form on our Site (such as signing up for our mailing list or requesting info), the information is collected and stored by HubSpot on our behalf. HubSpot may set cookies (such as the hubspotutk cookie) to track your visits and form submissions. These cookies help us know when you return to the Site and allow us to tailor our interactions (for example, pre-filling forms with your info or understanding which pages lead you to submit a form). HubSpot’s cookies also help avoid duplicate form submissions and link your form submissions to your browsing session. HubSpot’s use of your data is governed by their privacy policy, and they act as our data processor, using your information only for our specified purposes. You can opt out of non-essential HubSpot cookies via our cookie banner or by adjusting your browser settings (see Your Choices below).
- Other Third-Party Tools: If we incorporate other content or integrations on the Site (such as an embedded YouTube video, or a social media “share” button), those providers may set cookies as well. These cookies are set by the third party (not by us) and are governed by the third party’s privacy policy. For example, a YouTube video embed may set cookies to track video views, or a social media share button might set a cookie to enable the share function. We do not control these cookies, but you can disable them via your browser or through your cookie preferences as described below.
Your Choices for Cookies: When you first visit our Site, you may see a cookie notice or banner allowing you to accept or reject certain cookies. You can manage your preferences at any time by adjusting your browser settings to block or delete cookies. Most browsers allow you to refuse all or some cookies and to alert you when cookies are being sent. Please note, if you disable or delete non-essential cookies, certain features of our Site (especially functionality and personalization) may not work fully, but the Site will still be accessible. Essential cookies (which are necessary for the Site to operate) cannot be turned off via the banner.
For third-party advertising cookies, you can also opt out of targeted ads by using industry opt-out tools. For example, the Network Advertising Initiative (NAI) and the Digital Advertising Alliance (DAA) provide opt-out pages where you can control interest-based advertising from participating companies (via the NAI and DAA opt-out websites). These opt-outs work by placing a cookie on your browser to signal your opt-out; if you clear cookies, you will need to opt out again. Additionally, users in the EU/EEA or UK should use the EDAA’s YourOnlineChoices site for similar opt-outs.
Please note that opting out of advertising cookies does not mean you will no longer see ads – it means you will not be served personalized ads by the companies you opt out of. You may still see generic or contextual ads (for example, an ad shown to all users of a website).
4. How We Share and Disclose Information
We understand the importance of your personal information and only share it in certain circumstances, with appropriate safeguards. We do not sell your personal information to third parties for money. However, we do share personal information with third parties for the business and commercial purposes described below, and some of these disclosures (for example, to advertising partners) may be considered a “sale” or “sharing” of personal information for cross-context behavioral advertising under certain privacy laws. You have rights to opt out of those practices (see Your Rights and Choices). The categories of third parties with whom we share personal information include:
-
Service Providers: We share personal information with third-party service providers and contractors that perform services on our behalf to support our operations. These companies are authorized to use your personal information only as necessary to provide services to us. They include:
- Payment Processors: As noted, a payment processing company (e.g., Stripe, PayPal, or our e-commerce platform’s payment gateway) processes your payment transactions. These processors receive your payment card details and other identifying information as needed to verify and complete payments. They are responsible for safeguarding your payment data and complying with applicable payment security standards.
- Shipping and Logistics Partners: We provide your name and shipping address (and in some cases phone or email for delivery updates) to shipping carriers or fulfillment partners (such as USPS, UPS, FedEx, or other couriers) in order to deliver the products you purchased. They use this information solely for shipping and delivery purposes.
- Website Hosting and IT Providers: Our website may be hosted by third-party hosting providers. We also use cloud storage or database providers to store data, as well as technical service providers for Site maintenance, backup, and security. These providers may process personal information incidentally in the course of providing their services (e.g., storing our website data, which includes your information).
- Customer Service and Communication Tools: We use certain tools to manage customer communications, such as email service providers (for sending order confirmations, newsletters, etc.) or live chat software. For example, if we use an email sending service or a CRM (like HubSpot), those providers will process your contact information and message content on our behalf when we communicate with you.
