Privacy Policy

1. Introduction

Grailtick ("we", "us", "our") operates from 162 Charoen Krung Road, Bang Rak, Bangkok 10500, Thailand. This Privacy Policy describes how we collect, use, and protect personal data provided to us through our website at grailtick.info and through our in-person services. We are committed to handling personal data in line with Thailand's Personal Data Protection Act B.E. 2562 (PDPA).

2. Data We Collect

We collect only what is needed to respond to enquiries and deliver our watch care services:

• Name and contact details — provided when you submit a contact form or visit in person
• Email address — used to send responses and service documents
• Phone number — provided optionally, used to discuss your watch
• Watch description — details you share about the piece you're enquiring about
• Technical data — browser type, IP address, and page visit data collected automatically via cookies (see Section 6)

We do not collect payment card data directly; any payment processing is handled by the payment provider at the time of service.

3. How We Use Your Data

• Responding to service enquiries and questions
• Delivering condition reports, service records, and restoration documentation
• Arranging drop-off, collection, and follow-up communication
• Improving the website using aggregated, anonymised analytics data
• Complying with legal obligations under Thai law

We do not sell or share your personal data with third parties for marketing purposes.

4. Legal Basis for Processing

• Consent — for optional cookies and marketing communications
• Contract performance — processing your enquiry and delivering the service you requested
• Legitimate interests — website analytics to improve our service, security monitoring
• Legal obligation — retaining records required by Thai law

5. Data Retention

Contact enquiries and service records are retained for up to 3 years after the last interaction. This period allows us to support any follow-up questions about work carried out. Technical log data is retained for up to 12 months. You may request earlier deletion at any time (see Section 8).

6. Cookies

Our website uses cookies to track visitor activity and support basic analytics. Essential cookies are required for the site to function. Optional analytics and marketing cookies are only set with your consent, which you can manage via the cookie banner or our Cookie Policy page.

7. Third-Party Services

We may use the following third-party services, each with their own privacy policies:

• Google Analytics — website usage statistics (optional, requires consent)
• Google Maps — embedded location map on the contact page
• Email providers — used to send enquiry responses

We do not use advertising networks or social media tracking pixels unless analytics consent is granted.

8. Your Rights

Under the PDPA, you have the following rights regarding your personal data:

• Access — request a copy of the data we hold about you
• Rectification — request correction of inaccurate data
• Erasure — request deletion, subject to legal retention requirements
• Portability — request data in a commonly used format
• Objection — object to processing based on legitimate interests
• Withdrawal of consent — withdraw consent at any time without affecting prior processing

To exercise any of these rights, contact us at [email protected]. We aim to respond within 30 days.

9. Data Security

We store data on secured servers with access controls. Email communications use standard encryption. Physical records at the workshop are kept in locked storage. We review our security practices periodically and will notify you in the event of a data breach that affects your rights.

10. Children's Privacy

Our services are intended for adults aged 18 and over. We do not knowingly collect data from minors. If you believe a minor has submitted data to us, please contact us at [email protected] for immediate removal.

11. External Links

Our website may include links to external sites. We are not responsible for the privacy practices of those sites. Please review their privacy policies before providing any personal data.

12. Changes to This Policy

We may update this policy periodically. When we do, the "Last Updated" date at the top of this page will change. Continued use of the website after changes constitutes acceptance of the updated policy.

13. Contact

For privacy-related questions or to exercise your rights: