Legal
Privacy Policy
Last updated: 15 June 2025
This policy describes how Hairspring ("we", "us", "our") collects, uses, and safeguards personal data when you use our website or contact us regarding our watch repair services. We are committed to handling your information with care and transparency, in accordance with the Personal Data Protection Act B.E. 2562 (PDPA) of Thailand.
1. Data Controller
Business Name: Hairspring
Address: 88 Nimmanhaemin Road, Suthep, Chiang Mai 50200, Thailand
Contact: [email protected]
2. What Data We Collect
We collect only the personal data that is necessary to provide our services or to respond to your enquiries. This includes:
- Contact details: name, email address, and telephone number provided through our contact form or during in-person drop-off.
- Service information: details about the watch you bring in, including brand, reference, and condition notes taken at intake.
- Technical data: IP address, browser type, and pages visited — collected automatically when you use our website.
- Cookie data: preferences stored in your browser as described in our Cookie Policy.
3. How We Use Your Data
Personal data is used for the following purposes:
- To respond to your enquiries and arrange service appointments.
- To manage watch intake, service, and return processes.
- To contact you if timelines change or additional work is identified during a service.
- To maintain internal service records for the benefit of the customer (e.g. overhaul history).
- To improve the functionality and usability of this website through anonymised analytics.
We do not use your personal data for unsolicited marketing. If you have opted in to receive updates from us, you may withdraw that consent at any time by contacting us at [email protected].
4. Legal Basis for Processing
We process your personal data on the following legal grounds under the PDPA:
- Contract performance: where data is required to carry out a requested service.
- Legitimate interests: for service records, communication, and website security.
- Consent: for cookies and optional communications, where you have given explicit agreement.
5. Data Retention
Service and contact records are retained for a period of three years following the completion of a service, unless you request earlier erasure. Website technical logs are held for no longer than 12 months. We do not retain data beyond the period necessary for its original purpose.
6. Data Sharing
We do not sell your personal data. We may share it only in the following circumstances:
- Service providers: third-party tools used to operate this website (e.g. hosting, analytics), bound by appropriate data processing agreements.
- Legal requirements: where disclosure is required by Thai law or a competent authority.
7. Data Protection Measures
Your data is stored on servers with industry-standard access controls and encryption in transit. Access is limited to staff who require it for their work. In the event of a breach that may affect your rights, we will notify relevant parties within the timeframe required under the PDPA.
8. Cookies
This website uses cookies for essential functionality, analytics, and preferences. You can manage your cookie preferences at any time via our Cookie Policy page. Essential cookies cannot be disabled as they are required for the site to operate.
9. Your Rights
Under the PDPA, you have the following rights regarding your personal data:
- The right to access your personal data held by us.
- The right to rectification of inaccurate or incomplete data.
- The right to erasure, subject to legal retention requirements.
- The right to restrict or object to certain types of processing.
- The right to data portability where technically feasible.
- The right to withdraw consent at any time without affecting prior processing.
- The right to lodge a complaint with the Office of the Personal Data Protection Commission (PDPC), Thailand.
To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.
10. Third-Party Links
This website may contain links to external sites. We are not responsible for the privacy practices of those sites and encourage you to review their policies independently.
11. Children's Privacy
Our services are intended for adults (18 years and older). We do not knowingly collect personal data from persons under the age of 18. If you believe a minor has submitted data through our site, please contact us so that we may delete it.
12. Policy Updates
We may update this policy periodically to reflect changes in our practices or applicable law. The current version will always be published on this page with a revised "Last updated" date. Continued use of our website after changes constitutes acceptance of the updated policy.
13. Contact for Privacy Matters
For any questions or requests relating to this privacy policy, please contact:
Email: [email protected]
Address: 88 Nimmanhaemin Road, Suthep, Chiang Mai 50200, Thailand