Privacy Policy

Tikkora ("we", "us", "our") operates from 15, Lorong Maarof, Bangsar, 59000 Kuala Lumpur, Malaysia. This policy explains what personal data we collect when you use our website or contact us for watch servicing, how we use it, and what rights you have over it. We take these obligations seriously and handle your information with care.

If you have questions about this policy, please contact us at [email protected].

1. What Data We Collect

We collect personal data in the following ways:

• Contact form submissions: name, email address, and optionally phone number and a message about your watch.
• Direct contact: if you call or email us, we retain the details you provide in order to respond and manage your service.
• Service records: when a watch is left with us, we record your name, contact details, and information about the piece for the purpose of carrying out and documenting the service.
• Cookies and analytics: we may collect anonymised usage data about how visitors interact with this website. See Section 5 for details.

We do not collect payment card data through this website. Payments are handled in person at the studio.

2. Legal Basis for Processing

We process your data under the following bases as provided by the Personal Data Protection Act 2010 (PDPA) of Malaysia:

• Consent: when you submit a contact form, you agree to us using your data to respond to your enquiry.
• Contractual necessity: when you engage us for a watch service, processing your contact details is necessary to carry out that service.
• Legitimate interest: maintaining service records that you can reference in future, and operating this website.

3. How We Use Your Data

• To respond to your enquiry or service request
• To carry out and document the watch service you have requested
• To contact you during a service if findings require your decision
• To send a follow-up if you have not collected your watch
• To maintain a service history record that you may request access to
• To improve our website and understand how visitors use it (anonymised data only)

We do not use your personal data for unsolicited marketing. We do not sell or rent your data to third parties.

4. Data Sharing

We share personal data only where strictly necessary:

• Case refinishing or specialist partners: for Collector's Restoration Programme work, we may share limited details (your first name and watch description) with trusted specialist partners. We do not share full contact details without your agreement.
• Legal obligation: if required by Malaysian law or a competent authority, we may be obliged to disclose certain information.

Your data is not transferred outside Malaysia except where you have initiated contact with us via a platform hosted elsewhere (e.g. international email services).

5. Cookies

Our website uses cookies to function and, optionally, to understand visitor behaviour. Essential cookies are required for the site to work. Analytics and preference cookies are optional and are only set with your consent via the cookie banner. For full details, see our Cookie Policy.

6. Data Retention

• Enquiries not converted to a service: contact form data is retained for up to 6 months and then deleted.
• Service records: we retain written service records for 7 years, which allows you to reference the history of a piece if you return or if the watch changes hands.
• Analytics data: anonymised and retained for up to 26 months in line with standard analytics practice.

7. Data Protection Measures

We protect your personal data through reasonable organisational and technical measures:

• Physical service records are stored in a locked cabinet within the studio
• Digital records are held on password-protected systems accessible only to studio staff
• This website uses HTTPS encryption for data in transit
• Access to personal data within the studio is limited to staff who need it to carry out their work

In the event of a data breach that is likely to result in risk to your rights or freedoms, we will notify you and the relevant authority as required under Malaysian law.

8. Your Rights Under Malaysian Law

Under the Personal Data Protection Act 2010 (PDPA), you have the following rights in relation to your personal data:

• Right of access: you may request a copy of the personal data we hold about you.
• Right of correction: you may request correction of inaccurate or incomplete data.
• Right to withdraw consent: where processing is based on consent, you may withdraw it at any time. This does not affect processing already carried out.
• Right to limit processing: in certain circumstances, you may request that we limit how we use your data.

To exercise any of these rights, contact us at [email protected]. We will respond within 21 days.

9. Third-Party Links

This website may contain links to external websites such as map services. We are not responsible for the privacy practices of those sites. We recommend reading the privacy policy of any external site you visit.

10. Children's Privacy

Our services are intended for adults aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe we have inadvertently done so, please contact us and we will delete it promptly.

11. Changes to This Policy

We may update this policy from time to time. The "Last Updated" date at the top of this page will reflect any changes. Where changes are significant, we will make reasonable efforts to notify regular clients directly. Continued use of our website or services after an update constitutes acceptance of the revised policy.

12. Contact for Data Enquiries

Data controller: Tikkora
Address: 15, Lorong Maarof, Bangsar, 59000 Kuala Lumpur, Malaysia
Email: [email protected]
Phone: +60 3 2284 7193

If you are not satisfied with our response, you may lodge a complaint with the Department of Personal Data Protection Malaysia (pdp.gov.my).