Privacy Policy

1. Who we are and scope of this policy

Horolune is a watch repair and restoration workshop located at 203 Thanon Si Lom, Bang Rak, Bangkok 10500, Thailand. We operate under Thai law, including the Personal Data Protection Act B.E. 2562 (PDPA). This policy applies to personal data processed through our website at horolune.blog and through enquiries submitted by email or phone.

For questions about this policy or data-related requests, contact us at [email protected].

2. What data we collect and how

We collect only what is needed to respond to your enquiry and, if you proceed, to carry out the requested repair work.

Data collected through the contact form:

• Your name (required — so we can address you directly)
• Email address (required — for correspondence about your enquiry)
• Phone number (optional — if you prefer to discuss by call)
• Message content (optional — details of the watch or issue)

Data collected automatically:

• Cookie preference choices (stored locally in your browser via localStorage)
• Standard web server logs (IP address, browser type, page visited, timestamp) — retained for 30 days
• Analytics data via Google Analytics, if you have consented to analytics cookies

Legal basis for processing:

• Contact form data — processed on the basis of your consent and legitimate interest in responding to your enquiry
• Service correspondence — contractual necessity once a repair is agreed
• Analytics — processed only with explicit cookie consent

3. How we use your data

• To reply to enquiries submitted through the contact form
• To discuss, arrange, and carry out watch repair or restoration work
• To issue estimates, confirmations, and invoices for completed work
• To improve our website based on aggregated, anonymised analytics data
• To comply with applicable Thai law, including PDPA requirements

We do not use personal data for advertising, profiling, or automated decision-making. We do not sell, rent, or share personal data with third parties for marketing purposes.

4. Third parties and data sharing

We share personal data with third parties only where necessary and under appropriate safeguards:

• Google Analytics — anonymised website usage data, only if analytics cookies are accepted. Data processed under Google's terms.
• Email service providers — our email infrastructure may route messages through servers operated by providers who maintain data processing agreements.
• Parts suppliers — where a repair requires sourcing a specific component, we may share the watch reference with a supplier. No personal contact information is shared in this process.
• Legal requirements — we may disclose data if required by Thai law or a valid legal process.

5. How long we keep your data

• Enquiries that did not result in a repair: deleted within 6 months of the last communication
• Repair records (correspondence, service notes, invoices): retained for 3 years from job completion for warranty and reference purposes
• Accounting records: retained for 5 years as required by Thai tax law
• Server logs: deleted after 30 days

6. Data security

Our website uses HTTPS to encrypt data in transit. Access to customer records is restricted to workshop staff directly involved in repairs. We do not store payment card data.

In the event of a personal data breach that is likely to result in risk to your rights and freedoms, we will notify affected individuals and the relevant Thai authority in accordance with PDPA requirements.

7. Cookies

Our website uses cookies to remember your consent preferences and, if you allow it, to gather anonymised usage statistics. Essential cookies that support basic site function are always active. All other categories are optional and can be declined when the cookie notice appears, or adjusted later via our Cookie Policy page.

Your choices are stored in your browser's localStorage and are not transmitted to our servers.

8. Your rights under Thai PDPA

Under the Personal Data Protection Act B.E. 2562, you have the following rights regarding personal data we hold about you:

• Access — request a copy of the personal data we hold about you
• Rectification — ask us to correct inaccurate or incomplete data
• Erasure — ask us to delete your data, subject to any legal retention obligations
• Portability — request your data in a structured, machine-readable format
• Objection — object to processing based on legitimate interest
• Withdraw consent — where processing is consent-based, you may withdraw at any time without affecting the lawfulness of prior processing
• Lodge a complaint — with the Personal Data Protection Committee of Thailand if you believe your rights have been infringed

To exercise any of these rights, email [email protected]. We will respond within 30 days.

9. Links to other websites

Our website may contain links to external sites — for example, manufacturer reference pages or supplier information. We are not responsible for the content or privacy practices of those sites. We recommend reviewing their privacy policies before providing personal data.

10. Children

Our services are directed at adults aged 18 and over. We do not knowingly collect personal data from anyone under 18. If we become aware that data from a minor has been submitted without appropriate parental consent, we will delete it promptly.

11. Changes to this policy

We may update this policy from time to time. When we do, we will revise the "Last updated" date at the top of the page. Continued use of our website after changes constitutes acceptance of the revised policy. For significant changes, we will make the update visible on the homepage for 30 days.

12. Contact for data enquiries