Privacy Policy

1. Introduction

Horolume ("we", "us", "our") operates from 56 Charoen Krung Road, Bang Rak, Bangkok 10500, Thailand. We offer watch repair and restoration services, and we take the protection of your personal information seriously.

This policy explains what data we collect when you contact us or visit our website, how we use it, how long we keep it, and what rights you hold over it. If anything here is unclear, please write to [email protected].

2. Data We Collect

We collect only what is necessary to respond to your enquiry and carry out the requested work. This includes:

• Contact details — your name, email address, and phone number when you submit the contact form or reach us by phone.
• Watch information — details about your timepiece, such as make, model, and condition, which you provide voluntarily.
• Correspondence — any written communication exchanged during the service process.
• Technical data — standard server logs including IP address, browser type, and pages visited. These are not linked to identifiable individuals.
• Cookie data — stored preferences and optional analytics data as described in our Cookie Policy.

We do not collect sensitive categories of personal data, payment card details, or children's information.

3. Legal Basis for Processing

We process your data on the following grounds:

• Contract performance — to provide the watch repair or restoration service you have requested.
• Legitimate interest — to respond to general enquiries and improve our service quality.
• Consent — for optional analytics and marketing cookies, which you may withdraw at any time via the Cookie Policy page.
• Legal obligation — to comply with applicable Thai law, including the Personal Data Protection Act B.E. 2562 (PDPA).

4. How We Use Your Data

• To respond to enquiries and arrange service appointments.
• To communicate progress updates while your piece is in our care.
• To issue written condition summaries and service documentation.
• To improve our website based on aggregate, anonymised usage data.
• To comply with legal and regulatory obligations.

We do not use your data for unsolicited direct marketing. We do not sell or share your data with third-party advertisers.

5. Data Sharing

Your personal data remains within Horolume except where disclosure is necessary for the following limited purposes:

• Service fulfilment — occasionally, specialist component sourcing may require sharing a watch reference (not personal data) with authorised parts suppliers.
• IT infrastructure — our hosting provider may process server logs in the ordinary course of operations. They are contractually bound to confidentiality.
• Legal obligation — we may disclose information if required to do so by Thai law or a valid government authority request.

6. Data Security

We take reasonable technical and organisational measures to protect your information against unauthorised access, alteration, or loss. These include:

• HTTPS encryption for all data transmitted through our website.
• Restricted access to personal data on a need-to-know basis within our small team.
• Regular review of data storage and access practices.
• Prompt investigation and notification in the event of a data breach, in line with PDPA requirements.

7. Data Retention

We retain personal data only as long as is necessary:

• Enquiry records with no resulting service: deleted after 12 months.
• Service records (including condition summaries): retained for 5 years to support any follow-up care or warranty reference.
• Server logs: retained for up to 90 days, then deleted.
• Cookie consent records: retained for 12 months or until consent is withdrawn.

8. Cookies

Our website uses essential, analytics, marketing, and preference cookies. Essential cookies are required for basic site operation. All other categories require your consent. Full details, including how to manage your preferences, are set out in our Cookie Policy.

9. Your Rights

Under the Thai Personal Data Protection Act (PDPA) and applicable standards, you have the right to:

• Access — request a copy of the personal data we hold about you.
• Rectification — ask us to correct inaccurate or incomplete data.
• Erasure — request deletion of your data where there is no ongoing legal or contractual basis for its retention.
• Restriction — ask us to limit processing in certain circumstances.
• Portability — receive your data in a structured, machine-readable format.
• Objection — object to processing based on legitimate interests.
• Withdraw consent — at any time, where processing is based on consent.
• Complaint — lodge a complaint with Thailand's Personal Data Protection Committee (PDPC) if you believe your rights have not been respected.

To exercise any of these rights, write to [email protected]. We will respond within 30 days.

10. Third-Party Links

Our website may contain links to external sites for reference purposes. We are not responsible for the privacy practices of those sites and encourage you to review their policies before sharing any personal information.

11. Children's Privacy

Our services are directed at adults aged 18 and over. We do not knowingly collect personal data from minors. If you believe a minor has submitted data to us, please contact us and we will delete it promptly.

12. Changes to This Policy

We may update this policy from time to time to reflect changes in our practices or legal obligations. Material changes will be noted on this page with a revised "Last updated" date. Continued use of our website following any update constitutes acceptance of the revised policy.