1. Who we are and what this policy covers
Locke’s is a jewellery and watch business within the GTA World roleplay community. This policy covers the actual information processed when you browse this website, create a Locke’s account, save pieces, contact the team or place an in-game order. In-game names, telephone numbers, purchases and locations should not be confused with real-world identity or financial information. Technical information about a visit can still relate to the person using the website.
The Locke’s website owner is responsible for the information held by the store. You can reach the team through the Contact Us page linked below; please mark your message “Privacy request”. This notice describes our practices, rather than asking you to consent to every use of your information simply by browsing.
2. Information you provide
- Account details: your chosen username, display name, account identifier and account creation date. Passwords and recovery codes are stored as hashes, not readable originals.
- Saved pieces: product identifiers, bag quantities, preferred sizes or fit, and wishlist selections associated with your account or guest browser identifier.
- Enquiries and appointment requests: the name, contact details, topic, message and any product reference you submit, together with the time and handling status of the request.
- Orders: your account identifier, order number, name, telephone/contact details, collection notes, products, sizes, quantities, prices and totals. We also record payment and collection progress, payment references, timestamps and order-notification read status.
- Staff records: authorised staff access and private order-handling notes or read status, where relevant.
Use your appropriate in-game details for roleplay shopping. Do not send real bank/card details, government identification, sensitive health information, passwords or recovery codes in an enquiry or collection note. If you voluntarily include other personal information in a message, that information becomes part of the enquiry record.
3. Information received automatically or from other services
When your browser connects, our hosting, security, font and image providers receive the connection information needed to deliver their content. This can include an IP address, browser/device information, requested address and request time. Cloudflare also processes technical signals to help distinguish legitimate visitors from automated abuse.
The store uses hashed identifiers derived from connection information and account names for short-lived request limits. A hash is a pseudonymous identifier, not a guarantee of anonymity. Fleeca provides payment identifiers and payment-status information so we can reconcile an order. We receive the information you enter directly and these service-generated records; we do not obtain your GTA World password from Fleeca.
4. Why we use information
- To create and protect your account, sign you in and support account recovery.
- To remember your bag, wishlist, comparison choices and preferred sizes.
- To respond to enquiries, discuss products and arrange appointments or collection.
- To create orders, verify Fleeca payment status, keep receipts and show order updates.
- To let authorised staff handle orders and customer requests.
- To prevent spam, repeated payment requests, fraud and unauthorised access, and to diagnose faults and recover saved store information.
Where data-protection law requires a lawful basis, account, enquiry and order handling relies on providing the service you request or taking steps at your request. Essential security, troubleshooting and record integrity rely on legitimate interests in running a safe store. Any optional consent-based activity requires a separate choice. We may also retain or disclose information where an applicable legal obligation requires it. We do not use this notice as blanket marketing consent.
5. Fleeca payments and sandbox orders
Payment authorisation takes place on the GTA World Fleeca banking service, separately from your Locke’s account. We send the order total, payment mode and a description containing the Locke’s order number to create the payment link. Locke’s stores the resulting payment identifier/link and status needed to confirm payment and keep the order record.
Locke’s does not collect your Fleeca login password, bank login credentials or real payment-card details through checkout. Information you give directly to the banking service is handled by that service under its own terms and privacy arrangements. A bank return link alone does not confirm payment: the store checks payment information before showing an order as paid.
When checkout is labelled sandbox, the payment is a test and no in-game money moves. Test orders and their contact details are still stored as order records, so use test or suitable in-game information.
6. Cookies and storage on your device
The store uses the following functional storage:
- lockes_session: a secure sign-in cookie with a lifetime of up to 30 days. Signing out invalidates the current store session and removes the cookie.
- lockes_visitor: a random guest identifier used to associate saved items and enquiries with a browser, with a lifetime of up to 180 days when set or renewed. Guest bag/wishlist items can be transferred to your account when you sign in.
- lockes:compare: browser local storage containing selected product identifiers for watch comparisons. It stays until you change/remove the selection or clear the website’s local storage.
- lockes-checkout-request: browser session storage containing a random checkout request identifier to reduce duplicate order creation. It is cleared after successful hand-off to payment and normally ends with the tab’s session.
Cloudflare security features may also use security cookies or verification tokens, as explained in Cloudflare’s privacy information below. These are separate from advertising cookies.
You can delete or block cookies and local storage in your browser. This may sign you out, lose access to guest selections or prevent account, checkout or verification features from working. Clearing a cookie or local storage does not delete an account, enquiry or order already held on the server.
7. Hosting, security and externally loaded content
Cloudflare provides the website’s hosting, database and file storage, traffic delivery and abuse protection. Cloudflare Turnstile is used for verification on account and enquiry actions; the verification token and connecting IP address are sent to Cloudflare for validation.
Some typefaces load from Google Fonts, and some photographs or other assets load from external image hosts. Your browser connects directly to those providers, which receive the connection information needed to serve the requested file. This includes any reference-image host used on a particular page.
