Privacy Policy

1. Introduction

Phaya ("we", "our", "us") is a watch repair and restoration workshop located at 29 Loi Kroh Road, Chang Khlan, Chiang Mai 50100, Thailand. We are committed to handling your personal data with care and in accordance with applicable data protection laws, including Thailand's Personal Data Protection Act B.E. 2562 (PDPA).

This policy explains what data we collect, how we use it, how long we retain it, and what rights you have in relation to it. If you have questions, contact us at [email protected].

2. Data We Collect

We collect the following categories of personal data:

• Contact information: name, email address, phone number (when provided)
• Service information: details about your watch and the service requested
• Communication records: emails, messages, and notes from conversations with us
• Website usage data: pages visited, time spent, browser type (collected via analytics cookies, with your consent)

We do not collect payment card details directly. Any payment information is handled by third-party processors.

3. How We Collect Data

We collect data through:

• The contact form on our website
• Direct communication by phone or email
• In-person interactions at the workshop
• Cookies and analytics tools (with your consent — see Section 8)

4. Legal Basis for Processing

We process your data on the following grounds:

• Contract performance: to carry out the watch service you have requested
• Legitimate interests: to respond to enquiries and manage our business operations
• Consent: for analytics and marketing communications, where you have opted in
• Legal obligation: to comply with applicable Thai law

5. How We Use Your Data

• To respond to enquiries and provide watch repair or restoration services
• To communicate service updates, timelines, and completion notices
• To maintain service records for your watch (relevant to restoration documentation)
• To improve our website based on usage patterns (analytics, with consent)
• To send occasional service reminders, if you have agreed to receive them

We do not use your data for automated decision-making or profiling.

6. Data Sharing

We do not sell your personal data. We may share it with:

• Parts suppliers, where a watch reference number must be provided to source components
• Postal and courier services, where a watch is being returned by post
• Analytics providers (e.g. Google Analytics), subject to your cookie consent
• Authorities, if required by Thai law

Any third party we engage is required to handle your data securely and only for the purpose it was shared.

7. Data Retention

We retain your personal data for as long as necessary to fulfil the purpose for which it was collected:

• Service records: up to seven years for accounting and documentation purposes
• Enquiry data where no service resulted: up to twelve months
• Analytics data: in accordance with the provider's retention settings (typically 14 months)

After the retention period, data is deleted or anonymised.

8. Cookies

Our website uses cookies. Essential cookies are required for basic site function. Optional analytics and marketing cookies are set only with your consent, which you can manage via our cookie banner or the Cookie Policy page.

9. Data Security

We store contact and service data on password-protected systems. Physical workshop records are held securely on-premises. We use standard SSL/TLS encryption for data transmitted via our website. In the event of a data breach that is likely to cause risk to your rights, we will notify you and the relevant authority as required by the PDPA.

10. Your Rights

Under Thailand's PDPA, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request erasure of data we no longer need
• Object to processing based on legitimate interests
• Withdraw consent at any time (for consent-based processing)
• Request restriction of processing in certain circumstances
• Lodge a complaint with Thailand's Personal Data Protection Committee

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

11. Children's Privacy

Our services are directed at adults. We do not knowingly collect personal data from persons under 18. If you believe a minor has submitted data to us, please contact us and we will delete it promptly.

12. Third-Party Links

Our website may include links to external sites. We are not responsible for the privacy practices of those sites and encourage you to review their policies separately.

13. Changes to This Policy

We may update this policy from time to time. The "Last updated" date at the top of this page will reflect any changes. Continued use of our website or services after a change constitutes acceptance of the revised policy.

14. Contact

Data controller: Phaya
Address: 29 Loi Kroh Road, Chang Khlan, Chiang Mai 50100, Thailand
Email: [email protected]
Phone: +66 53 271 6843