Privacy Policy

1. Introduction

Verge Atelier ("we", "us", "our") operates a watch repair and timepiece care workshop at 21, Jalan Gaya, 88000 Kota Kinabalu, Sabah, Malaysia. We are the data controller for personal information collected through this website and through our workshop intake process.

This policy explains what personal data we collect, why we collect it, how we use it, and what rights you have in relation to it. It applies to information collected via this website and through direct engagement with our workshop.

We operate in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). If you have questions about how your data is handled, please contact us at [email protected].

2. What Personal Data We Collect

We collect the following categories of personal data:

• Contact details: name, email address, and telephone number — provided voluntarily via our enquiry form or in person at the workshop.
• Service-related information: watch make, model, condition notes, and service history relevant to the work you've requested.
• Correspondence: the content of messages or emails you send to us.
• Website usage data: anonymised browsing data collected via analytics cookies, if you have consented to these.

We do not collect payment card details directly. We do not collect special category data (such as health or financial information) and do not ask for it.

Legal basis for processing: We process your data on the basis of (a) your consent, where given; (b) the performance of a service contract; and (c) our legitimate interest in operating the workshop and maintaining service records.

Retention: Contact enquiry data is retained for up to 24 months. Workshop service records are retained for up to 7 years for business record purposes. You may request deletion of contact data at any time.

3. How We Use Your Data

We use personal data only for the following purposes:

• To respond to your enquiry about watch servicing or restoration
• To manage and document the service or restoration work on your timepiece
• To contact you regarding the status of work in progress, or to discuss scope changes before proceeding
• To maintain a service record that can be provided to you on request
• To comply with applicable legal obligations

We do not use your personal data for marketing or promotional communications without your explicit consent. We do not sell, rent, or trade your personal data with third parties for commercial purposes.

Third-party sharing: We may share your data with service providers who assist in operating this website (such as hosting or analytics providers), under strict data processing agreements. We may also disclose data where required by Malaysian law or a lawful authority request.

4. How We Protect Your Data

• This website uses HTTPS encryption for all data in transit
• Workshop service records are stored in a locked filing system accessible only to authorised staff
• Digital records are stored on password-protected systems with restricted access
• We review our data handling practices periodically and update them where necessary
• In the event of a data breach affecting your personal information, we will notify you as required under applicable Malaysian law

5. Cookies

This website uses cookies to support basic functionality and, where you have consented, to collect anonymous analytics data. The following types of cookies may be used:

• Essential cookies: required for the site to function. These cannot be disabled.
• Analytics cookies: collect anonymised information about how visitors use the site. Only active with your consent.
• Preference cookies: remember settings such as your cookie consent choice.

You can manage your cookie preferences at any time via our Cookie Policy page.

6. Your Rights

Under Malaysia's Personal Data Protection Act 2010, you have the following rights in relation to personal data we hold about you:

• Right to access: you may request a copy of the personal data we hold about you
• Right to correction: you may ask us to correct inaccurate or incomplete data
• Right to withdraw consent: where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing
• Right to object: you may object to processing carried out on the basis of our legitimate interests
• Right to erasure: in certain circumstances, you may request that we delete your personal data

To exercise any of these rights, please write to us at [email protected]. We will respond within 21 days. If you are dissatisfied with our response, you may lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP) at www.pdp.gov.my.

7. Third-Party Links

This website may contain links to external websites — for example, map services or payment platforms. We are not responsible for the privacy practices of those sites and encourage you to review their individual policies before providing any personal information.

8. Children's Privacy

Our services and this website are directed at adults aged 18 and over. We do not knowingly collect personal data from individuals under 18. If you believe a minor has submitted information to us, please contact us and we will remove it promptly.

9. Changes to This Policy

We may update this policy from time to time. When we do, the revised version will be published on this page with an updated effective date. Continued use of this website after a change constitutes acceptance of the updated terms. For significant changes, we will make a reasonable effort to notify affected users directly where we hold contact details.

10. Contact

For any questions about this policy or your personal data, please contact:

• Data Controller: Verge Atelier
• Address: 21, Jalan Gaya, 88000 Kota Kinabalu, Sabah, Malaysia
• Email: [email protected]
• Telephone: +60 88 273 615