Privacy Policy

1. Introduction

Tickwright ("we", "us", "our") operates from 18 Lebuh Pantai, 10300 George Town, Pulau Pinang, Malaysia. This policy explains how we collect, use, store, and protect personal data provided through our website and through the course of providing watch repair and restoration services.

This policy applies to information collected via the contact form on our website and through direct correspondence (phone, email, in-person). We are committed to handling personal data in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia.

Questions about this policy should be directed to: [email protected]

2. Data We Collect

We collect personal information only when it is provided directly by you. This may include:

• Full name
• Email address
• Phone number (optional)
• Message content relating to your enquiry
• Watch details provided for service purposes (brand, model, serial number where relevant)

We also collect non-personal technical data through website cookies, including browser type, pages visited, and approximate location data. See Section 5 for further detail on cookies.

Legal basis for processing: Contract (for service delivery), consent (for enquiry form submissions), and legitimate interest (for basic website analytics).

Retention: Enquiry and contact data is retained for 24 months from the date of last contact. Service records — including watch details and written service sheets — are retained indefinitely as part of our workshop records, as these may be needed for future reference by the owner of the piece.

3. How We Use Your Data

Personal data collected through this website or direct correspondence is used for:

• Responding to service enquiries
• Managing ongoing service work and communication about your watch
• Preparing and maintaining written service records
• Administering the Collection Custodianship Programme, including maintaining photographic inventories and custodianship files
• Improving our website based on aggregated, anonymised analytics

We do not use personal data for marketing to third parties. We do not sell personal data. We do not send unsolicited commercial messages.

4. Data Sharing

We do not share personal data with third parties except in the following limited circumstances:

• Service providers: If we need to source parts from a supplier and share watch reference or serial data to obtain a part, we disclose only the information required for that purpose.
• Legal obligations: If required by Malaysian law or court order, we may be required to disclose personal information.
• Website hosting and analytics: Our website may use third-party hosting and analytics services. These providers process data on our behalf under data processing agreements.

5. Cookies

Our website uses cookies to remember your cookie consent preference (essential), understand how visitors use the site (analytics, optional), and for basic functionality. You can manage cookie preferences using the banner displayed on your first visit or by visiting our Cookie Policy page.

6. Data Protection Measures

We take reasonable steps to protect personal data from unauthorised access, disclosure, or loss. These include:

• Access to client records is restricted to workshop staff involved in the relevant service
• Physical service records and custodianship files are stored in a locked archive on premises
• Digital records, including photographic inventories, are not stored on publicly accessible cloud services
• Website contact form data is transmitted over HTTPS

In the event of a data breach that affects your personal information, we will notify you within a reasonable timeframe as required under applicable Malaysian law.

7. Your Rights

Under the PDPA 2010 and, where applicable, other data protection frameworks, you have the right to:

• Access: Request a copy of personal data we hold about you
• Correction: Request that inaccurate data be corrected
• Withdrawal of consent: Withdraw consent for data processing where consent is the legal basis
• Erasure: Request deletion of personal data, subject to any legal obligation to retain records
• Objection: Object to processing of your data for certain purposes
• Complaint: Lodge a complaint with the relevant Malaysian supervisory authority

To exercise any of these rights, contact us at [email protected]. We will respond within 21 days of receiving your request.

8. Third-Party Links

Our website may contain links to external resources. We are not responsible for the privacy practices of third-party websites and recommend reviewing their policies independently.

9. Children's Privacy

Our services are intended for individuals aged 18 and over. We do not knowingly collect personal data from individuals under 18. If you believe a minor has submitted personal data through our website, please contact us and we will take appropriate steps to remove it.

10. Policy Updates

We may update this policy from time to time. Changes will be published on this page with a revised "Last Updated" date. Continued use of this website after changes are posted constitutes acceptance of the updated policy.

11. Contact for Data Enquiries