Privacy Policy

We collect a fair amount of information, and we would rather say so plainly than bury it. Here is all of it.

Who we are

Zach Does Watches is a trade name of Canning Wholesale, LLC. In this policy, we and us mean Canning Wholesale, LLC. You means anyone who visits this website, asks us for an estimate, sells us a watch, or buys one from us. We buy and sell in the United States only.

The short version

If you ask us what your watch is worth, we need to know who you are, how to reach you, and what the watch is, including photographs of it. If you sell us a watch, we need enough information to pay you and to satisfy the rules that apply to a dealer buying high-value goods, which includes verifying your identity and screening the watch against stolen-property records. If you buy from us, we need to take payment and ship an expensive object to a real person at a real address.

We do not sell your personal information. We do advertise on Google and Meta, and under California law the way those advertising tools work is legally treated as sharing your information even though no money changes hands. We explain that below and tell you how to opt out.

We never see or store your card number. Payment happens on our processor's own hosted checkout.

What we collect when you browse

Our hosting provider records standard web request information: your IP address, browser and device type, the pages you requested, referring URLs, and timestamps. This is ordinary server logging, and we use it to keep the site running and to investigate abuse.

We use Google Analytics, Google Search Console and Google Tag Manager, to understand how people find and use the site: which pages get read, which ones people leave, and where visitors came from. To do that it sets cookies in your browser and collects your IP address, device and browser type, approximate location derived from your IP address, and the pages you viewed. We do not use it to identify you personally, and we do not upload your name, email address, or phone number into it.

Your choices about analytics

• Google publishes a browser add-on that blocks Google Analytics on every site you visit, at tools.google.com/dlpage/gaoptout
• Most browsers let you block or delete cookies in their settings
• Most browsers offer a private or incognito mode, which discards cookies when you close the window

Blocking analytics does not break the site and we will not treat you differently for it. Separately, we use cookies that are necessary for the site to work, such as keeping you signed in and protecting our forms from automated abuse. Those cannot be turned off without breaking the thing they support.

What we collect when you ask for an estimate

• Your name, email address, phone number, and any payment information you share with us outside of a credit card processor
• What you tell us about the watch: brand, model, reference number, serial number, condition, age, and what came with it
• Photographs you upload
• Anything else you choose to write in the form

We strip EXIF metadata from most photographs when you use our website forms you upload images to send to us before we store it. Photographs taken on a phone frequently carry the GPS coordinates of where they were taken, which for a watch photo is usually someone's home. We remove that rather than keep it.

What we collect when you sell us a watch

Everything above, plus what a transaction of this size requires.

• Identity verification information, which may include a government-issued photo ID
• Your bank account details, so we can wire you the money
• Your electronic signature on the purchase agreement
• The watch's serial number, which we screen as described below
• For transactions above certain thresholds, the information the federal government requires us to report on IRS and FinCEN Form 8300

What we collect when you buy a watch from us

• Account information: your name, email address, and password, stored hashed and never in plain text
• Your shipping address and order history
• Payment confirmation from our processor

We do not receive, handle, or store your card number, security code, or full bank credentials for card payments. Those go directly to our payment processor on their own hosted checkout page unless you are paying by wire or ACH. With cards we also receive a confirmation and the last four digits.

Why we use it

• To give you an estimate and to talk to you about it
• To complete a purchase or sale, ship the watch, and pay or charge the right person
• To verify identity and screen against stolen-property and sanctions records
• To keep the records the law requires a dealer in high-value goods to keep
• To send you transactional messages: offers, agreements, receipts, shipping notices, password resets
• To send you marketing messages, if you asked for them
• To advertise, as described below
• To protect the site and the business against fraud and abuse
• To improve how we price and how the site works

Screening, and why we do it

Before we pay anyone for a watch, we run three checks and we record that we ran them. We check the serial number against stolen-watch registries. We check it against watches we have handled before. On larger transactions we screen the other party against the United States Treasury Department's OFAC sanctions lists.

This means a serial number you give us is disclosed to a screening registry. We think this is important to tell you about because it is also the reason a watch you buy from us is not somebody else's stolen property.

Who we share it with

We share information with companies that run parts of our business, only for that purpose, and under contract. We are naming them rather than describing them generically.

Running the platform

• Vercel hosts the website and produces the request logs described above
• Supabase hosts the database that holds customer and transaction records
• Cloudflare provides network security, bot protection on our forms, and object storage for photographs and documents
• Sentry receives error reports, which can incidentally include request data

Measurement

• Google Analytics and Google Tag Manager receive the website usage information described above
• Google Search Console receives no personal information. It reports how our pages perform in search results in aggregate

Communication

• Resend sends transactional email: offers, agreements, receipts, shipping notices
• Klaviyo sends marketing email and text messages, and holds the contact profile of anyone subscribed

Transactions

• Stripe processes payments and computes sales tax
• SignWell generates, sends, and stores the signed purchase agreement
• IFS Inforsure and its carrier create the insured shipping label and carry the watch

Screening and advertising

• Stolen-watch registries, for serial numbers
• Sanctions screening services, for counterparty checks on larger transactions
• Google and Meta, as described in the advertising section below

Legal and safety

We disclose information when the law requires it: to tax authorities, including Form 8300 filings; in response to a valid subpoena, warrant, or court order; to law enforcement where a watch appears to be stolen; and where necessary to protect our rights, our customers, or someone's safety.

If the business changes hands

If Canning Wholesale, LLC is sold, merged, or reorganized, customer records would transfer as part of that business. Any buyer would be bound by this policy for information collected under it, or would have to give you notice and a choice before changing it.

Advertising, stated plainly

We advertise on Google and on Meta's platforms, which include Facebook and Instagram. Doing that involves placing advertising tags on this site and, in some cases, providing customer email addresses to those platforms so they can match them against their own users.

We do not receive money for this information and we are not selling your information. California's privacy law defines sharing to include exactly this kind of disclosure for cross-context behavioral advertising, whether or not anyone pays for it. So under that definition, when these tags are live, we share personal information for advertising.

To opt out, email zach@ZachDoesWatches.com with the subject line Opt out of ad sharing, from the address you want opted out. We will honor it within 15 business days and will not make you create an account to do it.

Artificial intelligence

We use automated systems and processes to analyze your photographs and in some cases to set the price we offer you in the estimating process.

• Photographs you upload may be processed by an AI vision service to help identify the model, reference, and condition
• The inputs behind offers we have made may be used to train and improve an internal pricing model
• A human will approve every price before it is shown to you. We are not going to let a machine make you an offer unreviewed, because on an object worth this much a wrong number is expensive for both of us

How long we keep it

We keep records for seven years, including quote requests that never became a transaction and the photographs attached to them. Seven years is the retention period for tax records. Identity and Form 8300 records carry their own federal schedule of at least five years. Rather than run several clocks and get one of them wrong, we keep to the longest.

That means we hold photographs of your watch for longer than the conversation lasted. It is a deliberate choice for record-keeping consistency, not an oversight, and you can ask us to delete them. Where the law does not require us to keep a specific record, we will.

Your choices and your rights

Some states give residents formal privacy rights and most do not. Rather than give a Georgia customer fewer rights than a California one, we extend the same rights to everyone in the United States, regardless of where you live. You can ask us to:

• Tell you what we hold about you and where it came from
• Correct anything that is wrong
• Delete what we hold, except records we are legally required to keep, and we will tell you specifically what we kept and why
• Give you a copy in a portable format
• Stop marketing to you
• Stop sharing your information for advertising

To ask, email zach@ZachDoesWatches.com or write to the mailing address below. We respond within 45 days, and if we need longer we will tell you why before that deadline passes. We will not charge you and we will not treat you worse for asking. We will need to verify you are who you say you are first, because handing someone else's records to the wrong person is the failure this process exists to prevent.

Every marketing email has an unsubscribe link at the bottom. Reply STOP to any text message. Transactional messages about a transaction you are actually in, such as an offer, an agreement, or a shipping notice, are not marketing and do not stop when you unsubscribe.

How we protect it

• Encrypted in transit and at rest
• Database access is default-deny and enforced at the database itself rather than only in the application, so one bug in a page cannot expose another customer's records
• Photographs and documents are stored privately and reachable only through short-lived signed links
• Card data never reaches our systems
• Two-factor authentication and encryption on the accounts that administer the platform

No system is perfectly secure and we are not going to claim otherwise. If a breach affects your information, we will notify you as the law requires and tell you what happened.

Children

This site is not directed to children and we do not knowingly collect information from anyone under 18. If you believe a child has given us information, email us and we will delete it.

United States only

We operate in the United States and this site is intended for United States users. If you access it from elsewhere, your information will be processed in the United States under United States law.

Changes to this policy

If we change this policy we will update the last updated date above. If the change is significant, such as a new category of information, a new way we share it we will say so prominently here.

How to reach us

Zach Does Watches is a trade name of Canning Wholesale, LLC. Questions, requests, and complaints all go to the same place, and a person reads them.

• Email: zach@ZachDoesWatches.com
• Phone: 404-590-5059
• Mail: Canning Wholesale, LLC, 2225 Old Milton Parkway, Suite 200, Alpharetta, GA 30009