Privacy Policy

1. Introduction

Dao Siam ("we", "us", "our") operates the website at daosiamtx.pro and provides watch repair and restoration services from our workshop at 12 Thanon Ratchadamnoen, Phra Sing, Chiang Mai 50200, Thailand. We are committed to handling any personal information you share with us carefully and in accordance with the Personal Data Protection Act B.E. 2562 (2019) of Thailand (PDPA).

This policy describes what personal data we collect, why we collect it, how we use it, and the rights you have in relation to it. If you have questions, please contact us at [email protected].

2. Data We Collect

We collect personal data in the following ways:

• Contact form submissions: Name, email address, phone number (optional), and any message content you choose to provide.
• Workshop visits: Name, contact details, and a description or note about your watch, recorded in our workshop intake log.
• Email correspondence: Any information included in messages you send us.
• Website analytics: Anonymised usage data via analytics cookies, if you have consented to their use.

We do not collect sensitive personal data, financial information, or data from children under 18.

3. How We Use Personal Data

• To respond to enquiries submitted via our contact form or by email
• To manage workshop intake records for watches left in our care
• To communicate progress updates and condition assessments regarding your watch
• To maintain a record of services completed for warranty and reference purposes
• To understand website usage patterns and improve our pages (analytics only, with consent)

We do not use your personal data for unsolicited marketing. We do not sell, rent, or share your data with third parties for commercial purposes.

4. Legal Basis for Processing

Under the PDPA, we process personal data on the following lawful bases:

• Contractual necessity: Processing required to fulfil a service agreement with you (e.g. watch intake, service records).
• Legitimate interests: Responding to your enquiries and maintaining workshop records.
• Consent: Use of analytics cookies, which you may accept or decline via our cookie banner.

5. Data Retention

We retain personal data for the following periods:

• Contact enquiries not resulting in a service: Up to 12 months from last contact.
• Workshop service records: Up to 7 years, to allow for warranty reference and legal compliance.
• Analytics data: As configured by our analytics provider, typically 14 months.

After the applicable retention period, data is securely deleted or anonymised.

6. Data Protection Measures

We take reasonable steps to protect personal data in our care:

• Workshop records are stored securely and access is restricted to staff members with a need to see them
• Email communications are handled via a secure provider
• The website uses HTTPS encryption for data in transit
• In the event of a data breach that poses a risk to your rights, we will notify the relevant authority and affected individuals in accordance with PDPA requirements

7. Cookies

Our website uses cookies. Essential cookies are required for the site to function and cannot be disabled. Analytics and preference cookies are optional and activated only with your consent. For a full description of the cookies we use and controls to manage them, please see our Cookie Policy.

8. Third-Party Services

We may use the following third-party services which may process data on our behalf:

• Google Analytics: Anonymised website usage statistics (with consent).
• Google Maps: An embedded map on our homepage. Google's own privacy policy applies to data processed through that service.
• Email provider: Used to receive and send correspondence. No personal data is sold to providers.

9. Your Rights

Under the PDPA, you have the right to:

• Request access to personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data where there is no lawful reason to retain it
• Withdraw consent for data processing where consent is the legal basis
• Object to processing based on legitimate interests
• Request data portability in a machine-readable format
• Lodge a complaint with the Office of the Personal Data Protection Committee (PDPC) of Thailand

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days.

10. External Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites. We encourage you to review the privacy policies of any external site you visit.

11. Children's Privacy

Our services are intended for adults aged 18 and above. We do not knowingly collect personal data from individuals under 18. If you believe we have inadvertently collected such data, please contact us so we can delete it.

12. Changes to This Policy

We may update this policy from time to time. When we do, we will revise the "Last updated" date at the top. Material changes will be noted clearly. Continued use of our website or services after any change constitutes acceptance of the updated policy.