Privacy Policy

1. Introduction

Verrik Horal ("we", "us", "our") operates from 19 Lebuh Farquhar, 10200 George Town, Pulau Pinang, Malaysia. This policy describes how we collect, use, and protect personal data submitted through our website at verrikholok.biz and through direct workshop enquiries.

We handle personal data in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). By submitting an enquiry through our website, you consent to the handling of your personal data as described in this policy.

2. Data We Collect

When you submit an enquiry through our contact form, we may collect:

• Full name
• Email address
• Telephone number (if provided)
• Details about your watch or repair enquiry (as provided in the message field)

We also collect technical data automatically through standard web server logs and analytics tools, including IP address, browser type, pages visited, and visit duration. This data is collected in aggregate and is not used to identify individuals.

3. How We Use Your Data

Personal data submitted through the enquiry form is used solely to:

• Respond to your enquiry and communicate with you about the repair work you have described
• Arrange intake appointments and provide written scope documentation
• Contact you during the course of a repair job if a decision or update is required

We do not use personal data submitted through the contact form for marketing purposes. We do not send newsletters or promotional communications.

Anonymised analytics data (page views, visit duration) is used to understand how the website is used and to improve its content. This data does not identify individual visitors.

4. Legal Basis for Processing

Under Malaysia's PDPA 2010, we process personal data on the following grounds:

• Consent — by submitting the contact form, you consent to us processing your data in order to respond to your enquiry
• Contractual necessity — where a repair job has been agreed, processing is necessary to fulfil the service
• Legitimate interest — for analytics data that helps us maintain a functional and useful website

5. Data Retention

Enquiry data is retained for a maximum of 24 months from the date of last contact. Where a repair job has been carried out, records relating to that job are retained for 5 years for reference and warranty purposes. You may request deletion of your data at any time (see Section 8).

6. Data Sharing

We do not sell, rent, or share personal data with third parties for marketing purposes. Data may be shared with:

• Suppliers involved in sourcing components for your repair (name and contact details only where necessary for order coordination)
• Web hosting and email service providers operating under appropriate data processing agreements
• Malaysian authorities where required by law

7. Data Security

Our website uses HTTPS encryption for all data in transit. Enquiry data is stored on servers located within Malaysia. Access to stored enquiry data is restricted to workshop staff who require it to manage repair jobs. We do not store payment card details.

In the event of a data breach affecting your personal data, we will notify affected individuals within 72 hours of becoming aware of the breach, where reasonably practicable.

8. Cookies

Our website uses cookies. Essential cookies are required for the site to function and are set automatically. Analytics and preference cookies are optional and are set only with your consent. For full details, see our Cookie Policy.

9. Your Rights Under the PDPA 2010

Under Malaysia's Personal Data Protection Act 2010, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Withdraw consent to processing at any time
• Request that your data be deleted (subject to our legal retention obligations)
• Object to the use of your data for any purpose other than responding to your enquiry

To exercise any of these rights, contact us at [email protected]. We will respond within 21 days.

You may also lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP) if you believe your data has been handled improperly.

10. Third-Party Links

Our website may contain links to external sites (for example, map services). We are not responsible for the privacy practices of those sites and recommend you review their policies separately.

11. Children

Our services are not directed at persons under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has submitted data through our website, please contact us and we will delete it promptly.

12. Changes to This Policy

We may update this policy from time to time. The date at the top of this page reflects the most recent revision. Continued use of the website after a policy update constitutes acceptance of the revised terms.

13. Contact for Privacy Matters

For any questions about this policy or how your data is handled:

• Email: [email protected]
• Post: Verrik Horal, 19 Lebuh Farquhar, 10200 George Town, Pulau Pinang, Malaysia
• Telephone: +60 4 2296 7481