Legal
Privacy Policy
Last Updated: 10 April 2025
1. Introduction
Pelangi Tempa ("we," "us," "our") operates a watch repair and restoration workshop at 22 Jalan Sultan, 50000 Kuala Lumpur, Malaysia. This Privacy Policy describes how we collect, use, disclose, and safeguard personal data that you provide to us through our website or in the course of engaging our services.
We are committed to handling personal data with care and transparency. If you have questions about this policy, please contact us at [email protected].
2. Data We Collect
Information you provide directly
- Name and contact details (email address, telephone number)
- Postal address (where relevant to service delivery)
- Details about your watch and service requirements
- Any additional information you include in correspondence or intake forms
Information collected automatically
- Website usage data (pages visited, session duration) via analytics cookies
- Technical data (browser type, device type, IP address) for security and site operation
- Cookie preference data stored in your browser's local storage
3. Legal Basis for Processing
We process personal data under the following legal bases, consistent with Malaysia's Personal Data Protection Act 2010 (PDPA 2010):
- Consent: Where you have provided express consent for specific uses (e.g., marketing communications, analytics cookies)
- Contractual necessity: Where processing is required to deliver the service you have requested
- Legitimate interests: For internal record-keeping, service quality improvement, and security purposes
- Legal obligation: Where required by applicable Malaysian law
4. How We Use Your Data
- To process and respond to service enquiries
- To manage the intake, service, and return of watches entrusted to us
- To communicate with you during the service process
- To prepare written condition reports and intake documentation
- To improve our website and service offering through aggregated analytics
- To comply with applicable legal and regulatory obligations
We do not sell personal data to third parties. We do not use personal data for automated profiling or decision-making.
5. Data Retention
Personal data related to service enquiries is retained for a period of three years from the date of last contact. Photographic records and condition reports produced for the Premium Restoration Programme are retained for five years and are available to clients on request during that period. Analytics data is retained in aggregated, anonymised form and not linked to individual users.
6. Data Sharing
We do not share personal data with third parties except in the following circumstances:
- Service partners: Where sourcing replacement components requires communicating limited details (watch reference and required part) with a supplier. No personal identifying information beyond workshop reference numbers is shared in this context.
- Analytics providers: Aggregated usage data may be processed by our analytics service provider under a data processing agreement.
- Legal requirement: Where disclosure is required by Malaysian law or a lawful order from a competent authority.
7. Data Protection Measures
- Website communications are transmitted over HTTPS (TLS encryption)
- Physical intake documentation is stored securely within the workshop premises, accessible only to authorised workshop staff
- Digital records are maintained on password-protected systems with restricted access
- In the event of a data breach affecting your personal data, we will notify you within a reasonable timeframe as required under applicable law
8. Cookies
We use essential cookies for site operation and optional cookies for analytics purposes. You may manage your cookie preferences at any time via our Cookie Policy page. Rejecting non-essential cookies does not affect your ability to use our website or request our services.
9. Your Rights
Under Malaysia's Personal Data Protection Act 2010, you have the following rights regarding your personal data:
- The right to access personal data we hold about you
- The right to correct inaccurate or incomplete data
- The right to withdraw consent where processing is consent-based
- The right to request erasure of data we hold, subject to legal retention requirements
- The right to object to processing carried out on legitimate interest grounds
To exercise any of these rights, please write to us at [email protected]. We will respond within fourteen working days.
10. Third-Party Links
Our website may contain links to external sites. We are not responsible for the privacy practices of third-party websites and encourage you to review their privacy policies independently before providing any personal data.
11. Children's Privacy
Our services are intended for individuals aged 18 and above. We do not knowingly collect personal data from persons under 18. If you believe we have inadvertently received data from a minor, please contact us so we can take appropriate action.
12. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be reflected in the "Last Updated" date at the top of this page. We encourage you to review this page periodically. Continued use of our website following any update constitutes acceptance of the revised policy.
13. Contact
Data Controller: Pelangi Tempa
Address: 22 Jalan Sultan, 50000 Kuala Lumpur, Malaysia
Privacy enquiries: [email protected]