Privacy Policy | Thong Mechanism

1. Data We Collect

When you contact us through the enquiry form on our website, we collect the following information:

Your name
Your email address
Your phone number (if provided)
The content of your message or enquiry

We also collect standard technical data automatically when you visit our website, including your IP address, browser type, pages visited, and time of visit. This data is collected through cookies and analytics tools as described in our Cookie Policy.

At our physical workshop, we collect your contact details and watch information for service documentation purposes at the time of drop-off.

2. Legal Basis for Processing

We process your personal data on the following legal bases under Thailand's Personal Data Protection Act B.E. 2562 (PDPA) and applicable principles:

Contract performance: Processing your contact details to respond to service enquiries and manage watch repair services.
Consent: Use of non-essential cookies and analytics, which you can withdraw at any time through your cookie preferences.
Legitimate interests: Basic security measures, fraud prevention, and improving our website.

3. How We Use Your Data

Personal information you provide is used for the following purposes only:

Responding to your service enquiry or booking request
Managing your watch repair or assessment at our workshop
Communicating updates about your watch's service status
Maintaining service records attached to your watch
Complying with legal obligations where applicable

We do not use your personal data for unsolicited marketing communications without your explicit consent, and we do not sell or share your information with any third party for commercial purposes.

4. Data Retention

Contact enquiry data is retained for a period of 24 months from the date of your last interaction with us, after which it is deleted unless you have an active or ongoing service relationship with us.

Workshop service records (including watch descriptions and work performed) may be retained for up to five years for professional and legal reference purposes. These records do not contain sensitive personal data beyond your name and contact information.

5. Data Sharing

We do not sell, rent, or share your personal data with third parties for marketing purposes. Limited data sharing may occur in the following circumstances:

Analytics providers: Anonymised usage data may be processed by analytics tools (e.g. Google Analytics) to help us understand website performance. These providers are contractually bound to data protection standards.
Legal obligations: We may disclose personal data to Thai authorities when required by law.
Service providers: Where necessary to provide our services (e.g. email hosting), data may be processed by contracted providers under appropriate data protection agreements.

6. Data Protection Measures

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. These measures include:

Encrypted data transmission via HTTPS on our website
Access controls limiting data access to authorised staff only
Secure storage of physical workshop records
Regular review of data handling practices

In the event of a data breach that poses a risk to your rights, we will notify you and the relevant supervisory authority in accordance with applicable Thai law within the timeframes required.

7. Cookies

Our website uses cookies to provide basic functionality and, with your consent, to analyse website usage. We categorise cookies as essential, analytics, marketing, and preference cookies. You can manage your cookie preferences at any time through our cookie consent panel or by visiting our Cookie Policy page.

8. Your Rights

Under Thailand's PDPA and applicable data protection principles, you have the following rights regarding your personal data:

Right to access: You may request a copy of the personal data we hold about you.
Right to rectification: You may request correction of inaccurate or incomplete data.
Right to erasure: You may request deletion of your data where there is no legitimate reason for continued processing.
Right to restriction: You may request that we restrict processing of your data in certain circumstances.
Right to data portability: You may request your data in a structured, commonly used format.
Right to object: You may object to processing based on legitimate interests.
Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting prior lawful processing.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

9. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites and recommend reviewing their privacy policies independently.

10. Children's Privacy

Our services are intended for adults aged 18 and over. We do not knowingly collect personal data from individuals under 18. If we become aware that we have inadvertently collected data from a minor, we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last Updated" date at the top of this page. Continued use of our website following any changes constitutes acceptance of the updated policy. We recommend checking this page periodically.

12. Contact for Privacy Matters

For any questions, concerns, or requests related to your personal data, contact us at:

Email: [email protected]
Post: Thong Mechanism, 412 Phra Ram 3 Road, Bang Kho Laem, Bangkok 10120, Thailand
Phone: +66 2 294 67 38

For unresolved complaints regarding data protection, you may also contact Thailand's Personal Data Protection Committee (PDPC) as the relevant supervisory authority.