Privacy Policy

1. Introduction

Mainspring ("we", "us", "our") operates from 16 Ratchadamnoen Road, Phra Sing, Chiang Mai 50200, Thailand. This policy explains how we handle personal information you provide when contacting us, using our website at mainspringzx.world, or using our workshop services. We take privacy seriously and aim to be straightforward about what we collect and why.

For questions, contact us at [email protected].

2. Information we collect

We collect personal information in the following contexts:

• Contact form: Name, email address, phone number (optional) and message content when you submit an enquiry through our website.
• Workshop intake: Name, contact details and watch information when you bring a piece in for service in person.
• Website analytics: Anonymised usage data (pages visited, session duration, device type) via analytics cookies, if you have consented to these.
• Communications: Emails or other correspondence you send to us.

We do not collect sensitive personal data, payment card information (payments handled in person), or information from minors under 18 years of age.

3. Legal basis for processing (PDPA / GDPR)

Under Thailand's Personal Data Protection Act (PDPA B.E. 2562) and, where applicable, the EU GDPR, our legal bases for processing your data are:

• Contract: Processing necessary to respond to a service enquiry or carry out a workshop service.
• Legitimate interests: Maintaining workshop records and communicating with clients about their pieces.
• Consent: Analytics and marketing cookies, where applicable. You may withdraw consent at any time.

4. How we use your information

• Responding to your enquiries and scheduling services
• Providing watch care, restoration or refinishing services
• Maintaining workshop records associated with your pieces
• Sending service updates or follow-up communications relating to your watch
• Improving our website through anonymised analytics (with consent)

We do not use your data for automated decision-making, profiling, or marketing to third parties.

5. Data sharing

We do not sell your personal data. We may share information with:

• Service providers: Hosting providers for our website, operating under data processing agreements.
• Analytics platforms: Google Analytics (anonymised data only, with your consent).
• Legal authorities: Where required by Thai law or court order.

We do not subcontract workshop work to third parties without your prior agreement.

6. Data retention

• Contact form enquiries: retained for 12 months from last contact.
• Workshop service records: retained for 5 years for reference purposes (useful for future visits).
• Analytics data: retained per platform defaults (typically 14–26 months).

7. Cookies

Our website uses cookies for essential functionality (site operation) and, with your consent, for analytics. See our Cookie Policy for full details and preference management.

8. Your rights

Under applicable law, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data (subject to legal obligations)
• Object to or restrict certain processing
• Withdraw consent at any time (where processing is consent-based)
• Lodge a complaint with the relevant supervisory authority in your jurisdiction

To exercise any of these rights, contact us at [email protected]. We respond within 30 days.

9. Data security

We use standard security measures appropriate to a small professional workshop: access-controlled systems, secure email, and restricted physical access to client records. In the event of a data breach affecting your personal data, we will notify you and relevant authorities as required by law.

10. Third-party links

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites. Please review their policies independently.

11. Children's privacy

Our services are directed at adults. We do not knowingly collect personal data from individuals under 18. If you believe a minor has submitted data to us, please contact us and we will delete it.

12. Policy changes

We may update this policy from time to time. Changes take effect on the date shown at the top of this page. Continued use of our website or services after a change constitutes acceptance of the updated policy.

13. Contact

Data controller: Mainspring
16 Ratchadamnoen Road, Phra Sing, Chiang Mai 50200, Thailand
Email: [email protected]