Privacy Policy

1. Who We Are

Bua Luang is a watch repair and restoration workshop located at 250 Wireless Road, Lumphini, Bangkok 10330, Thailand. We are the data controller for the personal information described in this policy.

For questions about privacy, please write to: [email protected]

2. Information We Collect

We collect only the information that helps us respond to your enquiry or carry out the service you have requested.

2.1 Information You Provide Directly

• Your name
• Email address
• Phone number (if you choose to supply one)
• Details of your watch and the work you are considering
• Any other information you include in your message

2.2 Information Collected Automatically

• Pages visited and time spent on the site
• Browser type and general device information
• Approximate location based on IP address (country/city level only)
• Referring website

2.3 Legal Basis for Processing

• Consent — when you submit our contact form or accept cookies
• Legitimate interest — maintaining basic website security and analytics
• Contractual necessity — when processing your watch requires us to hold your details

3. How We Use Your Information

We use the information we collect for the following purposes:

• To respond to your enquiry or service request
• To keep you informed of your watch's progress during a service or restoration
• To issue service assessments, written work plans, and invoices
• To improve our website and understand how visitors use it
• To comply with legal obligations applicable in Thailand

We do not use your information for automated decision-making or profiling. We do not sell your personal data to third parties.

4. Sharing Your Information

We share personal data only where necessary:

• Service providers — hosting and email delivery partners who process data under our instruction and are bound by data processing agreements
• Analytics services — aggregate, anonymised website statistics (Google Analytics)
• Legal or regulatory authorities — when required by Thai law
• Professional advisors — accountants or legal counsel where necessary, under appropriate confidentiality

5. How Long We Keep Your Data

• Enquiry correspondence — 2 years from last contact, unless an ongoing service relationship exists
• Service records — 5 years for completed jobs, for warranty and dispute reference
• Financial records — 7 years as required by Thai accounting regulations
• Analytics data — aggregated and anonymised; raw logs kept for up to 14 months
• Cookie consent records — 1 year from the date of consent

When retention periods expire, data is securely deleted or anonymised.

6. How We Protect Your Data

We apply reasonable technical and organisational measures to keep your information safe:

• Encrypted connections (HTTPS/TLS) for all data in transit
• Access to personal data restricted to staff who need it to carry out their work
• Hosting on servers within secure data centre environments
• Regular review of access rights and data handling practices
• Prompt investigation and notification of any data breach, where legally required

7. Cookies

Our website uses cookies to remember your preferences and to collect anonymised usage statistics. The categories we use are:

• Essential — required for the site to function; cannot be disabled
• Analytics — help us understand how visitors use the site (optional)
• Marketing — used for relevant advertising where applicable (optional)
• Preferences — remember your choices such as language or region (optional)

You can review and adjust cookie settings at any time on our Cookie Policy page.

8. Your Rights

Under Thailand's Personal Data Protection Act B.E. 2562 (PDPA), you have the following rights in relation to your personal data:

• Right to access — request a copy of the personal data we hold about you
• Right to rectification — ask us to correct inaccurate or incomplete data
• Right to erasure — request deletion of your data, subject to legal obligations
• Right to restriction — ask us to pause processing in certain circumstances
• Right to data portability — receive your data in a commonly used format
• Right to object — object to processing based on legitimate interests
• Right to withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting prior processing

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with Thailand's Personal Data Protection Committee if you believe your rights have not been respected.

9. Third-Party Links

Our website may contain links to other websites for your reference. Once you leave our site, this policy no longer applies. We encourage you to read the privacy notices of any site you visit. We are not responsible for the privacy practices of third-party websites.

10. Children's Privacy

Our services are intended for adults aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe a minor has submitted information through our site, please contact us promptly and we will arrange for it to be deleted.

11. Changes to This Policy

We may update this policy from time to time to reflect changes in our practices or applicable law. When we do, we will revise the "Last updated" date at the top of this page. We encourage you to review it periodically. Continued use of our website after an update constitutes acceptance of the revised policy.