Privacy Policy

1. Information We Collect

We collect personal information only when it is necessary for us to respond to your enquiry or carry out a service. The information we may collect includes:

• Contact details — name, email address, and phone number provided through our contact form or in person.
• Watch intake records — description and photograph of timepieces left in our care, for custody and insurance purposes.
• Service correspondence — messages exchanged regarding condition reports, quotes, and collection arrangements.
• Website usage data — anonymised analytics data collected via cookies, if you consent. This includes pages visited and approximate location.

Legal basis: Information is collected on the basis of your consent (where you submit a form or agree to cookies), the performance of a service contract (when we carry out repair work), and our legitimate interest in maintaining proper custody records for watches in our care.

2. How We Use Your Information

• To respond to enquiries and arrange service appointments
• To prepare and send condition reports and service quotations
• To maintain records of watches left in our custody
• To notify you when your watch is ready for collection
• To send service reminders if you have opted in to this
• To improve our website using aggregated, anonymised analytics

We do not use your personal data for automated decision-making or profiling. We do not sell, rent, or share your personal information with third parties for their own marketing purposes.

Data retention: Contact enquiry records are retained for 12 months. Workshop service records (including intake photographs and condition reports) are retained for 5 years for insurance and audit purposes, then securely deleted.

3. Sharing Your Information

We share personal information only in the following limited circumstances:

• Service providers — our web hosting provider processes website data on our behalf under a data processing agreement. We use Google Analytics (if cookies are accepted) for anonymised usage statistics.
• Legal obligations — we may disclose information if required by Malaysian law or a lawful order from a court or regulatory authority.
• Parts suppliers — on rare occasions, we may need to share a watch's model number with a parts supplier to source a replacement component. No personal data is shared in this process.

4. Data Protection Measures

• Our website is served over HTTPS with TLS encryption
• Workshop intake records are stored in a locked system accessible only to workshop staff
• Email communications containing personal data are handled via an encrypted mail service
• Physical records are kept in a secure, locked location on our premises
• Access to personal data is restricted to staff who require it to carry out their role

In the event of a data breach that is likely to result in risk to your rights, we will notify you and the relevant authority without undue delay, as required under applicable law.

5. Cookies

Our website uses cookies. When you first visit the site, you are presented with a consent notice and may choose to accept or decline optional cookies. Essential cookies (required for the site to function) are always active.

• Essential cookies — necessary for site operation, including cookie consent preferences.
• Analytics cookies — used to understand how visitors use the site (only if consented).
• Preference cookies — used to remember your settings between visits (only if consented).

For full details and to manage your preferences, please see our Cookie Policy.

6. Your Rights

Under the Personal Data Protection Act 2010 (Malaysia), you have the following rights regarding your personal data:

• Access — you may request a copy of the personal data we hold about you.
• Correction — you may request that we correct inaccurate or incomplete data.
• Withdrawal of consent — where processing is based on consent, you may withdraw it at any time.
• Limitation of processing — you may request that we restrict how we use your data in certain circumstances.
• Complaint — you may lodge a complaint with the Department of Personal Data Protection Malaysia (PDPD) if you believe your rights have been infringed.

To exercise any of these rights, please contact us at [email protected]. We will respond within 21 days.

7. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites, and this policy does not apply to them. We encourage you to read their privacy policies before providing any personal information.

8. Children's Privacy

Our services are intended for adults aged 18 and above. We do not knowingly collect personal data from individuals under 18. If you believe a minor has submitted information to us, please contact us and we will remove it promptly.

9. Policy Updates

We may update this policy from time to time to reflect changes in our practices or in applicable law. When we do, we will revise the "Last Updated" date at the top of this page. We recommend reviewing this policy periodically. Continued use of our website or services following an update constitutes acceptance of the revised policy.

10. Contact Us

For questions about this policy, to exercise your rights, or to raise a concern about how we handle your data, please contact: