Montre D’or Private Limited
Website: https://www.montredor.com
Last Updated: 28 October 2026
Montre D’or Private Limited (“Montre D’or”, “we”, “us” or “our”) respects the privacy of our customers and is committed to the responsible collection, use, disclosure, storage and protection of personal information.
We operate a Singapore-based e-commerce business specialising in luxury timepieces, including pre-owned and vintage watches.
As a licensed secondhand goods dealer, we are subject to the applicable provisions of the Secondhand Goods Dealers Act 2007, the Secondhand Goods Dealers Rules and Singapore's Personal Data Protection Act 2012 (“PDPA”).
To facilitate customer identity verification and assist with our regulatory compliance obligations, we use Didit, a third-party digital identity-verification service.
This Privacy Policy explains what information we collect, how Didit processes information on our behalf, why verification may be required, how information is protected, when it may be disclosed and how long it is retained.
This policy applies to personal information collected through our website, checkout processes, identity-verification workflows, customer communications and related business activities.
Depending on the nature of your transaction and the applicable legal requirements, we may collect or process the following categories of personal information.
The identification information requested may differ depending on your nationality, identification documents, transaction type and the applicable verification requirements.
We do not necessarily require every category of identification information from every customer.
Where you are requested to complete verification through Didit, additional information may be collected or generated depending on the verification features enabled.
This may include:
Not all verification processes require biometric information or facial recognition.
Where applicable, Didit processes the necessary verification materials to perform the identity checks requested by Montre D’or.
The information available to Montre D’or may include extracted identity particulars, verification results, reports and supporting evidence, depending on the configured service and our access permissions.
We may also collect:
Our e-commerce platform, identity-verification provider and supporting service providers may process technical information, including:
This information is processed for relevant operational, security, fraud-prevention and service-delivery purposes.
Personal information may be collected directly or indirectly through the following channels.
Our website operates using the Ecwid e-commerce platform.
When you make a purchase, we may collect information required to process the transaction, confirm your order, arrange payment and fulfil delivery.
Montre D’or uses Didit to collect and verify customer identification information.
Where identity verification is required, you may be directed to a Didit-powered verification interface during or following the order process.
You may be required to submit identification particulars, present an identification document or complete other verification steps supported by the configured workflow.
Didit processes the submitted information and makes relevant verification results or records available to Montre D’or.
Additional information may be collected when you contact us through email, customer service enquiries or other communication channels concerning your order.
We seek to limit the information collected to what is necessary for the purposes described in this policy or otherwise permitted under applicable law.
Montre D’or is a licensed secondhand goods dealer regulated by the Singapore Police Force (“SPF”).
Under the Secondhand Goods Dealers Act 2007 and the Secondhand Goods Dealers Rules, prescribed records must be maintained and identification checks carried out for transactions to which those obligations apply.
For applicable secondhand watch transactions, prescribed customer particulars include:
These particulars are collected to support our statutory record-keeping, identification verification and regulatory compliance obligations.
Certain secondhand watch transactions below S$1,000 are exempt from specified identification-checking, record-keeping and screening requirements under the Secondhand Goods Dealers (Watches — Exemption) Order 2023.
Accordingly, we will not treat identification collection as legally mandatory solely because a customer purchases a watch where the applicable exemption removes that obligation.
We may nevertheless request information where independently necessary and justified for another legitimate purpose, such as preventing fraud or protecting the security of a transaction, subject to applicable data protection requirements.
For transactions requiring inspection of original identification documents, digital verification through Didit is intended to assist our verification process but does not automatically replace any separate statutory obligation to inspect original documents.
We may arrange additional verification where necessary to comply with applicable requirements.
Montre D’or engages Didit as an external identity-verification service provider.
We use Didit to assist with:
We do not use Didit to collect customer identification information for promotional advertising.
Montre D’or determines the principal business purposes for which customer identity verification is requested and remains responsible for its obligations under applicable data protection law.
Didit generally acts as a data processor or service provider when carrying out identity-verification services on our behalf.
Didit may also act independently for certain limited purposes identified in its own privacy notices, including platform security, abuse prevention, legal compliance, audit records and other permitted activities.
Information submitted through the Didit verification interface may be processed on Didit's systems rather than directly within the Ecwid checkout interface.
Relevant identity particulars, verification outcomes and supporting records may subsequently be made available to Montre D’or through Didit's business console, reports or authorised system integrations.
We may retain information received from Didit in internal business records where necessary for lawful transaction administration, statutory record-keeping or other legitimate purposes.
Didit may use automated technology to assess identification documents, compare information, detect inconsistencies or evaluate verification signals.
Depending on the verification configuration, certain submissions may be referred for additional review.
A verification result may be used by Montre D’or to determine whether additional information or verification is necessary before completing a transaction.
A failed or incomplete verification may result in an order being delayed, subject to additional review or unable to proceed where legal or legitimate verification requirements cannot be satisfied.
Customers may contact us if they believe that a verification result is inaccurate or if they require assistance.
