Legal

Privacy Policy

This policy explains what personal information Suriya collects, how it is used, and what choices you have. We aim to be clear rather than exhaustive, and to handle your data with the same care we bring to every timepiece in our workshop.

Last updated: 27 April 2025  ·  Effective: 27 April 2025

Introduction

Suriya ("we", "our", "us") operates a watch repair and restoration workshop at 215 Silom Road, Bang Rak, Bangkok 10500, Thailand. When you visit our website or contact us about our services, we may collect personal information.

This Privacy Policy describes what information we gather, why we gather it, and how we use and protect it. It applies to data collected through our website at suriya.blog and through direct correspondence by telephone or email.

We operate under applicable Thai data protection legislation, including the Personal Data Protection Act B.E. 2562 (2019) ("PDPA"). We take our obligations under this law seriously and have written this policy to reflect that commitment.

If you have any questions after reading this document, please reach out to us at [email protected] before using our services.

Data We Collect

Information you provide directly

When you submit an enquiry through our contact form, or reach us by telephone or email, we may collect:

  • Your name — to address correspondence appropriately.
  • Email address — to reply to enquiries and send service updates.
  • Telephone number — for follow-up discussion about your timepiece.
  • Message content — descriptions of your watch and the service you are seeking.

Information collected automatically

When you browse our website, certain technical information may be collected automatically through cookies and analytics tools:

  • IP address and general geographic region
  • Browser type and operating system
  • Pages visited and time spent on each page
  • Referring website or search query that brought you to us

Legal basis for processing

  • Consent — for analytics and marketing cookies, and for sending optional service communications.
  • Legitimate interest — for responding to enquiries you initiate, and for understanding how our website is used in order to improve it.
  • Contractual necessity — for managing repair orders and communicating about a watch in our care.

Data retention

Enquiry records are kept for up to 24 months from the date of last contact. Service records relating to completed repair work are retained for up to five years, in line with standard workshop practice. Analytics data is held in aggregated, non-identifiable form and retained for up to 26 months by our analytics provider.

How We Use Your Information

We use the information we collect for the following purposes:

  • Responding to enquiries — to reply to your questions about services, timelines, and pricing.
  • Service delivery — to track the progress of a repair and communicate updates during work.
  • Website improvement — to understand which parts of our website are useful and where clarity could be improved.
  • Service communications — if you have consented, we may occasionally send information about our services or seasonal care reminders.
  • Legal compliance — to meet obligations under Thai law, including record-keeping and responding to lawful requests from authorities.

We do not sell, rent, or trade your personal information to third parties for their own marketing purposes.

Note on marketing: If you have received a service communication from us and would prefer not to receive further messages, you are welcome to let us know at any time by emailing [email protected]. We will update our records promptly.

How We Protect Your Data

We take reasonable technical and organisational steps to protect personal information from unauthorised access, disclosure, or loss:

Encrypted transmission

Our website uses HTTPS to encrypt data in transit between your browser and our servers.

Access control

Access to personal records is restricted to workshop staff who need it to fulfil a service.

Secure storage

Customer records are held on password-protected systems, reviewed periodically for appropriateness.

Breach notification

If a data breach occurs that poses a risk to your rights, we will notify you and the relevant authority as required by the PDPA.

No transmission over the internet can be made wholly free of risk. While we take care to protect your information, we cannot warrant absolute security of data sent to us electronically.

Cookies

Our website uses cookies — small text files placed on your device — to help it function and to understand how visitors use it. We use four categories:

  • Essential cookies — required for the site to operate. They cannot be disabled.
  • Analytics cookies — help us understand which pages are visited and how visitors navigate the site. These are only set with your consent.
  • Marketing cookies — used to present relevant content and measure advertising effectiveness. Set only with consent.
  • Preference cookies — remember choices you have made, such as your cookie consent selection. Set only with consent.

For detailed information about the specific cookies we use and how to manage your preferences, please see our Cookie Policy.

Your Rights

Under the Thai Personal Data Protection Act, you have the following rights in relation to personal data we hold about you:

01
Right to access — you may request a copy of the personal data we hold about you, and information about how it is used.
02
Right to rectification — you may ask us to correct inaccurate or incomplete data.
03
Right to erasure — you may request deletion of your data where there is no longer a lawful reason for us to hold it.
04
Right to data portability — where data was collected by consent or under contract, you may ask to receive it in a structured, machine-readable format.
05
Right to object — you may object to processing based on legitimate interest, including direct communications.
06
Right to withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
07
Right to lodge a complaint — if you believe your data is being handled incorrectly, you may raise a complaint with the Office of the Personal Data Protection Committee (PDPC) in Thailand.

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days of receiving your request.

Third-Party Services & Links

Our website may use the following third-party services, each of which may collect data according to their own privacy policies:

Our website may also contain links to external sites not operated by Suriya. We are not responsible for the privacy practices of those sites, and we encourage you to read their policies separately.

Children's Privacy

Our services are intended for adults aged 18 and over. We do not knowingly collect personal data from anyone under the age of 18. If you are a parent or guardian and believe your child has submitted information to us, please contact us at [email protected] and we will remove the information promptly.

Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our practices or in applicable law. When we do, we will revise the "Last updated" date at the top of this page.

If changes are significant, we will make reasonable efforts to notify you — for example, by displaying a notice on our homepage or contacting you directly if we hold your email address. Continued use of our website after any update constitutes acknowledgement of the revised policy.

Data Controller & Contact

If you have questions about this policy, wish to exercise your rights, or have concerns about how we handle your data, please reach us through any of the following:

Suriya