Privacy Policy
Last Updated: 15 March 2025 · Kairos Works
1. Introduction
Kairos Works ("we", "us", "our") is committed to protecting the personal information of individuals who interact with our business. This Privacy Policy explains how we collect, use, store, and protect personal data in connection with our watch repair services in George Town, Penang, Malaysia.
This policy applies to all individuals whose personal data we handle, including customers who contact us, visit our premises, or use our website. We comply with the Personal Data Protection Act 2010 (PDPA) of Malaysia.
Questions about this policy may be directed to: [email protected]
2. Data We Collect
We may collect the following personal data when you contact us, submit an enquiry, or bring a watch in for service:
- Full name
- Email address
- Phone number (where provided)
- Postal address (where relevant to the service)
- Description of the watch and service required
- Service and communication records
We also collect limited non-personal technical data through our website, including browser type, pages visited, and visit duration, via analytics cookies (where consented).
3. How We Use Your Data
Personal data is used for the following purposes:
- To receive and manage service enquiries
- To communicate with you about your watch and the status of a service
- To maintain intake and service records linked to your timepiece
- To issue receipts or service reports
- To comply with legal and regulatory obligations
- To improve the functioning of our website (analytics only, with consent)
We do not use personal data for marketing purposes without your prior consent. We do not sell personal data to third parties.
4. Legal Basis for Processing
Under the PDPA, we process personal data on the following bases:
- Contract performance — processing necessary to provide watch repair services you have requested
- Legal obligation — processing required to comply with applicable Malaysian laws
- Legitimate interest — maintaining service records relevant to your watch and responding to enquiries
- Consent — for optional analytics cookies and any marketing communications
5. Data Retention
We retain personal data only for as long as necessary for the purposes described in this policy. Service records are generally retained for up to five years to support future maintenance and warranty reference. Contact enquiries not resulting in a service engagement are retained for up to twelve months. Analytics data is retained for up to twenty-four months.
You may request deletion of your data at any time by contacting us, subject to any overriding legal retention requirements.
6. Data Sharing
We do not share personal data with third parties except in the following circumstances:
- Where required by law or a court order
- With analytics service providers operating under strict data processing agreements (where consented)
All watch repairs are carried out in-house. Personal data does not leave the Kairos Works workshop or its associated service systems.
7. Data Security
We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, or disclosure. These include restricted access to physical service records, secure email practices, and use of reputable third-party analytics providers with appropriate data processing terms.
In the event of a data breach that may affect your rights or interests, we will notify you in accordance with applicable PDPA obligations.
8. Cookies
Our website uses cookies to support basic functionality and, with your consent, to gather analytics data on site usage. For detailed information about the cookies we use and how to manage your preferences, please visit our Cookie Policy.
9. Your Rights
Under the PDPA, you have the following rights in relation to your personal data:
- Right to access — to request a copy of the personal data we hold about you
- Right to correction — to request correction of inaccurate or incomplete data
- Right to withdraw consent — for processing activities based on consent
- Right to limit processing — in certain circumstances
- Right to lodge a complaint — with the Department of Personal Data Protection Malaysia (JPDP)
To exercise these rights, contact us at [email protected]. We will respond within a reasonable timeframe.
10. Third-Party Links
Our website may contain links to external websites. We are not responsible for the privacy practices of those sites. Please review the privacy notices of any external site you visit.
11. Children's Privacy
Our services are directed at adults. We do not knowingly collect personal data from individuals under 18 years of age. If we become aware that a minor has submitted personal data without appropriate consent, we will delete it promptly.
12. Changes to This Policy
We may update this Privacy Policy from time to time. Significant changes will be communicated by updating the "Last Updated" date at the top of this page. We encourage you to review this policy periodically.
13. Contact
For any questions or requests relating to this policy or our handling of personal data, please contact:
- Email: [email protected]
- Address: 145 Persiaran Gurney, 10250 George Town, Penang, Malaysia
- Phone: +60 4 2293 8175