Privacy Policy

1. Introduction

Seri Waktu ("the Workshop", "we", "us") is committed to handling your personal data responsibly. This Privacy Policy explains what information we collect when you use our website at seriwakt or engage with our watch repair and restoration services, how we use that information, and the rights you hold under Malaysia's Personal Data Protection Act 2010 (PDPA).

If you have questions about this Policy, please contact us at privacy@seriwakt.

2. Data Controller

The data controller for personal data processed in connection with this website and our services is:

3. Data We Collect

We collect personal data in the following circumstances:

• Enquiry Form: Name, email address, and optionally phone number and a message describing your watch or service request.
• Service Records: When you bring a watch for service, we record contact details, the piece description, condition report findings, agreed scope of work, and service history.
• Cookies and Analytics: Browsing data such as pages visited and session duration, collected via cookies as described in our Cookie Policy. This data is aggregated and does not identify you personally unless you have submitted an enquiry form.
• Correspondence: Any email or message exchange you initiate.

We do not collect sensitive personal data (e.g. health, financial, or identity document information) in the ordinary course of our workshop operations.

4. Legal Basis for Processing

• Contract performance: Processing your name and contact details to respond to an enquiry or to perform a repair service you have requested.
• Legitimate interest: Maintaining service records to support our 12-month service cover and to improve our practice.
• Consent: Sending you any optional service-related communications (e.g. reminders that your watch is due for service). You may withdraw consent at any time.
• Legal obligation: Retaining records as required under Malaysian tax and business law.

5. How We Use Your Data

• To respond to your enquiry and arrange a service appointment.
• To prepare and store a condition report and service record for work carried out.
• To notify you when your assessment is complete or your watch is ready for collection.
• To handle the 12-month post-overhaul service cover.
• To comply with legal and regulatory obligations.
• To understand how visitors use our website in aggregate (analytics).

We do not use your data for unsolicited marketing and do not sell, rent, or share your personal data with third parties for their own marketing purposes.

6. Data Retention

• Service records and photographs: Retained for five years from the date of service, after which they are securely deleted unless you have requested extended retention.
• Enquiry form data (no service performed): Retained for six months and then deleted.
• Financial records: Retained for seven years in accordance with Malaysian tax requirements.
• Analytics data: Aggregated data is retained for up to 24 months and then purged.

7. Data Sharing

We do not share your personal data with third parties except in the following limited circumstances:

• Parts suppliers: Where sourcing a specific part requires us to describe the calibre and its reference number. No personal contact details are shared.
• Analytics providers: Aggregated, anonymised website usage data via analytics cookies (subject to your cookie preferences).
• Legal requirement: Where disclosure is required by Malaysian law or a lawful order of a court or regulator.

8. Data Security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. Workshop records are stored on access-controlled systems on the premises. Digital records are held on password-protected devices. No internet transmission method is completely secure; we cannot guarantee absolute security of data transmitted via the enquiry form, but we take practical steps to minimise risk.

9. Cookies

Our website uses cookies. For a full explanation of the cookies we use and how to manage your preferences, please see our Cookie Policy.

10. Your Rights Under the PDPA

Under Malaysia's Personal Data Protection Act 2010, you have the following rights in relation to personal data we hold about you:

• Right of access: To request a copy of the personal data we hold about you.
• Right to correction: To request correction of inaccurate or incomplete data.
• Right to withdraw consent: To withdraw consent to processing where consent is the legal basis.
• Right to limit processing: To request that we limit use of your data to storage only.
• Right to erasure: To request deletion of data we hold, subject to legal retention obligations.

To exercise any of these rights, please contact us at privacy@seriwakt. We will respond within 21 days.

11. Third-Party Links

Our website may contain links to third-party websites. This Policy does not apply to those sites. We are not responsible for the privacy practices of external websites and encourage you to review their privacy policies.

12. Children

Our services are directed at individuals aged 18 and above. We do not knowingly collect personal data from minors. If you believe a minor has submitted personal data through our website, please contact us and we will delete it promptly.

13. Supervisory Authority

If you believe your data protection rights have not been respected, you may lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP): www.pdp.gov.my. We would, however, appreciate the opportunity to address your concerns directly before you contact the regulator.

14. Policy Updates

We may update this Policy from time to time. The revised version will be published on this page with an updated date. For significant changes, we will display a notice on our website. Continued use of our services after changes are published constitutes acceptance of the updated Policy.