Privacy Policy
Last Updated: 15 January 2026 · Effective Date: 15 January 2026
1. Introduction
Springhaus ("we", "our", "us") is a watch repair and maintenance studio at 33 Jalan Laksamana, 75000 Melaka, Malaysia. We handle the personal information you share with us responsibly and in line with Malaysia's Personal Data Protection Act 2010 (PDPA). This policy explains what data we collect, how we use it, and your rights regarding it. Questions: [email protected].
2. Data We Collect
We collect the following personal information:
- Contact details: Name, email address, and phone number provided via our contact form or by phone.
- Watch and service information: Details about your timepiece shared when enquiring or booking a service.
- Usage data: Pages visited, time on site, browser type, and general location (city level) via analytics cookies — only if consented.
- Cookie preferences: Your consent choices, stored locally on your device.
We do not collect payment card details directly. No sensitive personal data categories (health, ethnicity, etc.) are processed.
3. Legal Basis for Processing
- Consent: When you submit our contact form or accept optional cookies.
- Contractual necessity: To manage your enquiry and deliver the agreed service.
- Legitimate interests: To improve our services based on aggregate usage patterns.
- Legal compliance: Where required under Malaysian law.
4. How We Use Your Data
- To respond to service enquiries and arrange appointments.
- To communicate service updates, assessments, and completion notices.
- To issue service documentation such as reports and water resistance certificates.
- To improve our website through aggregate analytics (if consented).
- To meet any applicable legal obligation.
We do not use your data for automated decision-making. We do not sell your data to third parties.
5. Data Sharing
We do not share your personal information with third parties except in these limited circumstances:
- Analytics providers: Anonymised data via Google Analytics if you consented to analytics cookies.
- Legal requirements: If required by law, court order, or a Malaysian regulatory authority.
- Business succession: If the business is transferred, your data would continue under the same privacy commitments.
6. Data Retention
Service records are retained for five years following the service date to support our 12-month workmanship commitment and assist with future service history. Contact enquiries that do not lead to a booking are deleted within 90 days. Analytics data is retained in aggregated form for 26 months.
7. Data Security
We take reasonable technical and organisational measures to protect the information we hold:
- Client records are accessible only to Springhaus staff directly involved in service delivery.
- Email communications are handled via secure servers.
- Physical service records are stored securely on premises.
- Our website is served over HTTPS.
If a breach occurs that may affect your rights, we will notify you and, where required, the relevant authority within the timeframe required by the PDPA.
8. Cookies
Our website uses cookies to function and, with your consent, to understand usage patterns. For full details, see our Cookie Policy.
9. Your Rights
Under the PDPA and in keeping with our data practices, you have the right to:
- Access: Request a copy of the personal data we hold about you.
- Correction: Ask us to correct inaccurate or incomplete data.
- Withdrawal of consent: Withdraw consent where consent was the legal basis. This does not affect prior processing.
- Restriction: Ask us to limit how we use your data in certain circumstances.
- Erasure: Request deletion where we no longer have a lawful basis to retain it.
To exercise these rights, email [email protected]. We will respond within 21 days. Complaints may also be directed to the Department of Personal Data Protection Malaysia (JPDP).
10. Third-Party Links
Our website may link to external resources. We are not responsible for the privacy practices of other sites and encourage you to review their policies independently.
11. Children's Privacy
Our services are intended for adults aged 18 and above. We do not knowingly collect personal data from individuals under 18. If we become aware that we have done so, we will delete the information promptly.
12. Changes to This Policy
We may update this policy from time to time. An updated version will be posted on this page with a revised "Last Updated" date. Continued use of our site or services following an update constitutes acceptance of the revised policy.
13. Contact
For privacy-related enquiries or to exercise your data rights:
- Email: [email protected]
- Post: Springhaus, 33 Jalan Laksamana, 75000 Melaka, Malaysia
- Phone: +60 6-284 7261 (Mon–Fri, 9 AM – 6 PM)