Privacy Policy

Last updated: 10 July 2025

Mainspring Row ("we", "us", "our") operates the website at mainspr.pro and provides watch repair services from our workshop at 6 Jalan Telawi 3, Bangsar Baru, 59100 Kuala Lumpur, Malaysia. This policy explains how we handle personal information that comes to us through our website or through the course of providing services.

We hold this information only as long as it is needed and do not sell it to third parties. If you have questions about anything in this document, write to us at [email protected].

1. Data we collect

We collect only what is needed to respond to enquiries and to carry out workshop services:

• Contact enquiries: name, email address, telephone number (if provided), and the message text submitted through the contact form.
• Service intake: a description of the watch, including make, model and reference if known, provided at drop-off or by email.
• Technical data: IP address, browser type and approximate location collected automatically when you visit our website, via server logs and analytics cookies where consent has been given.

We do not request or store payment card details. Payments made in person at the workshop are the only method currently in use.

2. Legal basis for processing

Under Malaysia's Personal Data Protection Act 2010 (PDPA), we process personal data on the following grounds:

• Contract performance: to handle your service enquiry, arrange intake, communicate during the service and return your watch.
• Legitimate interest: to maintain records of work carried out, for accounting, and to follow up on outstanding collections.
• Consent: for analytics cookies, where you have chosen to accept them via the cookie banner.

3. How we use the data

• To respond to website enquiries within one working day.
• To issue written service proposals, scopes and reports.
• To contact you at key points during a service (as described on our Services page).
• To maintain job records for the watch's service history and for our own accounts.
• To analyse website usage in aggregate, where cookies consent has been given, in order to improve the site.

We do not use personal data for marketing communications. We do not share data with advertising networks.

4. Data retention

• Contact form messages: retained for 12 months, then deleted unless a service followed from the enquiry.
• Service records (watch description, written reports, photographs, correspondence): retained for 7 years for accounting and warranty reference purposes.
• Analytics data: aggregated and anonymised after 26 months.

5. Data protection measures

• Website traffic is encrypted via HTTPS.
• Service records are stored in password-protected systems with access restricted to workshop staff.
• Physical job files are held in locked storage at the workshop premises.
• If we become aware of a data breach that affects your personal information, we will notify you within a reasonable time and take steps to contain the incident.

6. Cookies

Our website uses cookies for basic session management and, where you consent, for anonymised analytics. Full details are in our Cookie Policy. You can change your preferences at any time from that page.

7. Third-party services

We may use the following third-party tools, each with their own privacy policy:

• Google Analytics — anonymised website usage statistics (only if consent is given).
• Email service provider — for sending and receiving correspondence. Emails are not stored on third-party servers beyond standard delivery logs.

Our website may link to external sites. We are not responsible for the privacy practices of those sites.

8. Your rights under the PDPA (Malaysia)

Under Malaysia's Personal Data Protection Act 2010, you have the right to:

• Request access to the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Withdraw consent to processing (where consent is the legal basis).
• Request that we cease processing data that is causing you distress.

To exercise any of these rights, contact us at [email protected]. We will respond within 21 days. Complaints may be directed to the Department of Personal Data Protection Malaysia (PDPD).

9. Children's privacy

Our services are intended for adults aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe we have received data from a minor, please contact us and we will delete it.

10. Changes to this policy

We may update this policy when our practices change. The revised policy will be posted on this page with an updated date at the top. Continued use of the website after a change constitutes acceptance of the revised terms.

11. Contact

Data controller: Mainspring Row
6 Jalan Telawi 3, Bangsar Baru, 59100 Kuala Lumpur, Malaysia
Email: [email protected]
Telephone: +60 3-2094 7658