Didit maintains its own privacy documentation describing the processing of verification information, including any biometric information.
Didit's published practices may include certain uses of anonymised or pseudonymised verification-related information for service improvement or model development, subject to applicable law, contractual arrangements and the customer's organisational settings.
Montre D’or does not use customer identification information for its own marketing or advertising activities.
The additional processing undertaken by Didit is governed by applicable contractual arrangements and Didit's published privacy notices.
Customers may refer to:
Didit Privacy Policy:
https://didit.me/terms/privacy-policy/
Didit Verification Privacy Notice:
https://didit.me/terms/verification-privacy-notice/
Didit Biometric Data Retention and Destruction Policy:
https://didit.me/terms/biometric-data-policy/
These documents supplement, but do not replace, Montre D’or's responsibilities under this Privacy Policy.
Where consent is required under the PDPA or other applicable law, we will seek the necessary consent before collecting, using or disclosing personal information.
In some circumstances, personal information must be collected or recorded to comply with legal and regulatory obligations.
Where collection, use or disclosure is required or authorised by law, we may process the relevant information without separately obtaining consent to the extent permitted by applicable law.
If a Didit verification workflow requires document images, facial recognition or other biometric processing, the relevant processing will be explained through applicable notices, and consent will be obtained where legally required.
Customers may decline to provide information or participate in processing that is based on consent, subject to the consequences of that decision.
Where required identification information or verification cannot be provided, we may be unable to complete the relevant transaction.
Withdrawal of consent does not automatically invalidate prior lawful processing or remove obligations to retain prescribed statutory records.
We use personal information for purposes reasonably necessary to operate our business, complete transactions, protect customers and comply with applicable laws.
These purposes include:
We do not repurpose identification information collected specifically for statutory compliance for unrelated promotional marketing.
Montre D’or recognises that government-issued identification numbers, identity-document images and biometric information require careful handling.
We are committed to maintaining reasonable security arrangements appropriate to the sensitivity of the information involved.
Personal information may be held within our e-commerce platform, our Didit verification account and authorised internal business records.
According to Didit's published security documentation, its identity-verification platform uses technical and organisational safeguards including:
These are measures reported by Didit for its platform and do not necessarily describe the security controls of our separate internal record systems.
Montre D’or is responsible for implementing reasonable safeguards over the information in its possession or control, including information accessed through service providers or retained in internal records.
Such safeguards should address unauthorised access, improper disclosure, modification, loss, misuse and inappropriate retention of personal information.
Access to personal information should be limited to authorised personnel or service providers with a legitimate need to handle it.
We will review and improve relevant arrangements where necessary to meet applicable data protection obligations.
No electronic storage or transmission system can be guaranteed to be entirely free from security risks.
Montre D’or does not sell customer personal information to data brokers or use government-issued identification information for promotional advertising.
We may disclose relevant personal information where necessary for the purposes identified in this policy, including to the following recipients.
Information may be disclosed to or processed by Didit and its authorised subprocessors to perform the relevant identity-verification services.
Customer and transaction information may be processed by Ecwid and relevant service providers to facilitate shopping-cart functionality, order management and the operation of our website.
Relevant transaction, contact and delivery information may be shared with payment processors, courier companies and logistics providers where necessary to fulfil orders.
Government-issued identification particulars collected for regulatory purposes will not ordinarily be shared with such providers unless necessary and lawfully justified.
Where required or permitted by applicable law, we may disclose prescribed records or relevant personal information to:
Information may be disclosed to professional advisers, accountants, auditors or legal representatives where necessary and permitted by law.
We seek to limit disclosures to information relevant to the specific purpose.
Our website and identity-verification services may involve the processing or storage of personal information outside Singapore.
According to Didit's published documentation, its verification information is processed and stored within the European Union by default, using infrastructure located in Ireland.
The precise processing arrangements may depend on the service configuration, applicable contractual terms and provider arrangements.
Ecwid and other third-party service providers may also process information outside Singapore.
Where personal information is transferred overseas, Montre D’or is responsible for complying with the PDPA's applicable transfer limitation requirements, including taking appropriate steps to ensure a comparable standard of protection unless a legally permitted exception applies.
International processing does not remove our responsibility for personal information under our possession or control.
We retain personal information only for as long as it is necessary for the purposes for which it was collected, or as required or permitted for legal or business purposes.
Under section 10(3) of the Secondhand Goods Dealers Act 2007, prescribed secondhand goods transaction records must be retained for at least five years from the end of the financial year in which the relevant transaction or operation was completed.
Where this obligation applies, Montre D’or will retain the prescribed customer particulars and transaction records for at least the applicable statutory period.
Didit provides configurable retention settings for verification sessions and related information.
The length of time for which Didit retains verification information depends on the applicable retention configuration, contractual arrangements and legal requirements.
The retention period for information held by Didit is not necessarily identical to the statutory retention period applicable to Montre D’or's own prescribed records.
Where appropriate, relevant verification results or necessary supporting evidence may be retained in our internal records for applicable legal or business purposes.
We do not regard indefinite retention of identity-document images, selfies or biometric information as automatically necessary merely because certain transaction particulars must be retained for five years.
Where biometric processing is enabled, biometric information may be retained by Didit in accordance with the configured verification service, applicable retention settings, its biometric retention policy and relevant legal requirements.
We will consider the necessity of retaining such information separately from the retention of prescribed transaction particulars.
When information is no longer required for an applicable legal or business purpose, we will cease retaining it or remove the means by which it can be associated with an identifiable individual, in accordance with the PDPA.
Deletion may involve removing information from internal records and, where applicable, issuing appropriate deletion instructions to service providers.
Certain limited technical, security or audit records may remain subject to separate lawful retention requirements.
Montre D’or does not currently use customer personal information for promotional email campaigns, targeted advertisements or marketing mailing lists.
Identification particulars collected through Didit for transaction-related or regulatory purposes are not used by Montre D’or for promotional advertising.
Order confirmations, shipping updates, customer service responses and other necessary transactional communications may still be sent in connection with a purchase.
If our marketing practices change, we will review this policy and comply with applicable notification, consent and other legal requirements before introducing new processing purposes.
Our website uses Ecwid, which may use cookies and similar technologies for shopping-cart management, checkout functionality, session management and other operational purposes.
Didit may separately use cookies or technical identifiers in its verification interface for security, fraud prevention, functionality and other activities described in its applicable notices.
Although Montre D’or does not currently conduct its own targeted advertising or marketing analytics, third-party providers may process technical or usage information as part of delivering their services.
Customers may manage certain cookies through browser settings or any controls made available by the relevant service.
Disabling essential cookies may prevent checkout or identity-verification functions from operating correctly.
Customers may request access to or correction of personal information held by Montre D’or, subject to the PDPA and applicable exceptions.
Requests may include access to personal information in our possession or control and information about its use or disclosure within the relevant statutory period.
To submit a request, please contact:
Email: montre.dor22@gmail.com
Subject: Personal Data Access or Correction Request
We may request reasonable information to verify the identity or authority of the person making the request before disclosing or correcting personal information.
We will handle access and correction requests in accordance with the applicable PDPA requirements.
Where we are unable to respond to an access request within 30 days, we will provide the required notice of the anticipated response timeframe.
A reasonable fee may apply to an access request where permitted by law and communicated in accordance with applicable requirements.
Where the information concerned is processed by Didit on our behalf, we may coordinate with Didit as necessary to address an applicable request.
Customers may contact Montre D’or to withdraw consent for processing activities that depend on consent.
Customers may also request that information no longer required for applicable legal or business purposes be deleted or appropriately anonymised.
We will review such requests in accordance with the PDPA and other applicable laws.
Certain personal information may need to remain in our records where retention is necessary for:
Withdrawal of consent or a deletion request does not automatically require the removal of information which must or may lawfully be retained.
For information processed through Didit, any applicable deletion action will be considered in light of the relevant retention settings, statutory obligations and the circumstances of the request.
Montre D’or recognises the importance of responding appropriately to incidents involving unauthorised access, disclosure, loss, alteration or compromise of personal information.
Where a suspected data breach occurs, we will take reasonable steps to assess the incident, contain or mitigate its effects where possible and determine whether notification obligations arise under the PDPA.
Where a breach is determined to be notifiable, we will notify the Personal Data Protection Commission as soon as practicable and within the applicable statutory timeframe, and notify affected individuals where required.
We will take appropriate remedial action and review relevant security arrangements where necessary.
Where an incident involves information processed by Didit or another service provider, we may coordinate with that provider to investigate the incident and meet our applicable obligations.
Customers should provide accurate and complete information when placing orders or completing identity verification.
Providing false, misleading or inaccurate identification information may prevent the successful completion of a transaction.
Where necessary, we may request clarification or additional information to verify identity, complete an order or maintain accurate statutory records.
We will take reasonable steps to ensure the accuracy and completeness of personal information where required under the PDPA.
Our website or checkout process may direct customers to services operated by external providers, including Didit and relevant payment service providers.
These providers may maintain additional privacy notices and terms governing their own activities.
We encourage customers to review the relevant third-party notices when providing information through external services.
The involvement of a third-party service provider does not remove Montre D’or's responsibilities under applicable data protection law.
We may update this Privacy Policy from time to time to reflect changes in our operations, identity-verification arrangements, service providers or applicable legal requirements.
An updated version will be published on our website with a revised effective date.
Where applicable law requires further notification or consent before processing personal information for new purposes, we will comply with those requirements.
For enquiries, requests or complaints concerning personal information collected or processed by Montre D’or, including information processed through Didit on our behalf, please contact:
Montre D’or Private Limited
Data Protection Enquiries
Website: https://www.montredor.com
Email: montre.dor22@gmail.com
We will review privacy-related enquiries and respond in accordance with applicable legal requirements.
Montre D’or Private Limited
Committed to responsible personal data handling, secure identity verification and regulatory compliance.