Our store application does not include Google Analytics or advertising pixels. A font or security request is still a disclosure of technical connection information to the relevant provider. Provider privacy links are included below.
8. Who can access information and when we share it
The website owner and authorised staff can access information needed for store administration and customer service. Staff order access includes customer-supplied contact details and collection notes. Account credentials are not displayed in the order screens. Infrastructure providers process information as needed to operate and secure the website, and Fleeca handles the separate payment process described above.
We do not sell or rent customer information, or provide account and order records to advertisers. We may disclose relevant information when required by applicable law, to investigate abuse or a security incident, or where you specifically ask us to share it. We do not automatically send your customer details to real-world watch or jewellery manufacturers.
Public product pages and link previews contain catalogue details, not your private bag, wishlist, account or order information.
9. Where information is processed
Cloudflare, Google and other externally loaded service providers operate internationally. Website requests and information processed by these providers may be handled in countries different from your own. The store does not promise that all information stays in one country.
The provider notices below explain their processing locations and transfer arrangements. If you need information about a particular provider or an international transfer affecting your information, contact the Locke’s website owner. Any applicable data-protection requirements for the store’s use of those services continue to apply.
10. How long records are kept
The current store does not automatically delete customer accounts, saved-item records, enquiries or orders after a fixed period. These records remain until reviewed and removed by the website owner, subject to any need to retain information for an open order, customer service, a dispute, security investigation or an applicable legal obligation. You can request a review or deletion through Contact Us. Cookie expiry does not itself remove the associated server record.
Sign-in sessions stop being valid after their expiry, and security request-limit records have short expiry windows. Expired records are removed during periodic maintenance; expiry and physical deletion are not necessarily simultaneous.
Administrative changes and removed enquiries may also remain in recoverable history, recently deleted records or backups. Routine maintenance prunes eligible history older than 180 days and eligible backups older than 90 days, while preserving minimum/recovery copies. Some retained recovery copies therefore last longer. Deleting something from a staff list is not the same as permanently erasing it. A privacy request must consider these copies as well as the active record.
When reviewing retention, we consider whether the original purpose still exists, outstanding purchases or complaints, the sensitivity of the information, and whether a smaller or anonymised record would be sufficient.
11. Your choices, requests and right to object
You can browse the public catalogue without creating an account. An account is needed for online checkout. If you do not provide the required enquiry or order details, we may be unable to reply or complete the requested service. Optional collection notes are your choice.
Your privacy rights depend on the laws that apply in your country or region. Depending on those laws, you may request access or a copy, correction, deletion, restriction or portability of your information. You may object to processing based on legitimate interests and withdraw any optional consent without affecting earlier lawful processing. These rights are subject to applicable conditions; tell us your concern so it can be reviewed.
Use Contact Us and identify the account or order concerned. We may ask for proportionate verification to prevent disclosure to the wrong person. Never send a password or recovery code. There is currently no self-service account-deletion button. Requests are handled by the website owner; signing out or removing a wishlist item does not close your account.
If information must be retained for a valid reason, we will explain the reason and the scope of any limitation. Where applicable, you can raise a complaint with the privacy, data-protection or consumer-protection authority responsible for your country or region. The international directory below can help you find a privacy authority; check its official website for its remit and complaint procedure. You can contact the Locke’s website owner about your information wherever you live, including if your location is not listed in the directory.
12. Security and automated checks
The site uses HTTPS, hashed passwords and recovery codes, protected session cookies, access checks and request limits. These measures reduce risk, but no internet service or device can be guaranteed completely secure. Use a unique password, keep your recovery code private and sign out on shared devices. Contact the team if you suspect someone has accessed your account.
Automated security checks can temporarily limit or reject a request, and payment-status checks can keep an order awaiting confirmation. If a check appears incorrect, contact the team for review. The store does not perform credit scoring or automated advertising profiles.
13. Marketing, community services and younger visitors
Creating an account, making an enquiry or placing an order does not subscribe you to a marketing mailing list. The current website does not operate a newsletter subscription service. Order and enquiry communications are for handling the service you requested. Any future optional marketing will need its own appropriate notice and choice.
Use of this roleplay store is intended for people eligible to use GTA World under that community’s rules. We do not ask for a real date of birth or identity documents to browse the catalogue. If you believe a child has supplied personal information inappropriately, contact the website owner so the record can be reviewed.
14. Other websites and branded sections
Links to Fleeca, GTA World, Facebrowser or other websites take you to separately operated services. Their own privacy arrangements apply to information you provide there. We cannot control their cookies, account systems or handling of messages.
The Crowex, Patriche Phelion and other branded areas are parts of this Locke’s website. Their catalogue names and styling do not mean a real-world manufacturer receives your account information or operates an embedded shop here. Externally hosted images and fonts remain subject to the technical connections described above.
15. Changes to this notice
We will update this page when the website’s data practices change. The date above identifies the latest revision. If a change calls for an additional notice or a separate choice, we will provide it through the relevant website feature. This policy does not replace any rights you have under applicable law.