Privacy Policy

1. Introduction

Brasswind ("we", "us", "our") operates a watch repair and timepiece care workshop at 88-1, Jalan SS21/37, Damansara Utama, 47400 Petaling Jaya, Selangor, Malaysia. This Privacy Policy explains how we collect, use, store, and protect personal information when you interact with our website or use our services.

We are committed to handling personal data responsibly and in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). By using our website or contacting us, you acknowledge that you have read and understood this policy.

Questions about this policy can be directed to [email protected].

2. Personal Data We Collect

We collect personal data only where reasonably necessary to respond to enquiries or provide our services. This includes:

• Contact information: Full name, email address, and telephone number, collected via the enquiry form on our website.
• Service-related information: Details about the watch or timepiece you bring in for service (brand, model, condition, description of issue), collected in person at the workshop.
• Website usage data: Anonymised or aggregated data collected via analytics cookies where consent is given (pages visited, session duration, browser type).

Legal basis for processing: We process personal data on the basis of your consent (when you submit the enquiry form), for the performance of a service contract (when you bring a watch in for repair), and on the basis of legitimate interests (for record-keeping purposes).

Retention: Enquiry records are kept for 12 months. Workshop service records (including the watch condition notes and service documentation we issue) are retained for 5 years for business continuity and dispute resolution purposes.

3. How We Use Your Personal Data

We use the personal data collected for the following purposes:

• To respond to enquiries submitted via the website contact form
• To communicate with you about your watch service, including updates during longer jobs
• To maintain workshop intake and service records
• To improve our website based on anonymised usage data (only where analytics consent is given)
• To comply with applicable legal and regulatory requirements

We do not use your data for direct marketing, sell your data to any third party, or share it with any party not necessary for delivering the service. We do not send marketing communications unless you have explicitly requested them.

4. Data Sharing and Third Parties

We do not sell, rent, or trade personal data. In limited circumstances, we may share data with:

• Parts suppliers: When sourcing specific parts for your watch, we may need to share the watch brand and model with a supplier. We do not share your personal contact details in this process.
• Analytics providers: Where you have consented to analytics cookies, anonymised usage data may be processed by a third-party analytics service. This data does not identify you personally.
• Legal authorities: Where required by law or to protect our legal rights, we may disclose data to regulatory or law enforcement bodies.

5. Data Protection Measures

We take reasonable steps to protect personal data from unauthorised access, loss, or misuse:

• Website data is transmitted over HTTPS (TLS encryption)
• Physical workshop records are stored securely and accessible only to relevant staff
• Digital records are stored on password-protected systems
• In the event of a data breach affecting your rights, we will notify you and, where applicable, the relevant authorities within the timeframe required by Malaysian law

6. Cookies

Our website uses cookies to function correctly and, where you give consent, to understand how it is used. Essential cookies (required for basic site operation) are active by default. Optional cookies for analytics and preferences are only placed where you have given consent via the cookie consent notice.

Full details of the cookies we use and how to manage your preferences are available in our Cookie Policy.

7. Your Rights

Under Malaysia's Personal Data Protection Act 2010, you have the following rights in relation to your personal data:

To exercise any of these rights, contact us at [email protected]. We will respond within 21 days. If you believe your data protection rights have been violated, you may contact the Department of Personal Data Protection (JPDP) Malaysia.

8. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices or content of those websites and encourage you to review their privacy policies independently.

9. Children's Privacy

Our website and services are directed at adults aged 18 and over. We do not knowingly collect personal data from individuals under 18. If you believe a minor has submitted personal data to us, please contact us and we will remove it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The updated policy will be posted on this page with a revised "Last updated" date. We encourage you to review this page periodically.