Privacy Policy

Introduction

Fablecraft ("we," "our," or "us") respects the privacy of individuals who use our watch repair and assessment services. This Privacy Policy explains how we collect, use, store, and protect your personal information in accordance with the Personal Data Protection Act 2010 (Malaysia) and applicable data protection regulations.

By using our services or providing us with your personal information, you acknowledge that you have read and understood this Privacy Policy. If you have questions or concerns about our privacy practices, please contact us at [email protected].

Information We Collect

Personal Information Provided by You

We collect information that you voluntarily provide when you:

• Request a service consultation or assessment
• Submit a watch for repair or restoration work
• Contact us via our website form, email, or telephone
• Subscribe to updates or communications from our workshop

This information may include:

• Name and contact details (email address, phone number, mailing address)
• Information about your timepiece (make, model, condition, service history)
• Payment and billing information for services rendered
• Communication preferences
• Any other information you choose to provide in correspondence with us

Automatically Collected Information

When you visit our website, we may automatically collect certain technical information, including:

• IP address and browser type
• Device information and operating system
• Pages visited and time spent on our website
• Referring website or search terms used

This information is collected through cookies and similar technologies. For details on our use of cookies, please see our Cookie Policy.

How We Use Your Information

We use the personal information we collect for the following purposes:

Service Delivery

• To provide watch repair, restoration, and assessment services
• To communicate with you regarding your timepiece and service progress
• To schedule appointments and manage service timelines
• To prepare reports and documentation related to your watch

Business Operations

• To process payments and maintain financial records
• To respond to inquiries and provide customer support
• To improve our services and website functionality
• To maintain accurate business records

Legal Compliance

• To comply with applicable laws and regulations
• To respond to legal requests or prevent fraud
• To protect our rights and property

Marketing Communications (with your consent)

• To send service updates or maintenance reminders
• To inform you about relevant services or offerings
• To share horological insights or workshop news

You may opt out of marketing communications at any time by contacting us or using the unsubscribe link in our emails.

Legal Basis for Processing

We process your personal information based on the following legal grounds:

• Contract Performance: Processing necessary to provide services you have requested
• Legitimate Interest: Processing necessary for our business operations, such as improving services and managing customer relationships
• Consent: Where you have provided explicit consent for specific uses, such as marketing communications
• Legal Obligation: Processing required to comply with applicable laws and regulations

Data Sharing and Disclosure

We do not sell or rent your personal information to third parties. We may share your information only in the following circumstances:

Service Providers

We may share information with trusted service providers who assist us in operating our business, such as:

• Payment processors for transaction handling
• Email service providers for communications
• Cloud storage providers for data management
• Website hosting and analytics providers

These providers are contractually obligated to protect your information and use it only for the specific services they provide to us.

Legal Requirements

We may disclose personal information when required by law, such as in response to court orders, legal proceedings, or requests from government authorities.

Business Transfers

In the event of a business sale, merger, or acquisition, your personal information may be transferred to the new owner, subject to the same privacy protections outlined in this policy.

Data Retention

We retain your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

Specifically:

• Service Records: Retained for 7 years following service completion for warranty, quality assurance, and business records purposes
• Financial Records: Retained for 7 years as required by Malaysian tax and accounting regulations
• Marketing Communications: Retained until you withdraw consent or request deletion
• Website Analytics: Typically retained for 26 months

When information is no longer needed, we securely delete or anonymize it in accordance with data protection requirements.

Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of sensitive data during transmission and storage
• Secure servers with restricted access
• Regular security assessments and updates
• Staff training on data protection practices
• Physical security measures at our workshop premises

While we strive to protect your personal information, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security but remain committed to maintaining industry-standard protections.

Your Rights

Under the Personal Data Protection Act 2010 (Malaysia), you have the following rights regarding your personal information:

Right to Access

You may request a copy of the personal information we hold about you, including details about how we use and share it.

Right to Correction

You may request that we correct any inaccurate or incomplete personal information we hold about you.

Right to Erasure

You may request deletion of your personal information, subject to certain exceptions such as legal retention requirements or ongoing service obligations.

Right to Withdraw Consent

Where we process your information based on consent, you may withdraw that consent at any time. This will not affect the lawfulness of processing based on consent before its withdrawal.

Right to Object

You may object to our processing of your personal information for direct marketing purposes or where we rely on legitimate interests as the legal basis for processing.

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 21 days as required by Malaysian data protection law.

Cookies and Tracking Technologies

Our website uses cookies and similar technologies to enhance your browsing experience and analyze website usage. For detailed information about our use of cookies, including how to manage your cookie preferences, please refer to our Cookie Policy.

Third-Party Links

Our website may contain links to third-party websites or services. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.

Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected information from a child under 18, we will take steps to delete that information promptly.

International Data Transfers

Your personal information is primarily processed and stored in Malaysia. If we transfer information to countries outside Malaysia, we ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy and applicable data protection laws.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. When we make changes, we will update the "Last Updated" date at the top of this policy. We encourage you to review this Privacy Policy periodically. Your continued use of our services after any changes indicates your acceptance of the updated policy.

Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Supervisory Authority

If you believe we have not addressed your privacy concerns adequately, you have the right to lodge a complaint with the Malaysian Personal Data Protection Commissioner: