Privacy Policy

1. Introduction

Kanok ("we", "our", "us") operates the workshop at 62 Tha Phae Road, Si Phum, Chiang Mai 50200, Thailand. This Privacy Policy describes how we collect, use, and protect personal information submitted through our website or provided directly when arranging a watch service.

If you have any questions about how we handle personal data, write to us at [email protected]. We will respond within 14 days.

2. Personal data we collect

We collect only the information that is necessary to provide the watch repair and restoration service you have requested. This typically includes:

• Your name and contact details (email address, phone number)
• Description of the watch you are bringing in or sending for service
• Correspondence with us regarding assessments, approvals, and timelines
• Basic website usage data collected via cookies (see Section 6)

Legal basis for processing (PDPA, Thailand):

• Contract performance — to carry out the service you have requested
• Legitimate interest — to communicate about your watch's progress
• Consent — for analytics cookies, where you have accepted them

Retention: Service records are kept for five years after the service is completed. Contact data is removed upon your request or after five years of inactivity.

3. How we use your information

• To communicate with you about your watch service — assessments, updates, and collection arrangements
• To maintain a service record for each piece we work on
• To respond to enquiries submitted via the website contact form
• To understand how visitors use the website, in aggregate, in order to improve it

We do not use your personal information for unsolicited marketing. If you contact us and we wish to send you occasional workshop updates in the future, we will ask for your separate consent.

Third-party sharing: We do not sell, rent, or share your personal data with third parties for commercial purposes. Data is only shared with service providers who support our operations (e.g. email hosting), under appropriate data processing agreements, and only to the extent necessary.

4. Data protection measures

• Website data is transmitted over encrypted HTTPS connections
• Electronic records are stored on password-protected systems with limited access
• Physical service records are kept in a locked filing system within the workshop
• Only workshop staff who need access to service a specific watch can view its associated contact details
• In the event of a data breach, we will notify affected individuals within 72 hours of becoming aware, as required under the Thai Personal Data Protection Act (PDPA)

5. Cookies

Our website uses cookies to support basic functionality and, if you consent, to understand how it is being used. Essential cookies are always active. Analytics and preference cookies are only set if you accept them via the cookie notice shown when you first visit the site.

For full details, see our Cookie Policy.

6. Your rights under the PDPA (Thailand)

Under the Thai Personal Data Protection Act B.E. 2562 (2019), you have the following rights regarding your personal data:

• Right to access: You may request a copy of the personal data we hold about you
• Right to rectification: You may ask us to correct inaccurate data
• Right to erasure: You may request deletion of your data, subject to legal retention obligations
• Right to data portability: You may request your data in a structured, commonly used format
• Right to object: You may object to processing where we rely on legitimate interest
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time
• Right to lodge a complaint: You may contact the Office of the Personal Data Protection Committee (PDPC) of Thailand

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

7. Third-party links

Our website may contain links to external sites (for example, maps services). We are not responsible for the privacy practices of those sites and recommend reviewing their privacy policies independently before providing any personal information.

8. Children's privacy

Our services are intended for individuals aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe a minor has submitted data to us, please contact us at [email protected] and we will remove it promptly.

9. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. If changes are material, we will make reasonable efforts to notify clients who have provided contact details. Continued use of the website after any update constitutes acceptance of the revised policy.

10. Contact — data-related enquiries

For any privacy or data-related questions, please contact us: