Privacy Policy

1. Introduction

Mutiara Tempo ("we", "us", "our") operates a watch repair atelier at 22 Jalan Larut, 10050 George Town, Pulau Pinang, Malaysia. This Privacy Policy explains how we collect, use, store, and protect personal information provided to us through our website and in the course of delivering our services.

We take privacy seriously and handle personal information with the same care that we apply to the watches entrusted to us. This policy is written in plain language and is intended to be read and understood by the people it applies to.

For questions about this policy or your personal data, contact us at [email protected].

2. What Data We Collect

We collect personal data in the following circumstances:

• Contact enquiries: When you submit a message through our website contact form, we collect your name, email address, and any additional details you choose to provide (phone number, message content).
• Service intake: When you bring a watch to the atelier, we collect your name, contact details, and information about the watch and service required, for the purpose of managing the service relationship and maintaining records.
• Website usage: We may collect standard web analytics data (pages visited, browser type, approximate location) through analytics tools, where you have consented to this via our cookie notice.
• Communication records: We retain records of correspondence (email, messages) related to service enquiries and ongoing work.

Legal Basis for Processing

• Contract performance: Processing your name and contact details to deliver the requested service.
• Legitimate interests: Maintaining service records and correspondence history for business purposes.
• Consent: Analytics and marketing cookies, where you have accepted these through our cookie notice.

Retention Periods

• Service records and correspondence: 7 years from the date of service completion.
• Contact form enquiries that did not result in a service: 12 months from the date of enquiry.
• Analytics data: As set by the analytics provider (typically 14–26 months).

3. How We Use Your Data

• To respond to your service enquiry or request for information.
• To manage the service relationship, including scheduling, progress updates, and collection arrangements.
• To maintain service records associated with your watches (useful for future service history and insurance purposes, and shared with you on request).
• To improve the functionality and content of our website, using aggregated analytics data.
• To comply with any applicable legal or regulatory obligations.

We do not use your personal data for unsolicited marketing. We do not sell or rent personal data to third parties. We do not share personal data with third parties except as described in this policy or where required by law.

4. How We Protect Your Data

• Our website uses HTTPS encryption for all data transmitted between your browser and our server.
• Digital service records and correspondence are stored on access-controlled systems with strong authentication.
• Physical intake records are stored securely within the atelier premises.
• Access to personal data is limited to those directly involved in the service relationship.
• In the event of a data breach that is likely to affect your rights, we will notify you without undue delay in accordance with applicable law.

5. Cookies

Our website uses cookies. Essential cookies are necessary for the website to function and cannot be disabled. Optional analytics and preference cookies are only used with your consent, which you can provide or withdraw through our cookie notice at any time.

For full details of the cookies we use, please refer to our Cookie Policy.

6. Your Rights

Under the Personal Data Protection Act 2010 (Malaysia), and where applicable under other data protection frameworks, you have the following rights:

• Access: To request a copy of the personal data we hold about you.
• Correction: To request that inaccurate or incomplete data be corrected.
• Erasure: To request deletion of your personal data, subject to our legal obligations to retain records.
• Withdrawal of consent: To withdraw consent for processing based on consent (such as analytics cookies) at any time.
• Objection: To object to processing based on legitimate interests.
• Complaint: To lodge a complaint with the Department of Personal Data Protection Malaysia (PDPD) if you believe your rights have not been observed.

To exercise any of these rights, contact us at [email protected]. We will respond within 21 days of receiving your request.

7. Third-Party Links

Our website may contain links to third-party websites (such as mapping services). We are not responsible for the privacy practices of those websites. We encourage you to read the privacy policies of any site you visit via a link from our website.

8. Children's Privacy

Our services are directed at adults aged 18 and over. We do not knowingly collect personal data from individuals under the age of 18. If you believe that a minor has provided personal data to us, please contact us at [email protected] and we will take appropriate steps to remove it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last Updated" date at the top of this page. We encourage you to review this policy periodically. Continued use of our website after changes have been published constitutes acceptance of the revised policy.

10. Contact