Privacy policy
SerialProof collects only the data the registry requires – serial numbers, registration dates and service records. A certificate entry describes a watch, not its owner.
Controller
The controller of personal data processed on this website and in the SerialProof registry is Abarel Sp. z o.o., ul. Spasowskiego 2-15, 31-139 Kraków, Poland. For any matter concerning your data, write to hello@serialproof.ch.
What the registry records
A certificate entry describes a watch, not its owner. The registry holds the certificate identifier, the serial or reference number, the model designation, the date of registration, the country of activation, the channel through which activation was made, and any service events recorded by the issuing brand. None of these identifies a person. The registry does not record the owner's name, contact details or payment information.
The issuing brand has access to the records of its own watches – the certificate, its activation and its service history. It does not see who views them.
Activation
To activate a certificate, you enter the number engraved on the caseback. We record the activation date on our servers, along with the country and activation channel. Where activation takes place at a point of sale, the retailer's code is recorded – it identifies the boutique, not you.
Security
We process IP addresses solely to protect the registry and to understand traffic in aggregate – to limit repeated attempts, to block automated abuse, and to keep verification honest. Server logs are retained for no longer than 180 days and are then deleted. They are never used for marketing or profiling, and never leave our infrastructure.
No tracking
This website sets no advertising cookies and uses no third-party analytics. Only strictly necessary cookies are used – for example, to keep a brand user signed in. Verification requires no account and leaves no marketing trail. We do not trade in attention.
Hosting
The website and the registry are hosted in Switzerland.
Data protection
The registry is operated under the European Union's General Data Protection Regulation. Switzerland holds an adequacy decision from the European Commission.
A permanent registry, without personal data
Certificate entries are permanent by design – that is the purpose of a provenance registry. They can be permanent because they contain no personal data of the watch's owner. Your rights over your personal data are therefore never in conflict with the permanence of the record.
Brand accounts
Where personnel of a participating brand hold accounts in the registry, their business contact details (name, work email address) are processed to operate the service under the agreement between Abarel Sp. z o.o. and the brand.
Legal bases
We rely on our legitimate interest (Article 6(1)(f) GDPR) to secure the registry and prevent abuse, and on the performance of a contract (Article 6(1)(b) GDPR) to operate brand accounts.
Your rights
Under the General Data Protection Regulation, you may request access to your data, its rectification or erasure, restriction of processing, and data portability, and you may object to processing based on legitimate interest. Write to hello@serialproof.ch. You may also lodge a complaint with the President of the Personal Data Protection Office (PUODO) in Warsaw, or with your local supervisory authority.
Changes
This notice may be revised as the registry evolves. Last updated: 1 August 2026.