Privacy Policy

1. Introduction

Lanna Horology ("we", "us", "our") operates a watch repair workshop at 22 Nimmanhaemin Road, Mueang, Chiang Mai 50200, Thailand. This Privacy Policy explains how we collect, use, store, and protect personal data provided by individuals ("you") when you contact us or engage our services.

We take data discretion seriously. Personal information collected in connection with a service enquiry or watch repair is used only to manage that service and communicate with you. It is not sold, traded, or used for unrelated purposes.

2. Data We Collect

We may collect the following categories of personal data:

• Identity data: name and, where provided, surname
• Contact data: email address, phone number
• Service data: details about the watch(es) you bring or enquire about
• Technical data: IP address, browser type, and pages visited (via standard server logs and, where applicable, analytics cookies)
• Communication data: records of messages exchanged in connection with a service

Data is collected through: the enquiry form on our website; direct email or telephone contact; and in-person at the workshop.

Legal basis: Processing of personal data is based on (a) your consent where you submit a form or make contact, (b) the performance of a service contract, and (c) our legitimate interest in maintaining records of work carried out and communicating about service progress.

Retention: Contact and service data is retained for up to three years from the date of last contact or service, after which it is securely deleted unless legal obligations require longer retention.

3. How We Use Personal Data

Personal data collected is used for the following purposes:

• Responding to service enquiries and providing condition assessments
• Managing and communicating about ongoing watch repair work
• Preparing and delivering service documentation
• Sending service-related follow-up messages (e.g. notification that a watch is ready for collection)
• Improving the website through anonymised analytics data
• Complying with any applicable legal or regulatory requirements

We do not send marketing messages without your explicit consent. You may withdraw consent at any time by contacting us at [email protected].

Data sharing: We do not sell or share personal data with third parties for commercial purposes. Data may be shared with service providers who assist us in operating the website (such as hosting providers), subject to appropriate confidentiality agreements. We may disclose data where required by Thai law or court order.

4. Data Protection Measures

• Website data is transmitted over encrypted HTTPS connections
• Digital records are stored on access-controlled systems with regular security review
• Physical records at the workshop are kept in secure storage with restricted access
• Access to client data is limited to those directly involved in the relevant service
• In the event of a data breach that poses a risk to your rights, we will notify you and the relevant authority as required under applicable law

5. Cookies

Our website uses cookies to support basic functionality and, with your consent, to gather anonymised usage information that helps us understand how the site is used. Strictly necessary cookies are required for the site to function. All others require your consent.

You can manage cookie preferences at any time via our Cookie Policy page.

6. Your Rights

Under Thailand's Personal Data Protection Act B.E. 2562 (PDPA) and applicable international standards, you have the following rights in relation to your personal data:

• Right of access: request a copy of the personal data we hold about you
• Right to rectification: ask us to correct inaccurate or incomplete data
• Right to erasure: request deletion of your data, subject to legal retention requirements
• Right to data portability: receive your data in a structured, commonly used format
• Right to object: object to processing based on legitimate interest
• Right to restrict processing: request that processing be limited in certain circumstances
• Right to withdraw consent: withdraw any consent given at any time, without affecting the lawfulness of processing prior to withdrawal

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. If you believe your rights have not been respected, you may lodge a complaint with the Office of the Personal Data Protection Committee of Thailand.

7. Third-Party Links

Our website may contain links to external websites. We have no control over the content or privacy practices of those sites and are not responsible for them. We recommend reviewing the privacy policy of any external site you visit.

8. Children's Privacy

Our services are intended for individuals aged 18 and over. We do not knowingly collect personal data from children under 18. If you believe we have inadvertently collected such data, please contact us and we will delete it promptly.

9. Changes to This Policy

This policy may be updated from time to time. The date at the top of this page indicates when it was last revised. Continued use of the website or our services following a policy update constitutes acceptance of the revised terms. For significant changes, we will make reasonable efforts to notify affected clients directly.

10. Contact for Privacy Enquiries

For any questions relating to this policy or to exercise your data rights, please contact: