Privacy Policy

1. Introduction

Cogwright ("we", "us", "our") operates the watch and clock repair workshop located at 27 Jalan SS 21/37, Damansara Utama, 47400 Petaling Jaya, Selangor, Malaysia, and the website at cogwrigh.cyou. We are committed to handling the personal data we collect with care and in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia.

This policy describes what personal data we collect, how we use it, and what rights you have in relation to it. It applies to data collected through our website enquiry form, in-person service intake, and any email or telephone communication with us.

2. Data We Collect

When you submit an enquiry through our website or drop off a piece at the workshop, we may collect:

• Full name
• Email address
• Phone number (where provided)
• Description of the timepiece and the service requested
• Postal address (only if collection or delivery is arranged)

We also collect non-personal technical data through website cookies (page views, session duration). See our Cookie Policy for details.

Legal basis for processing: Contract performance (to carry out the agreed service), legitimate interest (to manage our workshop operations and respond to enquiries), and consent (for any optional marketing communications you opt into).

Retention: Service records including contact details are retained for five years from the date of service completion, consistent with Malaysian commercial record-keeping practice. Website enquiry data not resulting in a service is deleted within 12 months.

3. How We Use Your Data

We use personal data for the following purposes:

• To respond to enquiries and identify the appropriate service path
• To issue receipts, certificates, and service documentation
• To contact you during the service if findings arise outside the agreed scope
• To notify you when your piece is ready for collection
• To maintain our service records for warranty and coverage reference

We do not use your data for unsolicited marketing. We do not sell or rent your data to third parties. Analytics data collected via cookies is used only in aggregate to understand how the website is used and to improve it.

4. Data Sharing

We do not share personal data with third parties except in the following limited circumstances:

• Service providers: Website hosting and email providers who process data on our behalf under data processing agreements.
• Legal obligation: Where disclosure is required by Malaysian law or by a competent authority.

Parts suppliers and couriers receive only the minimum information necessary to fulfil a specific task (e.g., a delivery address if a part is posted). They do not receive service history or other personal data.

5. Data Protection Measures

We take reasonable technical and organisational steps to protect personal data from unauthorised access, disclosure, or loss:

• Website data is transmitted over HTTPS encryption
• Physical service records are stored in a locked cabinet accessible only to workshop staff
• Access to digital records is restricted by password to named staff members
• In the event of a data breach that poses a risk to individuals, we will notify affected parties without undue delay

6. Cookies

Our website uses cookies to support basic site functionality and to understand visitor behaviour in aggregate. We do not use cookies to identify individual visitors for advertising purposes. You can manage your cookie preferences through our cookie banner or through your browser settings. See our Cookie Policy for full details.

7. Your Rights

Under the Personal Data Protection Act 2010 (Malaysia), you have the following rights in relation to your personal data:

• Access: You may request a copy of the personal data we hold about you.
• Correction: You may request correction of inaccurate or incomplete data.
• Withdrawal of consent: Where processing is based on consent, you may withdraw it at any time. This will not affect the lawfulness of processing before withdrawal.
• Objection: You may object to processing for direct marketing purposes.
• Erasure: You may request deletion of your data where it is no longer needed for the purposes for which it was collected, subject to our legal retention obligations.

To exercise any of these rights, contact us at [email protected]. We will respond within 21 days. There is no charge for a first request.

If you are dissatisfied with our response, you may raise a complaint with the Department of Personal Data Protection Malaysia (pdp.gov.my).

8. Third-Party Links

Our website may contain links to external resources (e.g., maps, manufacturer information). We are not responsible for the privacy practices of those sites and recommend that you review their policies before providing any personal data.

9. Children's Privacy

Our services are directed at adults aged 18 and above. We do not knowingly collect personal data from persons under 18. If you believe we have collected data from a minor, please contact us at [email protected] so we can delete it promptly.

10. Changes to This Policy

We may update this policy from time to time. Material changes will be noted on this page with a revised "Last Updated" date. Continued use of our website or services after a change constitutes acceptance of the updated policy.

11. Contact

Data Controller: Cogwright
Address: 27 Jalan SS 21/37, Damansara Utama, 47400 Petaling Jaya, Selangor, Malaysia
Email: [email protected]
Phone: +60 3-7982 4413