- Analytics and Marketing Services: As detailed in the Cookies section, we use Google Analytics, HubSpot, and possibly other analytics or marketing services. These service providers process usage data (and in some cases personal identifiers like IP addresses or cookie IDs) on our behalf to provide insights about our Site traffic and marketing effectiveness. We have agreements in place with these providers to restrict their use of your data. For instance, Google Analytics data sharing settings are configured to limit Google’s use of the data. HubSpot, as our marketing platform, may also act as a processor that stores contact info (for email campaigns) and tracks interactions.
- Advertising Partners: We may share certain limited data with advertising networks or platforms to facilitate targeted advertising (for example, providing a hashed version of your email to a platform to find you as an audience for ads, or allowing an ad network to collect cookie data from our Site for ad targeting). We only engage in such sharing in compliance with applicable law, and you have the ability to opt out of targeted advertising as described in this Policy.
- Within Our Corporate Family: Double M Merchandise Inc. operates the New York Watch Outlet. If we have affiliates, parent, or subsidiary companies in the future (for example, if our company expands or forms related ventures), we may share your information within that corporate group as necessary for business operations, consistent with this Policy. For example, if Double M Merchandise Inc. has another brand or affiliate helping to provide you services, your info may be shared with them. Any affiliate receiving your data will uphold the privacy protections described here.
- Business Transfers: If we engage in a merger, acquisition, sale of assets, bankruptcy, or reorganization, your personal information may be transferred to the successor or new owner as part of that transaction. For example, if another company acquires our business or the assets of the New York Watch Outlet, your information would likely be one of the assets transferred. In such cases, we will ensure that the new owner is bound to respect your personal information in accordance with this Privacy Policy or we will provide you with notice and an opportunity to opt out of the transfer of your personal information.
- Legal Compliance and Protection: We may disclose personal information when required to do so by law or in a good-faith belief that such action is necessary to comply with a legal obligation. This includes responding to subpoenas, court orders, or other legal process; responding to lawful requests by public authorities (including to meet national security or law enforcement requirements); or where otherwise required by applicable law. We may also disclose your information if we believe it is necessary to investigate, prevent, or take action regarding suspected or actual illegal activities, fraud, or situations involving potential threats to the safety or legal rights of any person or of our network or services. This may include exchanging information with other companies and organizations for fraud protection and credit risk reduction.
- Advertising and Analytics Partners: As noted, we allow certain third parties to collect data about your browsing activities on our Site through cookies and similar technologies for analytics and advertising purposes. Some of this data sharing could be considered a “sale” or “sharing” under California or other state laws, even though we do not exchange it for money. For example, if we allow a third-party advertising network’s script to collect info (like your device identifier or browsing behavior) to show you ads, that could be deemed a “sale”/“share.” We only permit these parties to collect data to the extent necessary for the services they provide to us (analytics, advertising) and pursuant to agreements that limit how they can use the data. You can control or opt out of this data collection as described in Your Rights and Choices below (including by using Global Privacy Control signals or contacting us to opt out).
- With Your Consent or At Your Direction: We will share your personal information with other third parties (beyond the ones listed above) only with your consent or at your direction. For instance, if you request that we share your information with a third-party partner or you intentionally interact with a third party on our Site (such as entering a promotion co-sponsored with another company), we will share the information needed to fulfill your request.
We want to clarify that we do not sell customer personal information for monetary compensation. Any sharing of data with third parties is solely for legitimate business purposes as outlined and is done under contractual assurance of privacy. In the past 12 months, we have disclosed the above-listed categories of personal information to the categories of third parties noted for those business purposes. We do not knowingly “sell” or “share” (for targeted advertising) the personal information of consumers under 16 years of age without affirmative authorization.
If you have questions about third parties that may have access to your information, or specific details about information shared, you may contact us as provided in Contact Us below. We will be happy to provide more detail as required by applicable law.
