Privacy Policy

1. Introduction

Chang Watchworks ("we", "us", "our") operates a watch repair workshop at 305 Silom Road, Bang Rak, Bangkok 10500, Thailand. This privacy policy explains how we collect, use, store, and protect personal data when you interact with us — whether through our website, by visiting the workshop, or by contacting us directly.

We take the handling of personal data seriously. We collect only what is necessary, use it only for the purposes described here, and do not sell or share it with third parties for marketing purposes. Questions about this policy can be sent to [email protected].

2. Data We Collect

Information you provide directly:

• Name and contact details (email address, phone number) when you submit an enquiry or drop off a watch
• Watch description and service request details provided by you
• Payment information processed at the workshop (we do not store card details online)

Information collected automatically:

• Standard web server logs including IP address, browser type, and pages visited
• Cookie data as described in our Cookie Policy
• Analytics data (aggregated, not personally identifying) via tools such as Google Analytics if enabled

3. Legal Basis for Processing

• Contract performance — processing your service request and managing the repair
• Legitimate interest — communicating updates on a watch in our care, maintaining service records
• Consent — for marketing communications, if you have opted in
• Legal obligation — retaining financial records as required under Thai tax and accounting regulations

4. How We Use Your Data

• To respond to enquiries and provide the requested service
• To contact you with updates on your watch during a service
• To issue receipts and maintain service records
• To improve the usability of our website based on aggregated usage data
• To comply with legal and tax obligations

We do not use your data for automated decision-making, profiling, or targeted advertising.

5. Data Retention

Service records including contact details are retained for five years following completion of a service, to support any follow-up queries and for accounting purposes. Website analytics data is retained for twenty-six months. Contact enquiries that did not result in a service are deleted after twelve months.

6. Data Protection Measures

• Data is stored on password-protected systems with access limited to workshop staff
• Our website uses HTTPS encryption for all connections
• Physical service records are stored in a locked cabinet at the workshop
• In the event of a data breach affecting your personal data, we will notify you without undue delay

7. Third-Party Services

We may use the following third-party services, each with their own privacy practices:

• Google Analytics (website usage statistics, if enabled)
• Google Maps (embedded map on our website — no personal data submitted)
• Email service providers for communication

We do not sell personal data to any third party.

8. Cookies

We use cookies to support basic website functionality and, if consented to, to collect anonymous usage statistics. You can manage your cookie preferences at any time via our Cookie Policy page.

9. Your Rights

Under the Personal Data Protection Act B.E. 2562 (Thailand's PDPA) and applicable data protection principles, you have the right to:

• Request access to personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your personal data where there is no lawful basis for retention
• Object to processing of your personal data in certain circumstances
• Withdraw consent for communications at any time
• Lodge a complaint with the Personal Data Protection Committee (Thailand) if you believe your rights have been infringed

To exercise any of these rights, contact us at [email protected]. We will respond within thirty days.

10. External Links

Our website may contain links to external sites. We are not responsible for the content or privacy practices of those sites. We recommend reviewing the privacy policy of any external site you visit.

11. Children's Privacy

Our services are intended for adults aged 18 and over. We do not knowingly collect personal data from children. If we become aware that data has been collected from a person under 18, we will delete it promptly.

12. Changes to This Policy

We may update this policy from time to time to reflect changes in our practices or legal requirements. The date of the most recent update is shown at the top of this page. Continued use of our website following an update constitutes acceptance of the revised policy.