Privacy
Last updated 2 October 2026.
This site is run by me, Ewan Wills. I trade as Ewan Wills Product Development, and I am the "data controller" for everything described here: the shop, the EWatch pre-orders, the mailing list and the contact forms.
Ewan Wills Product Development
3/1 Meadowbank Crescent, Edinburgh EH8 7AJ
contact@ewanwills.co.uk
There are no analytics and no advertising trackers on this site.
EWatch Cloud (ewatch.cloud) has its own privacy notice, because it holds different things.
What I collect, why, and how long I keep it
When you order or pre-order
Stripe takes the payment, so I never see your card number. Stripe passes me your name, email address, delivery address and what you bought. I use them to send your order, email you about it, deal with returns and faults, and contact you if there is ever a safety problem with the product. If you arrived through someone's affiliate link, their code is saved with the order so I can credit them.
Legal basis: the contract between us, and my legal duties to keep tax records and to be able to trace and recall products.
Kept for six years after the end of the tax year of your order, then deleted. That is how long tax and product-liability records need to be kept.
When you pre-order an EWatch
The same as an order, held for longer before anything ships. I will also email you about certification progress and delivery dates, because the pre-order terms promise that.
When you back EWatch on Kickstarter
Kickstarter collects your pledge and passes me your name, email, pledge and, through the backer survey, your delivery address. I use them only to deliver your reward and keep you updated on the project. I do not add backers to any other mailing list. Kickstarter is a separate controller with its own privacy policy.
Kept for six years after the end of the tax year in which your reward ships.
When you join the mailing list or ask to be told about stock
Your email address, what you signed up for (which EWatch, or the EWatch Cloud waitlist), the date, and an affiliate code if there was one. I email you news about EWatch and the other things I make: stock, certification progress, launches. A few emails a year, not a weekly newsletter.
Legal basis: your consent. Every email has an unsubscribe link.
Kept until you unsubscribe. If an address bounces, or I have not emailed the list for two years, I delete it.
When you use a contact or custom-order form
Whatever you type, plus any image you attach, is emailed to me so I can reply. Images are also saved on the server.
Legal basis: my legitimate interest in answering enquiries, or steps towards a contract if you are asking for a quote.
Kept for two years after our last message, unless it turns into a project or an order, in which case it is kept with that record.
If you are a business contact
If we work together, or I write to you about press coverage or a review, I keep your name, work email and our correspondence. For press and creator contacts I only use an address you have published for that purpose, and I note where I found it.
Legal basis: legitimate interests. Tell me to stop and I will.
Security and spam
The forms use hCaptcha to check you are a person. The server holds your IP address in memory for about ten minutes after you send a form, to stop anyone flooding it.
Legal basis: legitimate interests in keeping the site secure.
Cookies and storage on your device
The site sets no cookies of its own for tracking or advertising.
- Theme. Your light or dark choice is stored in your browser and never sent to me.
- hCaptcha sets its own cookies when a form loads its spam check. They are there for security.
- Stripe sets its own cookies on its checkout page, for fraud prevention.
- Affiliate links. If you arrive through a link like ewanwills.co.uk/r/tom, the site asks whether it can set one cookie,
ew_ref. It holds the code (tom) and nothing else, lasts 30 days, and lets me credit the person who sent you if you order later. Say no and nothing is stored; the site works the same.
The EWatch page embeds a YouTube video in privacy-enhanced mode. YouTube stores nothing until you press play.
Who else handles your data
| Who | What for | Where |
|---|---|---|
| Stripe | Card payments, fraud checks | Ireland and the USA |
| Zoho | Email (contact@ewanwills.co.uk) | EU |
| Vultr | Hosting the site and its database | London, UK |
| hCaptcha (Intuition Machines) | Spam protection on forms | USA |
| Google (YouTube) | The embedded video, only when played | USA |
| Royal Mail or another courier | Delivering your order | UK |
| Kickstarter | Running the campaign (they pass data to me, not the other way) | USA |
Where data goes to the USA, it goes to companies certified under the UK extension to the EU-US Data Privacy Framework, or under the UK's standard international data transfer clauses.
I do not sell your data, and nobody gets it for their own marketing.
Your rights
You can ask me to:
- send you a copy of what I hold about you;
- correct it;
- delete it;
- stop or limit what I do with it, including any marketing;
- give you your data in a form you can take elsewhere.
Where I rely on consent you can withdraw it at any time. Email contact@ewanwills.co.uk. I will reply within one month, and it costs nothing.
If you are unhappy
Tell me first: email contact@ewanwills.co.uk with "Data protection complaint" in the subject. I will acknowledge it within 30 days, look into it and tell you the outcome.
You can also complain to the UK regulator, the Information Commission (ico.org.uk, 0303 123 1113). You do not have to come to me first, though it is usually quicker.
Changes
If what the site collects changes, this page changes first, and the date at the top changes with it.