Privacy Policy

1Introduction

Ticklore ("we", "us", "our") operates a watch repair workshop at 189 Jalan Burma, 10350 George Town, Pulau Pinang, Malaysia. This Privacy Policy explains what personal information we collect when you interact with our website or contact us about workshop services, how we use it, and what rights you have in relation to it.

This policy applies to personal data collected through our website at ticklore.blog, through email correspondence, and through the in-person intake process at our workshop. It does not apply to third-party websites that may be linked from our pages.

Questions about this policy may be directed to [email protected].

2What Personal Data We Collect

We collect personal data only when you provide it to us directly. This includes:

• Contact information: Full name, email address, and telephone number (if provided) when you submit an enquiry through the website contact form or contact us by email.
• Watch-related information: Details about the watch you provide in your enquiry (brand, model, symptoms, service history). This is not personal data in the strict sense but forms part of the intake record.
• Correspondence content: The content of messages you send to us by email or through the website form.
• In-person intake notes: If you bring a watch to the workshop, an intake condition assessment is recorded. This is a workshop document, not a digital data record, and is held in our physical intake file.
• Technical data: Standard website access logs, including IP address, browser type, and pages visited. This data is held by our hosting provider and is not individually reviewed unless required to investigate a technical issue.

We do not collect financial card details directly. If payment is made in person, no card data is retained by Ticklore.

3Legal Basis and Purpose of Processing

Under Malaysia's Personal Data Protection Act 2010 (PDPA), we process your personal data on the following bases:

• Contract performance: To respond to your service enquiry, prepare a scope and quote, and manage the workshop service relationship if you proceed with a job.
• Legitimate interest: To maintain records of services completed, for the purpose of following up on collection or responding to queries about past work.
• Consent: If you have opted into any form of follow-up communication about workshop news or service reminders. Consent may be withdrawn at any time by emailing [email protected].

4How We Use Your Data

• To respond to your initial enquiry with scope, pricing, and availability information
• To manage the service relationship — intake, updates during service, collection notification
• To maintain a record of services completed for our own administrative purposes
• To contact you if a previously serviced watch requires a follow-up note (e.g. a part arrived after collection)
• To comply with any legal obligations that require us to retain records

We do not use personal data for automated decision-making, profiling, or marketing communications without explicit consent.

5Data Retention

Enquiry records (name, email, message) are retained for up to 24 months from the date of last contact, after which they are deleted unless a service relationship is ongoing. Physical intake cards and service records are retained for seven years in line with standard business record-keeping practice in Malaysia.

Technical access logs are retained by our hosting provider in accordance with their data retention policy, typically between 30 and 90 days.

6Data Sharing

We do not sell or share your personal data with third parties for commercial purposes. Limited sharing occurs only in the following circumstances:

• Dial refinishing workshop: If you proceed with the Dial and Hand Refinishing Archive Project, your first name and contact details may be shared with the external refinishing partner for coordination purposes only.
• Hosting and email providers: Our website hosting and email services process data on our behalf in accordance with their privacy commitments.
• Legal requirement: We may disclose personal data if required to do so by Malaysian law or a valid legal process.

7Data Protection Measures

• Our website is served over HTTPS with TLS encryption
• Email correspondence is managed through a provider with standard security practices
• Physical intake records are held in the locked workshop premises
• Access to digital records is limited to the two staff members who operate Ticklore
• In the event of a data breach affecting your personal information, we will notify you within 72 hours if the breach is likely to result in a risk to your rights

8Cookies

Our website uses cookies for essential functionality and, where you have consented, for analytics purposes. Cookie preferences can be managed through the cookie consent panel on the website or by visiting our Cookie Policy page. Withdrawing cookie consent does not affect the lawfulness of any processing already carried out.

9Your Rights Under Malaysian PDPA

Under Malaysia's Personal Data Protection Act 2010, you have the following rights in relation to your personal data held by Ticklore:

• Right of access: You may request a copy of the personal data we hold about you.
• Right to correct: You may request correction of inaccurate or incomplete data.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw it at any time.
• Right to limit processing: You may request that we restrict the processing of your data in certain circumstances.
• Right to object: You may object to processing carried out on the basis of legitimate interest.

To exercise any of these rights, contact us at [email protected]. We will respond within 21 days.

10Children's Privacy

Our services are intended for persons aged 18 and above. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected such data, please contact us and we will delete it promptly.

11Third-Party Links

Our website may contain links to external sites (for example, to Google Maps for directions). Ticklore is not responsible for the privacy practices of those sites. We recommend reviewing the privacy policy of any external site you visit.

12Changes to This Policy

We may update this Privacy Policy from time to time. The revised version will be posted on this page with an updated date. Continued use of our website or services after any change constitutes acceptance of the revised policy. For material changes, we will make a reasonable effort to notify you by email if you have provided one.

13Contact for Data Enquiries