Privacy Policy

1. Introduction

Mainspring Loft ("we", "us", "our") operates a watch repair workshop at 74 Ratchadamnoen Road, Phra Nakhon, Bangkok 10200, Thailand. This policy explains how we handle personal data collected through our website and workshop operations.

We process personal data in line with Thailand's Personal Data Protection Act B.E. 2562 (PDPA). This policy describes the types of information we collect, why we collect it, how we use it, and the rights you have over your data.

Questions about this policy can be sent to: [email protected]

2. Data We Collect

We collect personal data when you:

• Submit an enquiry through our website contact form
• Drop off or collect a watch at the workshop
• Contact us by phone or email directly

The categories of data collected include:

• Identification data: Name
• Contact data: Email address, telephone number
• Service data: Description of your watch, service history notes, written records of work carried out
• Technical data: IP address, browser type, pages visited (via cookies, if consented)

Legal basis: Processing is carried out on the basis of your consent (enquiry forms, cookies), the performance of a service contract (workshop services), and our legitimate interest in maintaining accurate service records.

3. How We Use Your Data

We use personal data to:

• Respond to enquiries and communicate about your service
• Create and maintain workshop service records
• Process payment and issue receipts
• Improve our website based on aggregated usage data
• Comply with Thai legal obligations

We do not use your data for direct marketing unless you have separately consented to this. We do not sell personal data to third parties.

4. Data Retention

Retention periods are as follows:

• Enquiry data: 12 months from the date of enquiry if no service follows
• Workshop service records: 5 years from the date of service completion (retained for warranty and historical reference)
• Payment records: 7 years in accordance with Thai accounting requirements
• Cookie and analytics data: As specified in our Cookie Policy

5. Data Sharing

We share personal data only in the following circumstances:

• Parts suppliers: Where a heritage overhaul requires sourcing parts from third-party suppliers, limited contact data may be shared to facilitate delivery (name, address for shipping if applicable)
• Website hosting and analytics providers: Technical data may be processed by service providers acting on our behalf under data processing agreements
• Legal authorities: Where required by Thai law or court order

No personal data is transferred outside Thailand for marketing purposes.

6. Data Protection Measures

We take reasonable technical and organisational measures to protect personal data, including:

• Access to workshop records restricted to authorised staff
• Website served over HTTPS
• Physical service records stored securely on-premises
• Regular review of data held to remove outdated information

In the event of a data breach that is likely to result in a risk to individuals, we will notify the relevant authority and affected individuals in accordance with PDPA requirements.

7. Cookies

Our website uses cookies to maintain basic site functionality and, where consented, to collect anonymised usage data. Full details of the cookies we use, their purposes, and how to manage your preferences are described in our Cookie Policy.

8. Your Rights

Under Thailand's PDPA, you have the following rights regarding your personal data:

• Right of access: Request a copy of the personal data we hold about you
• Right of rectification: Ask us to correct inaccurate or incomplete data
• Right of erasure: Request deletion of your data where there is no legitimate basis to retain it
• Right to object: Object to processing based on our legitimate interests
• Right to restrict processing: Request that we limit how we use your data in certain circumstances
• Right to data portability: Receive your data in a structured, machine-readable format where technically feasible
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. If you believe your rights have not been respected, you may lodge a complaint with Thailand's Personal Data Protection Committee (PDPC).

9. Third-Party Links

Our website may contain links to external sites not operated by Mainspring Loft. We are not responsible for the privacy practices of those sites. We recommend reviewing their privacy policies independently.

10. Children's Privacy

Our services are directed at individuals aged 18 and over. We do not knowingly collect personal data from minors. If we become aware that data has been submitted by a person under 18 without appropriate parental consent, we will delete it promptly.

11. Policy Changes

We may update this policy from time to time. The current version will always be published on this page with a revised "Last Updated" date at the top. Continued use of our website following a change constitutes acceptance of the revised policy.

12. Contact