Privacy Policy

1. Introduction

Crownworks ("we", "us", "our"), operating from 305 Silom Road, Bang Rak, Bangkok 10500, Thailand, is committed to handling personal data responsibly. This policy explains what information we collect when you use our website or contact the workshop, how that information is used, and what rights you have in relation to it.

This policy applies to all personal data collected through our website at crownworks.world, by email, telephone, and in person at our premises. Questions about this policy can be directed to [email protected].

2. Data We Collect

When you contact us or use our services, we may collect:

• Full name and contact details (phone number, email address)
• Physical address (if required for postal watch intake)
• Information about the watch(es) brought in for service
• Service history and intake records associated with your pieces
• Website usage data collected through analytics cookies (if consent is given)
• Communications sent to us by email or through the website contact form

Legal basis: Data collected at intake is processed under the performance of a service agreement. Data collected through our website form is processed on the basis of your consent. Analytics data (where accepted) is processed under legitimate interest in improving the website.

3. How We Use Your Data

• To manage your service order and communicate progress updates
• To maintain a service record associated with pieces left in our care
• To respond to enquiries submitted through the website or by email
• To fulfil legal and administrative obligations
• To improve the website experience, where analytics consent is given

We do not use your data for unsolicited marketing. We do not sell or share your personal data with third parties for commercial purposes.

4. Data Retention

Service records (including contact details associated with a watch intake) are retained for a period of five years from the date of the completed service. This allows us to provide accurate historical reference for returning clients.

Enquiry data not resulting in a service order is retained for 12 months from the date of the enquiry, after which it is deleted. Analytics data (where applicable) is retained in accordance with the third-party service's own retention policies.

5. Data Protection Measures

• Website communications are conducted over HTTPS (TLS encryption)
• Physical workshop records are kept in locked storage with restricted access
• Digital records are stored on password-protected devices and services
• Access to personal data is limited to the Crownworks working team
• In the event of a data breach affecting your personal information, we will notify you within a reasonable timeframe

6. Cookies

Our website uses cookies for basic functionality and, where consent is given, for analytics. Essential cookies are required for the site to operate. Optional analytics and preference cookies are only set following your acceptance via the cookie banner.

Full details are available in our Cookie Policy.

7. Third-Party Services

We may use the following third-party services, each with their own privacy terms:

• Google Analytics (website usage data, where consent given)
• Google Maps (embedded map for location display — no personal data collected)
• Email hosting providers (for processing enquiries sent to us)

We are not responsible for the privacy practices of third-party websites linked from our site.

8. Your Rights

Under applicable Thai personal data protection law (PDPA, B.E. 2562) and international standards, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Request deletion of your data, subject to legal retention requirements
• Object to processing based on legitimate interest
• Withdraw consent at any time for processing based on consent
• Data portability — receive your data in a portable format on request
• Lodge a complaint with the Personal Data Protection Committee (PDPC) of Thailand

To exercise any of these rights, contact us at [email protected].

9. Children's Privacy

Our services are intended for adults (18 years and over). We do not knowingly collect personal data from individuals under 18. If you believe we have inadvertently received data from a minor, please contact us immediately and we will arrange prompt deletion.

10. Policy Updates

This policy may be updated from time to time. Where changes are material, notice will be posted on the website. Continued use of the website after a policy update constitutes acceptance of the revised terms. The date of the most recent revision is shown at the top of this page.

11. Contact for Data Enquiries