Privacy Policy

1. Introduction

Ormolu ("we", "us", "our") operates a watch repair and timepiece restoration bench at Level 8, Menara Sri Cempaka, Jalan Tun Perak, 50050 Kuala Lumpur, Malaysia. This policy explains how we collect, use and protect personal information provided to us through our website at ormolu.blog and through direct contact. We are committed to handling your information with care and in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia.

2. What We Collect

We collect only information that is necessary to respond to enquiries and carry out service work. This includes:

• Name and contact details (email address, telephone number) provided via the enquiry form or direct communication
• Description of the timepiece and the nature of the work requested
• Correspondence relating to scope, pricing and delivery of work
• Technical job records associated with your piece (timing traces, condition notes, photographs)

We also collect basic analytics data about how the website is used — page views, session duration and navigation paths — through cookies. This data is not linked to personal identity.

3. How We Use Your Information

Personal information is used for the following purposes:

• Responding to your enquiry and communicating about the scope and progress of work
• Maintaining a job record associated with your piece for our internal documentation
• Following up after work is completed, where relevant
• Improving the function of this website using anonymised analytics data

We do not use your contact details for marketing purposes. We do not send newsletters or promotional communications. We do not sell or rent your personal information to third parties.

Legal basis for processing

Processing of personal data is carried out on the basis of your consent (by submitting an enquiry form), on the basis of performing a service contract (when a job is confirmed), and on the basis of our legitimate interest in maintaining accurate job records.

4. Data Retention

Contact details and correspondence are retained for as long as the client relationship is active and for a period of three years thereafter, for the purpose of warranty follow-up and job reference. Technical records (timing traces, photographs, condition notes) may be retained indefinitely for professional archival purposes but are not associated with identifiable contact details beyond the retention period described above.

5. Data Protection Measures

We take reasonable steps to protect personal information held by us:

• This website uses HTTPS encryption for all data in transit
• Contact form submissions are transmitted securely and stored in a password-protected environment
• Physical job records are held in a locked office at our premises
• Access to personal information is limited to the members of the team whose role requires it

In the event of a data breach that is likely to affect your rights and freedoms, we will notify you and the relevant authority in accordance with PDPA obligations.

6. Cookies

We use cookies to understand how the website is used and to remember your cookie consent preference. Cookies do not identify you personally. For full information on the cookies we use and how to manage them, please read our Cookie Policy.

7. Third-Party Services

We use Google Maps via an embedded iframe on our homepage to display our location. This embed may set cookies from Google. We do not control Google's data practices. Please refer to Google's privacy policy for information on how they handle data from their Maps service.

We may use basic web analytics provided by a third-party provider. Any data shared with analytics providers is anonymised and does not include personally identifiable information.

Links to third-party websites may appear in our content. We are not responsible for the privacy practices of those websites.

8. Your Rights

Under the PDPA and, where applicable, other data protection legislation, you have the right to:

• Request access to the personal data we hold about you
• Request correction of inaccurate personal data
• Request deletion of your personal data (subject to our legitimate interests in retaining job records)
• Withdraw consent to processing at any time
• Object to processing of your personal data
• Lodge a complaint with the relevant data protection authority in Malaysia

To exercise any of these rights, contact us at [email protected]. We will respond within 21 days.

9. Children's Privacy

Our services are directed at adults. We do not knowingly collect personal information from individuals under 18 years of age. If you believe we have received information from a minor, please contact us and we will remove it promptly.

10. Changes to This Policy

This policy may be updated from time to time. When it is, the "Last updated" date at the top will change. Continued use of the website after a policy update constitutes acceptance of the revised policy. Material changes will be noted on the website for 30 days following the update.

11. Contact for Data Enquiries

If you have questions about this policy or about how your personal data is handled, contact us at:

• Email: [email protected]
• Address: Level 8, Menara Sri Cempaka, Jalan Tun Perak, 50050 Kuala Lumpur, Malaysia