Legal · Data Protection
Privacy Policy
Mainspring takes reasonable care with the personal information you share with us. This document explains what we collect, why we collect it, and how it is handled. We aim to be straightforward about these matters rather than obscure them.
Last Updated: 12 May 2025 · Effective Date: 12 May 2025
Section 01
Introduction
Mainspring ("we", "us", "our") is a watch repair and servicing workshop located at 305 Beach Road, Nong Prue, Bang Lamung, Chonburi 20150, Thailand. We act as the data controller for the personal information described in this policy.
This Privacy Policy applies to information collected through our website at mainsprin.pro, through enquiry forms, and in the course of providing our repair and servicing work. It does not extend to third-party websites that may be linked from our pages.
If you have questions about how we handle your data, please write to us at [email protected] before using the site, so that you can make an informed decision.
Section 02
Data Collection
What we collect
When you submit an enquiry through our contact form, we collect the name, email address, telephone number, and message text you provide. We may also note the service you are enquiring about and the watch details you share.
When you visit the site, standard server logs and analytics tools may record your IP address, browser type, pages visited, and time of visit. This data is collected in aggregate form and is not linked to your identity unless you have also submitted a contact form.
Legal basis for processing
- →Consent — for marketing communications and optional analytics cookies, where you have actively opted in.
- →Contract performance — when handling your watch and communicating about service progress.
- →Legitimate interest — for site security, fraud prevention, and basic service record-keeping.
Retention periods
Enquiry and service records are kept for up to five years from the date of the last interaction, in line with standard business record-keeping practice under Thai law. Analytics data is retained for up to 26 months. Cookie consent records are kept for 13 months.
Section 03
How We Use Data
The personal information you provide is used only for the purposes described here. We do not sell personal data to third parties.
- →Service delivery — responding to your enquiry, preparing a service estimate, and communicating about the progress of repair work.
- →Service records — maintaining a record of work completed on your watch, useful for future reference.
- →Communications — sending service updates, completion notices, and collection reminders by email or telephone.
- →Website improvement — analysing aggregated visitor behaviour to understand which pages are useful and which are not.
- →Legal obligations — complying with applicable Thai law, tax requirements, and any lawful request from a regulatory authority.
We do not share personal data with third parties except for the analytics and advertising services described in Section 5, or where required by law.
Section 04
Data Protection Measures
We take reasonable technical and organisational steps to protect your personal information from unauthorised access, alteration, or loss.
- →Encrypted transmission — the website operates over HTTPS, so data in transit between your browser and our server is encrypted.
- →Access controls — access to personal data is restricted to staff who need it to carry out their work.
- →Secure hosting — website and email data are held on servers with standard hosting-level security controls.
- →Breach notification — if a data breach occurs that is likely to affect you, we will notify you and the relevant Thai authority as required by the Personal Data Protection Act (PDPA) B.E. 2562.
No method of transmission over the internet is entirely without risk. While we take care, we cannot give an absolute assurance of security.
Section 06
Your Rights
Under Thailand's Personal Data Protection Act (PDPA) B.E. 2562, you have the following rights regarding your personal data held by us.
- →Access — request a copy of the personal data we hold about you.
- →Rectification — ask us to correct inaccurate or incomplete data.
- →Erasure — request that we delete your data where there is no longer a lawful reason to hold it.
- →Data portability — receive a copy of data you have provided to us in a structured, machine-readable format.
- →Objection — object to processing carried out on the basis of legitimate interest.
- →Withdraw consent — at any time, for processing based on consent, without affecting what was done before withdrawal.
To exercise any of these rights, write to us at [email protected]. We will respond within 30 days. If you feel your rights have not been respected, you may raise a complaint with Thailand's Personal Data Protection Committee (PDPC).
Section 07
Third-Party Links
Our website may contain links to external sites. Once you leave our pages, this Privacy Policy no longer applies. We are not responsible for the privacy practices of other websites and encourage you to read their policies before sharing personal information with them.
Section 08
Children's Privacy
Our services are directed at adults. We do not knowingly collect personal data from anyone under the age of 18. If you believe a minor has submitted information through our site, please contact us at [email protected] and we will remove it promptly.
Section 09
Policy Updates
We may revise this policy from time to time. When we do, we will update the "Last Updated" date at the top of the page. For significant changes, we will place a notice on the website or contact you directly if we hold your email address.
Continuing to use the site after a revision has been posted indicates that you have read and understood the updated policy.
Section 10
Contact for Data Enquiries
If you have questions about this policy or about the personal information we hold, you are welcome to contact us by any of the means below.
Data Controller
Mainspring
305 Beach Road
Nong Prue, Bang Lamung
Chonburi 20150, Thailand