De-Identified Data: If we ever use or share personal information in a de-identified or aggregate form (stripped of identifiers so it cannot reasonably be linked to you), we commit to maintaining and using such information only in a de-identified form. We will not attempt to re-identify de-identified data. We also implement technical and organizational safeguards to prevent re-identification of de-identified data, and we contractually require any recipients of de-identified information to agree they will not attempt to re-identify it.
5. Your Rights and Choices
You have rights and choices regarding your personal information. This section describes the rights you have under various U.S. state privacy laws and how you can exercise them. If you are a resident of California, Colorado, Virginia, Connecticut, Utah, Texas, Oregon, Delaware, New Jersey, or other states with similar laws, you have specific rights regarding your personal information. (In recent years, these states have enacted comprehensive privacy laws on different dates – for example, California’s law took effect in 2020/2023, Colorado’s and Virginia’s in 2023, Connecticut’s on July 1, 2023, Utah’s on December 31, 2023, Texas’s and Oregon’s on July 1, 2024, and Delaware’s and New Jersey’s on January 1, 2025, with New Jersey’s universal opt-out requirement enforceable from July 15, 2025.) We are committed to honoring your rights and have provided multiple ways for you to control your information.
a. Privacy Rights Under State Laws
Depending on your state of residence (for example, if you live in California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Delaware, New Jersey, or other states with similar privacy laws), your rights may include:
- Right to Know / Access: You have the right to request a copy of the personal information we have collected about you. You can ask us to confirm whether we are processing your personal information and to provide you with a portable copy of such information. This includes the right to request that we disclose the categories of personal information we have collected, the categories of sources of that information, the business or commercial purposes for collection, the categories of third parties with whom we share personal information, and the specific pieces of personal information we hold about you.
- Right to Deletion: You have the right to request deletion of personal information we have collected from you and retained, subject to certain exceptions. Upon your verified request, we will delete (and direct our service providers/contractors to delete) your personal information from our records, unless an exception applies (for example, if we need to retain certain data to complete a transaction you requested, for security, legal compliance, or other reasons permitted by law). We will inform you of any data we cannot delete if required to retain it under an exception (and will only retain it for that purpose).
- Right to Correction: You have the right to correct inaccurate personal information that we maintain about you. If you find that any personal details we have (like your contact info) are incorrect or outdated, you can request that we rectify them. We will take into account the nature of the personal information and the purposes of processing and will correct any inaccuracies as required.
- Right to Opt Out of Sale or Sharing of Personal Information / Targeted Advertising: You have the right to opt out of the “sale” of your personal information or the “sharing” of your personal information for targeted advertising purposes. As noted above, while we do not sell data for money, we may share certain information with third parties for advertising, analytics, or social media tools that could be considered a sale or sharing under laws like the CCPA/CPRA. You can opt out of these disclosures. When you opt out, we will not sell or share your personal information with such third parties for their use in targeted ads or similar profiling. To opt out, you can use the methods described below (such as sending us an opt-out request or enabling a global opt-out signal in your browser, detailed in subsection (b) below). Once we process your opt-out, we will stop any selling/sharing of your data and will instruct our service providers and contractors to cease selling/sharing your data as well, to the extent required by law.
- Right to Limit Use of Sensitive Personal Information (California): California law provides that if a business uses or discloses “sensitive personal information” (as defined in the CPRA) for purposes not necessary to provide the services or goods, consumers have the right to limit that use. However, we do not collect or use sensitive personal information (such as precise geolocation, Social Security numbers, financial account login credentials, etc.) in a way that would trigger this right. In other words, we only use what limited sensitive data we have (e.g., payment card info) for essential purposes (completing transactions), so there is no secondary use to limit.
- Right to Opt Out of Profiling (Colorado/Virginia and others): If we engage in profiling in furtherance of decisions that produce legal or similarly significant effects concerning you, you have the right to opt out of such profiling. We do not currently engage in any such profiling of consumers. If that changes, we will update this Policy and honor opt-out requests as required.
