Privacy Policy

1. Introduction

Glintcase operates a watch case and bracelet surface refinishing workshop at No. 47 Jalan Sultan Idris Shah, 30000 Ipoh, Perak, Malaysia. When you contact us through our website, send an enquiry by email, or drop off a piece at the workshop, you may provide personal information. This policy explains what information is collected, how it is used, and what rights you have in relation to it.

This policy applies to personal data collected through the Glintcase website at https://glintcasedill.live, through email correspondence directed to our contact addresses, and through the in-person intake process at the workshop.

Glintcase is the data controller for all personal data described in this policy. We comply with the Personal Data Protection Act 2010 (PDPA) of Malaysia, which governs how personal data is collected, processed, used, stored, and disclosed by commercial entities operating in Malaysia.

2. Personal Data We Collect

We collect only the personal data needed to respond to your enquiry and, where you proceed with a service, to carry out and document that work.

Data collected through the website contact form:

• Full name (required)
• Email address (required)
• Phone number (optional)
• Message content describing your piece and enquiry (optional)

Data collected through email correspondence:

• Your name and email address as supplied in the message header
• Any personal details included in the body of your correspondence
• Photographs of your watch or watch component if attached

Data collected at the workshop:

• Name and contact number for collection notification
• Description of the piece and agreed scope of work, recorded in writing
• Photographs of the piece taken at intake and at exit inspection

Data collected automatically (website):

• Browser type and operating system (via analytics cookies, if consented)
• Pages visited, time on page, and referral source (via analytics, if consented)
• IP address (retained for a limited period in server logs)

3. How We Use Personal Data

Service delivery and communication:

Personal data submitted through the contact form or provided in correspondence is used to respond to your enquiry, to arrange drop-off and collection, and to communicate about the status of work in progress. This use is based on the performance of a contract (or pre-contractual steps at your request) under the PDPA.

Workshop documentation:

Your name and contact details, along with photographs and the written scope note, are retained as part of the workshop record for each piece processed. This is used to document what work was carried out and to support any queries after collection. Retention is based on our legitimate interest in maintaining accurate service records.

Website analytics:

Where you have consented to analytics cookies, aggregated and anonymised data about site usage is used to understand which pages are most useful and to improve the site. No individual user profiles are created for marketing purposes.

Marketing:

We do not send marketing emails, newsletters, or promotional communications. Your contact details are not used for any purpose other than responding to your enquiry and managing your service.

4. Data Sharing and Third Parties

Glintcase does not sell, rent, or trade personal data. We do not share your personal information with third parties for their marketing purposes.

Third-party services used on this website:

• Google Analytics (where consented) — used to collect aggregated website usage data. Google's privacy policy applies to data processed by this service.
• Google Maps — an embedded map on our homepage uses Google's mapping service. Google's privacy policy applies when the map is loaded.
• Font services — fonts are loaded from Google Fonts CDN. This may result in a connection to Google servers when the page loads.

We may disclose personal data if required to do so by Malaysian law, a court order, or a regulatory authority. In such cases, we would disclose only the minimum data required.

5. Data Protection and Security

We take reasonable steps to protect the personal data you provide against unauthorised access, disclosure, alteration, or destruction.

• The website is served over HTTPS, which encrypts data in transit between your browser and our server.
• Workshop intake records — written scope notes and associated photographs — are stored in physical files accessible only to workshop staff. Digital copies are kept on devices protected by access credentials.
• Email correspondence is stored on a mail server provided by our hosting provider. Access is restricted to the workshop's authorised email accounts.
• We do not store credit card or payment information. Payments are handled in cash or bank transfer at collection; no payment data passes through this website.

In the event of a data breach that poses a risk to your rights and interests, we will notify affected individuals and, where required under Malaysian law, the relevant authority, without undue delay.

6. Data Retention

After the applicable retention period, personal data is deleted or anonymised. If you would like data removed before the retention period expires, see Section 7 below.

7. Cookies

Our website uses cookies. Essential cookies are required for the site to function and are placed regardless of consent. Optional cookies — including analytics — are placed only if you accept them through the cookie consent notice displayed when you first visit the site.

For full details of the cookies used, their purpose, and how to manage your preferences, please see our Cookie Policy.

8. Your Rights

Under the Personal Data Protection Act 2010 (Malaysia), you have the following rights in relation to the personal data we hold about you:

• Right to access — you may request a copy of the personal data we hold about you.
• Right to correction — you may request that inaccurate or incomplete data be corrected.
• Right to withdraw consent — where processing is based on your consent (such as analytics cookies), you may withdraw it at any time without affecting the lawfulness of processing before the withdrawal.
• Right to limit processing — in certain circumstances, you may request that we limit how we use your data.
• Right to object — where processing is based on legitimate interests, you may object to that processing in certain circumstances.

To exercise any of these rights, contact us at [email protected]. We will respond within 21 days. We may ask you to verify your identity before fulfilling any request.

If you believe your personal data has been handled contrary to the PDPA, you may lodge a complaint with the Personal Data Protection Department (Jabatan Perlindungan Data Peribadi), Ministry of Digital, Malaysia.

9. Links to External Sites

Our website may contain links to external websites — for example, to resources referenced in our content or to social platforms. We are not responsible for the privacy practices of those sites. When you leave our site, we encourage you to read the privacy policy of any site you visit.

10. Children's Privacy

Our services are intended for individuals aged 18 and above. We do not knowingly collect personal data from anyone under 18. If you believe a minor has submitted personal data through our website, please contact us at [email protected] and we will delete it promptly.

11. Changes to This Policy

We may update this policy from time to time to reflect changes in how we operate or in applicable law. When we make material changes, we will update the "Last updated" date at the top of this page. Where the changes are significant, we will also place a notice on the homepage for a period of 30 days.

Continued use of the website after the updated policy is posted constitutes acceptance of the revised terms, to the extent permitted by applicable law.

12. Contact for Data Enquiries

For any questions about this privacy policy or the personal data we hold, please contact us: