Privacy Policy

1. Data We Collect

We collect only the information needed to respond to your enquiry and carry out workshop work:

• Name — to address correspondence and to record ownership of the piece in our workshop log
• Email address — to respond to enquiries and to send collection and progress notifications
• Phone number — if provided, for follow-up on urgent workshop matters
• Message content — information you include about your watch, its condition, and the service you are enquiring about
• Technical data — standard web server logs (IP address, browser type, page visited) collected automatically when you visit our website; this data is not linked to your identity

We do not collect payment card data directly. Payments are processed in person at the workshop or through a third-party payment facility.

2. How We Use Your Data

Your personal data is used for the following purposes:

• Responding to enquiries — to answer questions about services, pricing, and suitability of your piece
• Workshop record-keeping — your name is included in the workshop job sheet that accompanies your piece through the bench process
• Progress and collection notifications — to let you know when work is complete or if we need to discuss a finding during the job
• Website improvement — aggregated, anonymised web traffic data helps us understand which pages are useful

We do not use your data for unsolicited marketing. We do not send newsletters or promotional emails without your explicit request.

3. Legal Basis for Processing

Under the Personal Data Protection Act 2010 (PDPA) of Malaysia, we process your personal data on the following bases:

• Consent — when you submit an enquiry form, you consent to us using your contact details to respond
• Contractual necessity — once you bring a piece to the workshop, processing your contact and piece information is necessary to carry out the agreed service
• Legitimate interest — we retain contact details for a reasonable period after a job is completed in case questions arise about the work carried out

4. Data Retention

• Enquiry records where no work is carried out: 12 months from the date of enquiry
• Job records (including name, contact details, and work documentation): 7 years from the date of collection, for business record purposes
• Photographs taken as part of the workshop process: 12 months from the date of collection, unless you request an earlier deletion
• Web server logs: 90 days, after which they are automatically overwritten

5. Data Sharing

We do not sell, rent, or share your personal data with third parties for their own marketing purposes. Data may be shared only in the following limited circumstances:

• Parts suppliers — if sourcing a component for your piece requires providing a description of the watch (not your personal details) to a supplier
• Legal requirements — if we are required by Malaysian law or a lawful authority to disclose information
• Website hosting and analytics — our website host may process IP address data as part of standard server operation. We use privacy-respecting analytics configurations where possible.

6. Data Protection Measures

• Enquiry form data is transmitted over HTTPS (TLS encryption)
• Workshop job records are held in a physically secured environment within the workshop
• Access to digital records is limited to workshop staff who need them to carry out their work
• In the event of a data breach affecting your personal information, we will notify you and, where required, the relevant Malaysian authority within a reasonable timeframe

7. Cookies

Our website uses cookies to remember your cookie consent preference (stored in your browser's local storage) and to collect anonymised web traffic data. We do not use cookies to identify you personally or to track you across other websites. See our Cookie Policy for full details and preference controls.

8. Your Rights

Under the PDPA 2010 and reasonable practice, you have the right to:

• Access — request a copy of the personal data we hold about you
• Correction — ask us to correct inaccurate or incomplete data
• Erasure — request deletion of your personal data, subject to our legal obligations to retain certain records
• Withdrawal of consent — withdraw consent to data processing at any time; this does not affect processing that occurred before withdrawal
• Objection — object to processing carried out on the basis of legitimate interest

To exercise any of these rights, contact us at [email protected]. We will respond within 21 days.

9. Third-Party Links

Our website may contain links to third-party websites (such as map services or supplier references). We are not responsible for the privacy practices of those websites and recommend you review their policies independently.

10. Children's Privacy

Our services are intended for adults aged 18 and over. We do not knowingly collect personal data from persons under 18. If you believe a minor has submitted data through our website, contact us at [email protected] and we will delete it promptly.

11. Policy Updates

We may update this policy from time to time to reflect changes in how we operate or in applicable law. The date at the top of this page will always show when the policy was last revised. We recommend checking this page if you have an ongoing relationship with the workshop.

12. Contact

Data controller: Vervelle

Address: Lot 4-2, Jalan Telawi 3, Bangsar Baru, 59100 Kuala Lumpur, Malaysia

Email: [email protected]

Phone: +60 3-2148 6237