Privacy Policy

Last Updated: January 15, 2026

Introduction

Cindertick ("we," "our," or "us") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our watch repair services.

By accessing our website or engaging our services, you consent to the data practices described in this policy. This policy complies with the Personal Data Protection Act 2010 (PDPA) of Malaysia.

For privacy-related inquiries, contact us at [email protected]

Information We Collect

Personal Information You Provide

We collect information you voluntarily provide when:

  • Submitting inquiries through our contact form (name, email address, phone number, message content)
  • Bringing your timepiece for repair (contact details, watch information, service history)
  • Communicating with us via email or phone
  • Subscribing to communications (if applicable)

Automatically Collected Information

When you visit our website, we may automatically collect:

  • Browser type and version
  • Operating system
  • IP address and general location data
  • Pages visited and time spent on pages
  • Referring website addresses
  • Device information

Cookie Information

We use cookies and similar tracking technologies to improve your browsing experience. For detailed information about our use of cookies, please review our Cookie Policy.

How We Use Your Information

We use collected information for the following purposes:

  • Service Delivery: To provide watch repair and conservation services, communicate about service status, and maintain service records
  • Communication: To respond to inquiries, provide customer support, and send service-related notifications
  • Record Keeping: To maintain repair history and documentation for your timepieces
  • Website Improvement: To analyze website usage patterns and improve user experience
  • Legal Compliance: To comply with applicable laws and regulations in Malaysia
  • Marketing: To send occasional updates about our services (only with your consent, and you may opt out at any time)

Legal Basis for Processing:

  • Consent: You have given explicit permission for specific processing activities
  • Contract Performance: Processing is necessary to provide requested services
  • Legitimate Interest: Processing is necessary for our business operations while respecting your rights

Information Sharing and Disclosure

We do not sell, rent, or trade your personal information to third parties. We may share information only in the following limited circumstances:

  • Service Providers: With trusted third-party service providers who assist in website hosting, analytics, or payment processing, subject to strict confidentiality agreements
  • Parts Suppliers: When necessary to source replacement components for your timepiece (limited to relevant watch information only)
  • Legal Requirements: When required by Malaysian law, court order, or government regulation
  • Business Transfers: In the event of a merger, acquisition, or sale of assets (with notice to affected individuals)

All third parties processing your data are required to maintain appropriate security measures and use data only for specified purposes.

Data Security Measures

We implement appropriate technical and organizational measures to protect your personal information:

  • Secure storage of physical records in locked facilities
  • Encryption of data transmission (SSL/TLS protocols)
  • Access controls limiting employee access to personal data
  • Regular security assessments and updates
  • Secure disposal of data when no longer needed

While we implement robust security measures, no method of transmission or storage is completely secure. We cannot guarantee absolute security but commit to promptly addressing any security incidents.

Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this policy:

  • Service Records: Retained for 7 years for warranty, reference, and regulatory compliance purposes
  • Contact Information: Retained while you remain an active client or until you request deletion
  • Website Analytics: Anonymized data retained for operational analysis
  • Marketing Consent: Retained until you withdraw consent

Your Rights Under PDPA

Under the Personal Data Protection Act 2010 of Malaysia, you have the following rights:

  • Right to Access: Request copies of your personal data we hold
  • Right to Correction: Request correction of inaccurate or incomplete information
  • Right to Withdraw Consent: Withdraw previously given consent for data processing
  • Right to Limit Processing: Request limitation of how we use your data
  • Right to Data Portability: Receive your data in a structured, commonly used format
  • Right to Object: Object to certain types of processing, including marketing

To exercise these rights, contact us at [email protected]. We will respond to requests within 21 days as required by PDPA.

If you believe we have not adequately addressed your concerns, you may lodge a complaint with the Personal Data Protection Commissioner of Malaysia.

Cookies and Tracking

We use cookies and similar technologies to enhance your website experience. Cookies are small text files stored on your device that help us:

  • Remember your preferences and settings
  • Understand how you use our website
  • Improve website functionality and performance
  • Analyze website traffic and user behavior

For comprehensive information about cookie types, management, and your choices, please review our Cookie Policy.

Third-Party Websites

Our website may contain links to external websites operated by third parties. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party websites you visit.

Children's Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected information from a child, we will take steps to delete it promptly.

Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. Updates will be posted on this page with a revised "Last Updated" date. Material changes will be communicated through:

  • Prominent notice on our website
  • Email notification to registered users (if applicable)
  • In-person notification for active service clients when appropriate

Contact Information

For questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact:

Cindertick

28 Jalan Stesen Sentral
50470 Kuala Lumpur
Malaysia

Email: [email protected]

Phone: +60 3-6254 8731

Governing Law

This Privacy Policy is governed by the laws of Malaysia. Any disputes arising from this policy shall be subject to the exclusive jurisdiction of the courts of Malaysia.