Legal
Privacy Policy
Last Updated: 11 July 2025 | Effective Date: 11 July 2025
1. Introduction
Chronveil ("we", "us", "our") is a watch repair and timepiece care workshop registered and operating in Kuching, Sarawak, Malaysia. We are committed to handling personal information with care and in accordance with applicable Malaysian data protection law, including the Personal Data Protection Act 2010 (PDPA 2010).
This Privacy Policy explains what information we collect when you use our website or contact us regarding our services, how we use that information, and what rights you have in relation to it. If you have any questions, please contact us at [email protected].
2. Information We Collect
2.1 Information You Provide Directly
When you submit an enquiry through our contact form or communicate with us by phone or email, we may collect:
- Your full name
- Your email address
- Your phone number (if provided)
- Details about your watch and the service you are enquiring about
2.2 Information Collected Automatically
When you visit our website, certain technical information may be collected automatically, including your approximate location (country/region level), browser type, pages viewed, and the duration of your visit. This is gathered through cookies and analytics tools — see our Cookie Policy for details.
2.3 Legal Basis for Processing
We process your personal data on the following bases:
- Legitimate interest — to respond to service enquiries and communicate about ongoing work
- Consent — where you have agreed to optional cookies or marketing communications
- Contract performance — to carry out and document the service you have requested
2.4 Data Retention
Service records are retained for up to 7 years for warranty, insurance, and customer reference purposes. Contact information gathered through enquiry forms is retained for 12 months, after which it is deleted unless an active service relationship continues.
3. How We Use Your Information
Personal data collected through our website and communications is used to:
- Respond to your service enquiry
- Arrange and carry out watch servicing, overhaul, or restoration work
- Provide service updates and communicate about work in progress
- Issue service documentation and condition reports
- Maintain internal records for insurance and professional purposes
- Improve our website based on aggregated, anonymised analytics data
We do not use your personal data for unsolicited marketing communications. If you enquire about our services, we may follow up on that enquiry directly — this is not considered marketing under the PDPA 2010.
3.1 Data Sharing
We do not sell, rent, or share your personal information with third parties for commercial purposes. We may share data with:
- Our website hosting and analytics providers (subject to appropriate data processing agreements)
- Professional indemnity insurers, if required in connection with a claim
- Regulatory or legal authorities, if required by Malaysian law
4. Data Protection Measures
We take reasonable technical and organisational measures to protect personal data against unauthorised access, alteration, or disclosure. These measures include:
- Encrypted transmission (HTTPS) for our website
- Access to client records limited to workshop staff on a need-to-know basis
- Physical workshop records stored securely and not accessible to the public
- Regular review of data held and deletion of data that is no longer required
In the event of a data breach that is likely to affect your rights or interests, we will notify you and the relevant authority as required under applicable law.
5. Cookies
Our website uses cookies to function correctly and to understand how visitors use it. You can manage your cookie preferences at any time. For full details, please read our Cookie Policy.
6. Your Rights
Under the Personal Data Protection Act 2010 (Malaysia), you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate or incomplete data
- Withdraw consent to processing (where processing is based on consent)
- Request that we cease processing your data for direct marketing purposes
- Lodge a complaint with the Personal Data Protection Commissioner of Malaysia
To exercise any of these rights, please contact us at [email protected] or write to us at the address below. We aim to respond within 21 days.
7. Third-Party Links
Our website may contain links to external sites. We are not responsible for the privacy practices or content of those sites, and this policy does not extend to them. We encourage you to read the privacy notice of any external site you visit.
8. Children's Privacy
Our services are not directed at individuals under 18 years of age. We do not knowingly collect personal data from minors. If you believe a minor has submitted information to us, please contact us and we will remove it promptly.
9. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated effective date. Continued use of our website after changes are posted constitutes acceptance of the updated policy.
10. Contact Us
For privacy-related enquiries, please contact:
- Data Controller: Chronveil
- Email: [email protected]
- Address: Lot 12, Jalan Dhoby, 93000 Kuching, Sarawak, Malaysia
- Phone: +60 82 419 274