Privacy Policy

1. Introduction

Kaliber ("we", "us", "our") operates a watch servicing workshop at 27 Jalan Sultan Ismail, 50250 Kuala Lumpur, Malaysia. This Privacy Policy describes how we collect, use and protect personal information provided to us through our website and through direct engagement with our workshop services.

We operate under the Personal Data Protection Act 2010 (PDPA) of Malaysia, which governs the processing of personal data in commercial transactions. By engaging with our services or submitting information through our website, you agree to the practices described in this policy.

Questions about this policy should be directed to [email protected].

2. Personal Data We Collect

Information you provide directly

• Full name and contact details (email address, telephone number)
• Postal address if collection or delivery services are arranged
• Details about watches submitted for service (make, model, approximate age, service history)
• Correspondence sent to us by email, phone or through the website contact form

Information collected automatically

• Website usage data through analytics tools (pages visited, browser type, referral source)
• Cookie data as described in our Cookie Policy
• IP address and device information for security purposes

Legal basis for processing

• Performance of a contract — to deliver the service you have engaged us for
• Consent — where you have provided explicit agreement (e.g. marketing communications)
• Legitimate interests — maintaining service records, website security and fraud prevention
• Legal obligation — where we are required to retain data under Malaysian law

Retention periods

Service records are retained for seven years from the date of service, to support warranty cover, historical service documentation and record-keeping for retainer clients. Contact enquiry data not resulting in a service is deleted within twelve months. Analytics data is retained in aggregated form for up to twenty-four months.

3. How We Use Personal Data

• To respond to enquiries submitted through the website contact form or by phone
• To prepare scope documents, condition reports and service records for watches in our care
• To arrange collection and delivery logistics for collection care retainer clients
• To issue invoices and process payments for completed work
• To maintain accumulated service records for retainer clients across annual programmes
• To send service completion notifications and follow-up communications related to completed work
• To improve our website through aggregated analytics data

Marketing communications

We do not send marketing emails without your prior consent. If you have opted in to communications from us, you may withdraw that consent at any time by contacting [email protected].

Third-party sharing

We share personal data with third parties only where necessary for service delivery — for example, specialist dial or case refurbishment facilities engaged as part of a restoration programme. We do not sell personal data to third parties or share it for advertising purposes. Third-party service providers are required to process your data in accordance with applicable law and our instructions.

4. Data Protection Measures

• Website data is transmitted using TLS encryption (HTTPS)
• Service records are stored in access-controlled systems with restricted staff access
• Physical service documentation is held in secured premises at our workshop
• Third-party processors are assessed for appropriate data protection practices before engagement
• In the event of a data breach affecting your personal information, we will notify you as required under the PDPA 2010 and take steps to contain and remediate the breach promptly

5. Cookies

Our website uses cookies to support basic site functionality and, where consent is given, to collect analytics data about how the site is used. Cookies do not collect personally identifiable information unless you have submitted a contact form. You can manage cookie preferences through the banner displayed on your first visit or by visiting our Cookie Policy page.

6. Your Rights

Under the Personal Data Protection Act 2010 (Malaysia), you have the following rights in relation to personal data we hold about you:

• Right of access — you may request a copy of personal data we hold about you
• Right of correction — you may request correction of inaccurate or incomplete personal data
• Right to withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing before withdrawal
• Right to limit processing — you may request that we restrict the processing of your data in certain circumstances
• Right to make complaint — you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia if you believe your data has been handled unlawfully

To exercise any of these rights, contact us at [email protected] or in writing to 27 Jalan Sultan Ismail, 50250 Kuala Lumpur, Malaysia. We will respond within thirty days.

7. Third-Party Links

Our website may contain links to external sites. We are not responsible for the privacy practices or content of those sites. We recommend reviewing the privacy policy of any external site you visit through a link from our website.

8. Age Restrictions

Our services are directed at adults aged 18 and over. We do not knowingly collect personal data from individuals under the age of 18. If you believe we have inadvertently collected data about a minor, please contact us at [email protected] and we will delete it promptly.

9. Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. Material changes will be posted on this page with an updated effective date. Continued use of our website or services after changes are posted constitutes acceptance of the updated policy.

10. Contact for Privacy Matters