Privacy Policy

1. Introduction

Mainspring Works ("we", "us", "our") operates a watch repair and timepiece restoration workshop at Suite 5-2, Menara Landmark, Jalan Ngee Heng, 80000 Johor Bahru, Malaysia. This policy explains what personal data we collect when you use this website or engage our services, how we use it, and what rights you hold over it.

This policy applies to data collected through our website at mainsprim.blog, through our contact form, and through direct communication by email or telephone. It does not apply to third-party websites we may link to.

2. Personal Data We Collect

We collect the following categories of personal data:

• Contact details: Name, email address, and telephone number submitted through our enquiry form or provided during intake.
• Service information: Details about the timepiece brought in — make, model, serial number, known history, and the nature of the enquiry.
• Communications: Emails, messages and any other correspondence you send to us.
• Usage data: Standard web server logs including IP address, browser type, pages visited and visit timestamp, collected automatically.
• Cookie data: Preferences stored in your browser via our cookie consent mechanism. See Section 5 and our Cookie Policy for details.

Legal Basis for Processing

• Contract performance — to carry out and communicate about requested repair services.
• Legitimate interests — to maintain service records and respond to enquiries.
• Consent — for optional analytics and marketing cookies, given through our cookie banner.
• Legal obligation — to retain records as required under Malaysian law.

Retention Periods

Service records are kept for seven years from completion of work, in line with standard business record-keeping requirements under Malaysian law. Contact enquiries that do not result in a service engagement are deleted within twelve months. Cookie consent records are retained for twelve months.

3. How We Use Your Data

• To respond to enquiries and provide written estimates.
• To carry out and document the repair or assessment service agreed.
• To maintain service records that you or a future repairer may need to reference.
• To send status updates about work in progress.
• To understand how the website is used, where consent for analytics cookies has been given.

We do not use your personal data for automated decision-making or profiling. We do not send marketing emails. We do not sell, rent or share your personal data with third parties for commercial purposes.

Third-Party Service Providers

We may use third-party analytics tools (such as Google Analytics, where consent is given) to understand site usage. These providers receive anonymised or pseudonymised data and are bound by their own data processing agreements. We do not share identifiable personal data with them.

4. How We Protect Your Data

• Website connections are served over HTTPS (TLS encryption in transit).
• Service records are stored on password-protected systems with access limited to workshop staff.
• Physical intake documents are held in a locked cabinet within the workshop.
• In the event of a data breach that poses a risk to individuals, affected persons will be notified without undue delay.

5. Cookies

Our website uses essential cookies required for basic operation, and optional analytics and preference cookies where you have consented. You can review and change your cookie preferences at any time via our Cookie Policy page.

Your cookie consent choice is stored in your browser's local storage. It does not expire automatically; you may withdraw it at any time by visiting the Cookie Policy page.

6. Your Rights

Under the Personal Data Protection Act 2010 (Malaysia) and applicable data protection principles, you have the following rights:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Erasure: Request deletion of data we no longer have a lawful reason to hold.
• Objection: Object to processing based on legitimate interests.
• Withdrawal of consent: Withdraw consent for optional cookie processing at any time.
• Complaint: Lodge a complaint with the relevant supervisory authority. In Malaysia, the relevant body is the Department of Personal Data Protection (JPDP) under the Ministry of Communications and Digital.

To exercise any of the above rights, contact us at [email protected]. We will respond within 30 days.

7. Third-Party Links

This website may contain links to external sites. We are not responsible for the privacy practices of those sites and recommend reading their privacy policies before providing any personal data.

8. Children's Privacy

Our services are intended for persons aged 18 and over. We do not knowingly collect personal data from individuals under 18. If you believe a minor has submitted personal data to us, please contact us and we will delete it promptly.

9. Changes to This Policy

We may update this policy from time to time. Material changes will be noted on this page with a revised "Last Updated" date. Continued use of the site after changes are posted constitutes acceptance of the revised policy.

10. Contact

For any questions about this policy or how your data is handled: