Legal
Privacy Policy
Last Updated: 12 May 2025 · Krit Horology, Chiang Mai, Thailand
1. Introduction
Krit Horology ("we", "us", "our") is a watch repair and restoration workshop based at 47 Thanon Si Donchai, Chang Khlan, Muang, Chiang Mai 50100, Thailand. We are committed to handling personal information with care and transparency. This policy explains what personal data we collect from visitors to our website and clients of our workshop services, how we use it, how we protect it, and what rights you have in relation to it.
This policy applies to information collected through our website at krithoro.club and through direct client contact. If you have questions about how we handle your information, you may contact us at [email protected].
As a business operating in Thailand, we handle personal data in accordance with the Thailand Personal Data Protection Act B.E. 2562 (PDPA) and, where applicable to international visitors, with awareness of relevant data protection frameworks including the EU General Data Protection Regulation (GDPR).
2. Data We Collect
We collect only the personal data that is reasonably necessary for the purposes described in this policy. This includes:
- Contact information: Name, email address, and telephone number provided when you submit an enquiry through our website contact form or contact us directly.
- Enquiry details: Information about your watch (make, model, condition, service needs) that you provide to help us understand your requirements.
- Workshop records: For clients whose watches we service, we maintain records including the watch description, service findings, work carried out, parts used, and timing results.
- Website usage data: Technical information such as browser type, IP address, pages visited, and time spent on pages, collected through cookies and analytics tools (see Section 5).
We do not collect payment card details directly through our website. Payment is handled in person at the workshop.
3. How We Use Your Data
We use personal data for the following purposes:
- To respond to enquiries about our services and to arrange consultations or appointments.
- To carry out the service or restoration work you have requested and to maintain service records for your watch.
- To communicate with you about the progress of work on your timepiece, including notifications of completion or additional findings.
- To improve our website experience through anonymised analytics data.
- To comply with applicable legal obligations.
We do not send unsolicited marketing communications. If we wish to contact you about future services or matters of interest to existing clients, we will ask for your agreement before doing so.
Legal basis: Processing is based on your consent (for enquiry forms), the performance of a service contract (for workshop clients), and our legitimate interest in improving our website and communicating with enquirers who have contacted us directly.
Retention: Contact enquiry data is retained for up to 24 months from last contact. Workshop service records, including watch service documentation, are retained indefinitely as they form part of a watch's service history, which we consider of value to the owner. You may request deletion at any time (see Section 6).
4. Data Sharing and Third Parties
We do not sell personal data to third parties. We may share limited information with:
- Parts suppliers: When sourcing specific components for your watch, we may share a watch description (but not personal contact details) with suppliers.
- Email and hosting providers: Our website and email service are hosted by third-party providers who process data on our behalf under data processing agreements.
- Analytics services: We may use anonymised analytics tools to understand how visitors use our website. These do not identify individual visitors.
- Legal authorities: We may disclose information if required to do so by law or in response to valid legal process.
We do not transfer personal data internationally except where necessary for the above purposes (for example, where a third-party tool is hosted outside Thailand). Where this occurs, we take steps to ensure appropriate safeguards are in place.
5. Cookies
Our website uses cookies — small text files stored in your browser — to help the site function correctly and to understand how visitors interact with it. We use only essential cookies (necessary for the site to operate) and, with your consent, basic analytics cookies. We do not use advertising or tracking cookies.
You can manage your cookie preferences on our Cookie Policy page, which also provides full details of the cookies we use and how to control them through your browser.
6. Your Rights
Under the Thailand PDPA and, where applicable, the GDPR, you have the following rights regarding your personal data:
- Access: You may request a copy of the personal data we hold about you.
- Correction: You may ask us to correct inaccurate or incomplete data.
- Erasure: You may request deletion of your personal data where we no longer have a legitimate reason to retain it.
- Restriction: You may ask us to restrict processing of your data in certain circumstances.
- Portability: You may request a machine-readable copy of data you have provided to us, where technically feasible.
- Objection: You may object to processing based on our legitimate interests.
- Withdraw consent: Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
- Complaint: You have the right to lodge a complaint with the Office of the Personal Data Protection Committee (Thailand) or, if you are in the EU, with your local supervisory authority.
To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.
7. Data Security
We take reasonable technical and organisational measures to protect personal data from unauthorised access, loss, or misuse. Our website is served over HTTPS. Access to client records is restricted to workshop staff. Paper records containing personal information are stored securely at the workshop premises.
In the event of a data breach that poses a risk to your rights, we will notify you and, where required, the relevant supervisory authority, within the timeframes required by applicable law.
8. Third-Party Links
Our website may include links to external websites — for example, to parts suppliers or professional bodies we are affiliated with. We are not responsible for the privacy practices of these external sites and encourage you to review their privacy policies before providing any personal information.
9. Children's Privacy
Our services are directed at adults and we do not knowingly collect personal data from individuals under the age of 18. If you believe we have inadvertently received information from a minor, please contact us and we will delete it promptly.
10. Changes to This Policy
We may update this privacy policy from time to time to reflect changes in our practices or in applicable law. Updated versions will be published on this page with a revised "Last Updated" date. Significant changes will be communicated to existing clients by email where appropriate.
11. Contact
For privacy-related enquiries, data access requests, or concerns:
- Email: [email protected]
- Post: Krit Horology, 47 Thanon Si Donchai, Chang Khlan, Muang, Chiang Mai 50100, Thailand
- Telephone: +66 53 904 2718