Privacy Policy

1. Introduction

Kairos Works ("we", "us", "our") is committed to protecting the personal information of individuals who interact with our business. This Privacy Policy explains how we collect, use, store, and protect personal data in connection with our watch repair services in George Town, Penang, Malaysia.

This policy applies to all individuals whose personal data we handle, including customers who contact us, visit our premises, or use our website. We comply with the Personal Data Protection Act 2010 (PDPA) of Malaysia.

Questions about this policy may be directed to: [email protected]

2. Data We Collect

We may collect the following personal data when you contact us, submit an enquiry, or bring a watch in for service:

• Full name
• Email address
• Phone number (where provided)
• Postal address (where relevant to the service)
• Description of the watch and service required
• Service and communication records

We also collect limited non-personal technical data through our website, including browser type, pages visited, and visit duration, via analytics cookies (where consented).

3. How We Use Your Data

Personal data is used for the following purposes:

• To receive and manage service enquiries
• To communicate with you about your watch and the status of a service
• To maintain intake and service records linked to your timepiece
• To issue receipts or service reports
• To comply with legal and regulatory obligations
• To improve the functioning of our website (analytics only, with consent)

We do not use personal data for marketing purposes without your prior consent. We do not sell personal data to third parties.

4. Legal Basis for Processing

Under the PDPA, we process personal data on the following bases:

• Contract performance — processing necessary to provide watch repair services you have requested
• Legal obligation — processing required to comply with applicable Malaysian laws
• Legitimate interest — maintaining service records relevant to your watch and responding to enquiries
• Consent — for optional analytics cookies and any marketing communications

5. Data Retention

We retain personal data only for as long as necessary for the purposes described in this policy. Service records are generally retained for up to five years to support future maintenance and warranty reference. Contact enquiries not resulting in a service engagement are retained for up to twelve months. Analytics data is retained for up to twenty-four months.

You may request deletion of your data at any time by contacting us, subject to any overriding legal retention requirements.

6. Data Sharing

We do not share personal data with third parties except in the following circumstances:

• Where required by law or a court order
• With analytics service providers operating under strict data processing agreements (where consented)

All watch repairs are carried out in-house. Personal data does not leave the Kairos Works workshop or its associated service systems.

7. Data Security

We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, or disclosure. These include restricted access to physical service records, secure email practices, and use of reputable third-party analytics providers with appropriate data processing terms.

In the event of a data breach that may affect your rights or interests, we will notify you in accordance with applicable PDPA obligations.

8. Cookies

Our website uses cookies to support basic functionality and, with your consent, to gather analytics data on site usage. For detailed information about the cookies we use and how to manage your preferences, please visit our Cookie Policy.

9. Your Rights

Under the PDPA, you have the following rights in relation to your personal data:

• Right to access — to request a copy of the personal data we hold about you
• Right to correction — to request correction of inaccurate or incomplete data
• Right to withdraw consent — for processing activities based on consent
• Right to limit processing — in certain circumstances
• Right to lodge a complaint — with the Department of Personal Data Protection Malaysia (JPDP)

To exercise these rights, contact us at [email protected]. We will respond within a reasonable timeframe.

10. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites. Please review the privacy notices of any external site you visit.

11. Children's Privacy

Our services are directed at adults. We do not knowingly collect personal data from individuals under 18 years of age. If we become aware that a minor has submitted personal data without appropriate consent, we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Significant changes will be communicated by updating the "Last Updated" date at the top of this page. We encourage you to review this policy periodically.

13. Contact

For any questions or requests relating to this policy or our handling of personal data, please contact:

• Email: [email protected]
• Address: 145 Persiaran Gurney, 10250 George Town, Penang, Malaysia
• Phone: +60 4 2293 8175