- Right of Non-Discrimination / No Retaliation: We will not discriminate against you for exercising any of your privacy rights. This means, for example, we will not deny you goods or services, charge you a different price, or provide a different level or quality of service just because you exercised your rights under these privacy laws. If you are a California consumer, please know that we do not offer any financial incentives in exchange for your personal information that would require a notice and opt-in (e.g., loyalty programs involving personal data sales). If that ever changes, we will provide a compliant notice.
- Right to Appeal (Virginia, Colorado, etc.): If we decline to take action on a rights request you submit (for example, if we deny a request to delete because an exception applies, or we cannot verify your identity), you have the right to appeal our decision. To appeal a decision, please contact us as described below within a reasonable time of our response. We will reconsider your request and the circumstances, and inform you of the outcome of the appeal. If your appeal is denied, we will provide you with an explanation and information about how you may contact the state Attorney General or appropriate regulatory authority to lodge a further complaint.
- Authorized Agent (California): If you are a California resident, you may designate an authorized agent to make requests on your behalf. If you use an authorized agent, we will take steps to verify the agent’s authority (for instance, by requiring a signed written authorization or proof of power of attorney, and also verifying your identity directly unless the agent has power of attorney).
- Notice of Financial Incentive (California): We currently do not offer any financial incentives (such as discounts, rewards, or loyalty programs) in exchange for your personal information. In other words, we do not provide different prices, rates, or quality of goods/services contingent on you sharing your data, apart from typical sales available to all customers. If we introduce a program that offers financial incentives or price differences tied to the collection or use of personal information, we will provide you with a Notice of Financial Incentive explaining the material terms of the program and obtain your opt-in consent as required by law (including how you can opt in, withdraw, or request further information about the incentive).
- Nevada Residents: Nevada law (SB 220) allows Nevada consumers to direct a website operator not to sell certain personal information to third parties. We do not currently sell personal information as defined under Nevada law (which generally covers selling for monetary consideration to be licensed or sold to others). If you are a Nevada resident and would like to submit a request directing us not to sell your personal information, you may contact us at our email or mailing address provided in the Contact Us section below with the subject “Nevada Do Not Sell Request.” We will honor such requests as required by Nevada law.
- California “Shine the Light” Law: Under California’s “Shine the Light” law (Civil Code § 1798.83), California residents may request information about whether we have disclosed certain categories of personal information to third parties for those third parties’ own direct marketing purposes in the previous calendar year. We do not share personal information with unaffiliated third parties for their own direct marketing use without your express consent. If you are a California resident and wish to make a Shine the Light request, please send a request to us using the contact information in Section 11 – Contact Us below. Please include “Shine the Light Request” in your inquiry and provide your contact information. We will provide the required information to you in accordance with California law (typically, we will indicate that we do not engage in such sharing if applicable).
b. How to Exercise Your Rights
You may exercise the rights above by contacting us using one of the following methods:
- Email: Send an email to us at info@newyorkwatchoutlet.com with the subject line “Privacy Rights Request” and let us know which right you wish to exercise (e.g., access, deletion, opt-out of sale/sharing, etc.). Please include sufficient information in your request for us to understand, evaluate, and respond. We may need to request additional information to verify your identity (for instance, providing additional contact info or confirming details of your past interactions with us). We will only use such information for verification purposes.
- Mail: You may send us a written request to the address provided in Contact Us below (Attn: Privacy Team). In your request, please specify your name, the email associated with your interactions with us (if any), and the nature of your request. We will respond via your preferred contact method or, if not specified, via the method by which you contacted us.
- Web Form: Submit your request via our online Privacy Request form on our website located on Do Not Sell or Share My Personal Information page. This form allows you to select the type of privacy request and provide the information we need to process your request efficiently.
For opt-out of sale/sharing requests, you can simply include in your communication that you want to opt out of the sale of your personal information or targeted advertising. You may also broadcast an opt-out preference signal (discussed below) which we will honor as a valid opt-out.
