Privacy Policy

1. Introduction

Mainspring ("we", "us", "our") operates a watch repair workshop at 203 Second Road, Nong Prue, Bang Lamung, Chonburi 20150, Thailand. This Privacy Policy explains how we collect, use, and protect personal data submitted through our website and in connection with our services.

We are committed to handling personal data responsibly and in accordance with Thailand's Personal Data Protection Act B.E. 2562 (PDPA). This policy applies to data submitted via our contact form, by email, by telephone, and during the service intake process at our workshop.

If you have questions about this policy, you may contact us at [email protected].

2. Personal Data We Collect

We collect only the personal data necessary to provide our services and respond to enquiries. This includes:

• Name: Required to identify the customer and the watch associated with a service job.
• Email address: Required for service confirmations, scope documents, and collection notices.
• Phone number: Provided optionally, used for direct communication about service status.
• Message content: Enquiry details submitted through the contact form, used to assess service requirements.
• Website usage data: Anonymised analytics data if analytics cookies are accepted (see Cookie Policy).

Legal basis: Processing is based on your consent (contact form submission), performance of a service contract (workshop services), and our legitimate interests in operating and improving our business.

Retention: Customer service records are retained for 3 years from the date of service. Contact form enquiries that do not proceed to a service booking are retained for 12 months. You may request deletion at any time.

3. How We Use Your Data

We use the personal data we collect for the following purposes:

• Responding to enquiries and confirming service scope
• Managing service jobs, intake records, and collection notices
• Issuing invoices and receipts
• Improving our website and services using anonymised analytics data

We do not use your personal data for automated decision-making or profiling. We do not sell personal data to third parties.

Marketing: We do not send unsolicited marketing communications. If you ask to receive updates from us, we will only send them to the email address you provide and you may unsubscribe at any time by contacting [email protected].

4. Data Sharing and Third Parties

We do not share personal data with third parties except where required to deliver our services or where required by law:

• Hosting providers: Our website is hosted on servers that may be operated by third-party infrastructure providers. We ensure these providers maintain adequate data protection standards.
• Analytics services: If you accept analytics cookies, anonymised usage data may be shared with analytics providers such as Google Analytics.
• Legal requirements: We may disclose personal data where required to do so by Thai law or lawful authority.

Parts sourcing occasionally involves external suppliers, but personal data is not shared with them — only the technical specification of parts required.

5. Data Protection Measures

We take reasonable steps to protect personal data against unauthorised access, loss, or disclosure:

• Website connections are encrypted via HTTPS/TLS
• Physical service records are stored in locked files accessible only to workshop staff
• Access to customer data is limited to staff members who require it to perform their duties
• In the event of a data breach affecting your personal data, we will notify you and, where required, the relevant Thai supervisory authority, within 72 hours of becoming aware

6. Cookies

Our website uses cookies to enable basic site functionality and, with your consent, to collect anonymised analytics data. Essential cookies cannot be disabled as they are required for the site to operate. Analytics and preference cookies are optional and require your consent.

For full details on the cookies we use and how to manage your preferences, please see our Cookie Policy.

7. Your Data Rights

Under Thailand's PDPA, you have the following rights regarding your personal data:

• Right of access: You may request a copy of the personal data we hold about you.
• Right to rectification: You may ask us to correct inaccurate personal data.
• Right to erasure: You may request deletion of your personal data, subject to any legal retention obligations.
• Right to data portability: You may request your data in a structured, machine-readable format where technically feasible.
• Right to object: You may object to processing of your data based on legitimate interests.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw it at any time without affecting prior processing.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with Thailand's Office of the Personal Data Protection Committee (PDPC) at pdpc.or.th.

8. Third-Party Links

Our website may contain links to external sites such as Google Maps. We are not responsible for the privacy practices of those sites. We recommend reviewing the privacy policy of any third-party site you visit via a link from our pages.

9. Children's Privacy

Our services are intended for persons aged 18 or over. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected data from a person under 18, please contact us and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be indicated by an updated "Last Updated" date at the top of this page. We encourage you to review this page periodically. Continued use of our website or services after changes take effect constitutes acceptance of the updated policy.

11. Contact for Privacy Matters