Legal Document

Privacy Policy

Last updated: 20 January 2025 · Effective date: 20 January 2025

Introduction

Tockwell ("we", "us", "our") operates from 22 Jalan Dewan Sultan Sulaiman, 30000 Ipoh, Perak, Malaysia. This Privacy Policy describes how we collect, use, store, and protect personal information provided to us through our website and in the course of our watchmaking services. We are committed to handling your information with the same care we apply to every timepiece that enters our workshop.

This policy applies to all personal data processed by Tockwell in connection with services offered through tockwell.world and our physical workshop. By using our website or engaging our services, you acknowledge the practices described in this policy.

Data We Collect

Information you provide directly

When you contact us through our website form, email, or telephone, we may collect your name, email address, and telephone number. When you bring a watch for service, we collect details about the timepiece and any information relevant to the service scope you have agreed.

Information collected automatically

Our website may collect standard server log data including your IP address, browser type, the pages you visit, and the time and date of your visit. We use cookies and similar technologies as described in our Cookie Policy.

Legal basis for processing (PDPA Malaysia)

We process your personal data under the Personal Data Protection Act 2010 (PDPA) of Malaysia. Our legal bases include: your consent where you have provided it; the necessity of processing to fulfil a service contract with you; and our legitimate interests in operating a professional watchmaking business.

How We Use Your Data

We use personal data you provide to respond to enquiries, prepare and deliver watch services, communicate progress updates during a service, and maintain service records for quality purposes. We do not use your contact information for unsolicited marketing. If we wish to contact you about matters beyond your service, we will seek your consent first.

Your contact information is not sold, rented, or disclosed to third parties for commercial purposes. We may share limited information with trusted service providers (such as secure couriers or specialist parts suppliers) where strictly necessary to fulfil your service, and those parties are bound by confidentiality obligations.

Data Retention

We retain service records for a period of five years following completion of the service. This allows us to refer to service history should you return a watch for further care. Contact information provided for enquiries that do not result in a service engagement is deleted after twelve months. You may request earlier deletion at any time (see Your Rights below).

Data Protection Measures

We implement appropriate technical and organisational measures to protect personal data against accidental loss, alteration, disclosure, or unauthorised access. Our website is served over HTTPS. Access to client records is restricted to workshop personnel on a need-to-know basis. Physical records are held in a secured office within our workshop premises.

In the event of a data breach that is likely to result in a risk to your rights, we will notify you and the relevant authority without undue delay in accordance with applicable law.

Cookies

Our website uses cookies for essential functionality and, with your consent, for analytics purposes. You can manage your cookie preferences at any time via our Cookie Policy page.

Your Rights

Under the PDPA 2010 and other applicable data protection frameworks, you have rights including the right to access personal data we hold about you, to request correction of inaccurate data, to request erasure of your data where we no longer have a lawful basis for holding it, and to withdraw consent where processing was based on consent.

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within thirty days. If you are dissatisfied with our response, you have the right to lodge a complaint with the relevant supervisory authority in Malaysia.

Third-Party Links

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites and encourage you to review their policies independently.

Children's Privacy

Our services are intended for individuals aged 18 and above. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal information, please contact us so we can address the matter appropriately.

Changes to This Policy

We may update this policy from time to time to reflect changes in our practices or applicable law. Where changes are material, we will note the updated effective date at the top of this page. Continued use of our website or services after such changes constitutes acceptance of the revised policy.

Contact

For questions, requests, or concerns about this Privacy Policy or your personal data, please contact us at:

  • Email: [email protected]
  • Post: Tockwell, 22 Jalan Dewan Sultan Sulaiman, 30000 Ipoh, Perak, Malaysia
  • Telephone: +60 5-3174 8962