When you make a request, we will confirm receipt of your request within the timeframe required by law (typically within 10–15 days for California residents) and let you know the verification steps we will take. We will then respond to your request within the timeframe required by law (generally within 45 days of receipt of your request). If we need more time (up to an additional 45 days, for a total of 90 days), we will inform you of the reason for the delay and the extension period in writing. Our response will either grant the request or explain the reasons we cannot comply with the request, if applicable. For access requests, we will provide the information in a portable and (if technically feasible) readily usable format, typically electronically. For deletion requests, we will either confirm deletion or explain the basis for denial (and will delete any information not subject to an exception). For correction requests, we will confirm the correction or let you know if we cannot fulfill it. Any disclosures we provide will cover at most the 12-month period preceding our receipt of the request, or as otherwise required by applicable law. We do not usually charge a fee to process or respond to your request, but if your requests are manifestly unfounded or excessive (for example, repetitive requests beyond what the law requires), we may charge a reasonable fee or refuse to act on the request, as permitted by law.
c. Opt-Out Preference Signals (Global Privacy Control)
We honor opt-out preference signals, such as the Global Privacy Control (GPC), that you may enable in your browser as a mechanism to communicate your privacy preference. GPC is a browser or extension setting that notifies websites of your choice to opt out of the sale or sharing of your personal information. If our Site detects a GPC signal from your browser or device, we will treat it as a valid request to opt out of the sale of personal information or sharing for targeted advertising linked to that browser/device. In other words, upon detecting the GPC signal, we will automatically apply the same outcome as if you had submitted an opt-out request through other means. Please note: Opt-out preference signals like GPC apply only to the specific browser or device on which they are enabled and only for the domain in question. If you visit our Site from a different browser or device, or if you clear your cookies, you may need to ensure the GPC signal is set there as well for it to be effective.
We also honor other legally recognized universal opt-out mechanism signals required by state laws. For instance, Colorado’s law requires honoring such signals by July 1, 2024; Connecticut’s by January 1, 2025; and New Jersey’s by July 15, 2025. We comply with these requirements as they become effective.
At this time, Do Not Track (DNT) signals are not uniformly recognized or enforceable, so we do not respond to the older HTTP DNT browser header in any particular way. Many websites, including ours, currently do not respond to “Do Not Track” signals because there is no consensus on what those signals mean. However, as stated above, we do respond to the more recent GPC signals, which are intended to convey specific opt-out choices under privacy laws. If standards for DNT are finalized in the future, we will revisit this policy.
d. Marketing Communications
If you subscribe to our newsletter or promotional emails, you have the right to unsubscribe at any time. You can opt out of receiving marketing emails by clicking the “Unsubscribe” or “Opt-Out” link at the bottom of any promotional email we send. Alternatively, you may contact us at info@newyorkwatchoutlet.com and request to be removed from our mailing list. Please note that even if you opt out of marketing messages, we may still send you transactional or service-related communications, such as order confirmations, shipping notifications, account alerts, or responses to your inquiries, as these are not promotional in nature. If you receive SMS/text messages (for example, order updates or marketing texts) from us (currently we do not plan to send SMS, but if we do), you can opt out by replying “STOP” or following the instructions in the message. Standard messaging rates may apply.
e. Cookie Preferences
As described in the Cookies section, you can control cookies through your browser settings and/or our cookie consent tool. You can also use browser extensions or privacy tools to manage cookies and trackers. For interest-based advertising opt-outs, refer to the industry websites listed above (NAI, DAA opt-out pages). Keep in mind that cookie-based opt-outs must be set on each browser/device and will be cleared if you delete your cookies, so you may need to refresh them periodically.
If you have any trouble exercising your rights or need assistance (for example, due to a disability that makes it difficult to use the stated methods), please contact us and we will do our best to accommodate you with an alternative method.
6. Data Security
We take the security of your personal information seriously. We implement reasonable technical, administrative, and physical safeguards designed to protect your information from unauthorized access, disclosure, alteration, and destruction. These measures include encryption of sensitive information (such as payment data) using SSL/TLS when transmitted, firewalls and intrusion detection systems on our networks, access controls to limit who within our organization can access personal data, and policies to ensure our employees and contractors only access information on a need-to-know basis. We also require our third-party service providers to follow strong security standards and to use the information we share only for authorized purposes.
While we strive to protect your information, no security measure is perfect. The internet is not 100% secure, and we cannot guarantee absolute security of your data. For example, email communications or other transmissions you send us may not be encrypted by the sender; you should take care in deciding what information you send via these channels. We recommend that you use complex and unique passwords for any accounts and logins, and that you guard against unauthorized access to your password and your devices. If you have reason to believe that your interaction with us is no longer secure (for instance, if you feel that your account or information has been compromised), please contact us immediately. We will notify you of any data breach that affects your personal information when required by law, and will act promptly to mitigate any harm.
7. Data Retention
We retain your personal information for as long as necessary to fulfill the purposes we collected it for, as outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. This means, for example:
- We will keep your account information and order history while your account is active or as needed to provide you with services. If you delete your account or request deletion of your data, we will remove or anonymize your information unless it is necessary to retain it for legal or legitimate business purposes.
- Transaction records (such as invoices, payments, and shipping records) are retained as long as necessary for financial reporting, audit, and tax purposes – typically this could be 7 years or more, subject to local regulations.
- Marketing information (like your email address for newsletters) is kept until you opt out or unsubscribe, or if we determine that the information is no longer useful for marketing, whichever comes first. We aim to periodically clean our mailing lists to remove contacts who no longer engage with our communications.
- Analytics data collected via cookies and other trackers is typically retained as long as needed for analysis. For Google Analytics, data retention settings are configured to an industry-standard period (e.g., 14 months) after which user-level and event-level data stored by Google Analytics is deleted. We may still retain aggregated reports (which do not identify individuals) beyond that time.
- Backup and archival copies of your data might be retained for a period of time beyond active use, in accordance with our standard backup procedures. If you request deletion, we will remove your data from active databases, but it may persist in secure backups until those backups reach their expiration and are destroyed. We will not restore or use your data from backups except as needed for disaster recovery or for security integrity checks.
In all cases, when personal information is no longer necessary for the purpose it was collected, and we have no legal obligation to retain it, we will either delete it, anonymize it, or if deletion or anonymization is not feasible (for example, if data is stored in long-term backups), then we will securely store the information and isolate it from further use until deletion is possible. We continuously review the data we hold and erase or anonymize personal information when we no longer have a legitimate reason to keep it.
Retention Schedule by Category
We generally retain each category of personal information as follows:
- Identifiers: Retained for as long as you have an account or ongoing relationship with us, and as needed to provide our services. If you delete your account or request deletion, we delete or anonymize this data unless we are required to retain it for legal obligations (e.g. fraud prevention, tax law).
- Customer Records Information: Retained for as long as necessary to complete transactions and thereafter for record-keeping. For example, order and payment records are generally kept for at least 7 years to comply with accounting, tax, and audit requirements.
- Commercial Information: Retained as part of your order history and our business records. We generally keep purchase history for at least 7 years (or longer if required by law) for warranties, returns, customer service, and analytical purposes.
- Internet or Other Electronic Network Activity: Retained for a shorter period geared toward its purpose. For instance, detailed web analytics data (user-level or device-level) is typically retained about 14 months (as per Google Analytics settings), after which it is deleted or aggregated. Other log data is kept only as long as needed for security monitoring or troubleshooting, unless legal requirements mandate longer retention. Aggregated data that does not identify individuals may be stored longer for trend analysis.
- Geolocation Data: Retained as part of log and analytics data and not stored separately long-term. Coarse location information (e.g. city/region derived from IP) follows the retention of our analytics and web logs (generally short-term, such as the 14-month analytics window), and is not kept longer except in aggregate form. We do not collect or store precise GPS location data.
- Inferences: Retained as long as relevant for personalization and marketing. Inferences and preference profiles are updated continually and removed or obfuscated when the underlying data is deleted or becomes outdated. For example, if you opt out of marketing communications, we will no longer retain or use inferences about your marketing preferences. In general, inferred profiles are kept only while you are an active customer or subscriber and are typically deleted or anonymized after a period of inactivity or when no longer needed for the purpose they were created.
8. Children’s Privacy
Our Site and services are not directed to children under 13 years of age, and we do not knowingly collect personal information from children under 13. If you are under 13, please do not attempt to register an account, make purchases, or send any personal information about yourself to us. In the event that we learn that we have inadvertently collected personal information from a child under 13, we will promptly delete such information from our records.
If you are a parent or guardian and believe that a child under 13 may have provided us with personal information, please contact us immediately using the contact information below. We will work to investigate and address the issue and, if appropriate, delete the information.
We also do not knowingly sell products or services to minors. Users under 18 years of age (or the age of majority in your jurisdiction) should use our Site only with the involvement and consent of a parent or legal guardian. For minors in California under age 16, we do not sell or share their personal information for targeted advertising without affirmative authorization, as stated above. If a user is between 13 and 16 and uses our Site, they should only do so with parental consent, and any request to opt in to data sharing must come from the minor themselves or their parent/guardian as required by law.
9. International Users and Data Transfers
Our business is based in the United States, and the Site is intended for customers in the U.S. If you are visiting or using the Site from outside the U.S., please be aware that your information will be transferred to and processed in the United States (or other jurisdictions where our service providers may be located). The data protection laws of the U.S. and these other jurisdictions may not be as comprehensive or protective as those in your country. However, we will take appropriate measures to protect your personal information in accordance with this Privacy Policy and applicable law. By using our Site or providing us with your information, you acknowledge the transfer of your personal information to the U.S. and the handling of your information as described in this Policy.
If you are located in the European Economic Area (EEA), United Kingdom, Switzerland, or other regions with data transfer restrictions, we will rely on legal bases (such as your consent or contractual necessity) to transfer your data. We may also use approved mechanisms such as standard contractual clauses for any necessary transfers of EU/UK personal data to the U.S. Our intent is to treat all personal data with care and respect, regardless of origin. If you have questions about international data transfer or require more information about the safeguards in place, you can contact us as detailed below.
10. Third-Party Links and Services
Our Site may include links to third-party websites or integrate third-party services (such as social media widgets, payment gateways, or embedded content). If you click those links or interact with those services, you may be providing information (including personal information) directly to the third parties. This Privacy Policy does not apply to any third-party websites or services that are not under our control. We are not responsible for the privacy practices of those third parties. We encourage you to read the privacy policies of every website you visit or service you use. For example, if you navigate to our store on a third-party marketplace (like eBay or Amazon) via a link, that activity is governed by the privacy policy of the respective marketplace. Similarly, any social media features on our Site (like an Instagram feed or Facebook “like” button) are governed by the privacy policy of the respective platform.
11. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal information, please contact us using the information below. We will respond as promptly as possible.
Operator: Double M Merchandise Inc. (d/b/a New York Watch Outlet)
Business Address: 888C 8th Avenue, Unit 122, New York, NY 10019, USA
Email: info@newyorkwatchoutlet.com
Phone: (332) 244-8404
You may contact us by mail or email for any reason, including to exercise your privacy rights, ask questions about our data practices, or request a copy of this Privacy Policy in an alternative format. For privacy-specific requests, including requests under California, Colorado, Virginia, or other state laws, please include “Privacy Request” in the subject line of your email or letter, and describe the nature of your request in detail (see Your Rights and Choices above for guidance).
We value your privacy and will do our best to address any concerns. If you feel we have not adequately resolved an issue, you also have the right to contact your state’s Attorney General or privacy regulatory authority. For example, California residents can reach out to the California Attorney General, and Virginia residents to the Virginia Attorney General’s office, etc. We would appreciate the chance to address your concerns first, so please do not hesitate to contact us directly.
Thank you for reading our Privacy Policy. We are dedicated to protecting your personal information and providing a safe and enjoyable shopping experience.
