Privacy Policy

1. Introduction

Escaphaus ("we", "us", "our") operates the website at escaphau.sbs and provides watch repair services from our workshop at Jalan Wong Ah Fook 44, 80000 Johor Bahru, Johor, Malaysia. This Privacy Policy describes how we collect, use, and protect personal information submitted through our website contact form and in connection with our services.

We are committed to handling personal data responsibly and in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). Questions about this policy may be directed to [email protected].

2. Personal Data We Collect

We collect only the information necessary to respond to enquiries and deliver our services. This may include:

• Full name (required for all enquiries)
• Email address (required for correspondence)
• Phone number (optional, if provided in the contact form)
• Message content describing the watch and service need
• Technical data collected automatically: IP address, browser type, pages visited, and session duration via analytics cookies where consent is given

Data is collected through the contact form on our website. We do not collect payment information online; all financial transactions are handled in person at the workshop.

Legal Basis for Processing

• Consent: where you submit a contact form or agree to analytics cookies
• Legitimate interest: for communicating about your service enquiry
• Contractual necessity: where processing is required to fulfil a watch repair service

Data Retention

Contact enquiry data is retained for 24 months from the date of last contact. Job card records associated with a completed service are retained for 5 years for workshop reference purposes. Analytics data is retained for 26 months in line with standard platform settings.

3. How We Use Your Data

• Responding to service enquiries and scheduling assessments
• Communicating about the scope, timeline, and completion of a repair
• Maintaining job card records linked to individual watches and owners
• Improving our website through anonymised analytics (with consent)
• Complying with legal obligations under Malaysian law

We do not use personal data for marketing communications without your express consent. We do not sell or share your data with third parties for their own marketing purposes.

Third-Party Service Providers

We may use the following third-party services in connection with website operation. These processors may handle data subject to their own privacy policies:

• Google Analytics — website usage analytics (where consent is given)
• Web hosting provider — server infrastructure for the website

4. Data Protection Measures

• HTTPS encryption on all website connections
• Access to contact form submissions restricted to workshop personnel directly involved in service delivery
• Physical job card records stored securely at the workshop premises
• No retention of payment card details by the workshop

In the event of a data breach that may affect your rights, we will notify affected individuals and relevant authorities as required by Malaysian PDPA obligations within a reasonable timeframe.

5. Cookies

Our website uses cookies to understand how it is used and to remember your cookie consent preference. We use essential cookies (required for basic website function) and optional analytics cookies (used only where you have given consent). Full details are set out in our Cookie Policy.

6. Your Rights

Under Malaysia's Personal Data Protection Act 2010, you have the right to:

• Access personal data we hold about you
• Request correction of inaccurate or incomplete data
• Withdraw consent to processing where processing is based on consent
• Request deletion of personal data where no ongoing legal basis exists
• Object to processing based on legitimate interest in certain circumstances
• Receive a copy of your data in a structured format (data portability)

To exercise any of these rights, contact us at [email protected]. We will respond within 21 days. Complaints about data handling may be directed to the Department of Personal Data Protection Malaysia.

7. External Links

Our website may contain links to external sites. Escaphaus is not responsible for the privacy practices of those sites. We recommend reviewing their privacy policies before submitting any personal information.

8. Children's Privacy

Our services are intended for individuals aged 18 and over. We do not knowingly collect personal data from persons under 18. If we become aware that data from a minor has been submitted, we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When material changes are made, the Last Updated date at the top of this page will be revised. We encourage you to review this page periodically. Continued use of our website after changes constitute acceptance of the updated policy.

10. Contact for Data Enquiries