Legal
Privacy Policy
Last Updated: 10 April 2025 | Sang Kala, 12 Persiaran KLCC, 50088 Kuala Lumpur, Malaysia
1. Introduction
Sang Kala ("we", "us", "our") is committed to handling personal information with care and discretion. This Privacy Policy explains what data we collect from visitors to our website and clients who engage our watch service, how we use it, and the rights you hold in relation to it.
This policy applies to the website at sangkala.club and to all service interactions between Sang Kala and clients. By using this website or submitting an enquiry, you acknowledge the practices described below.
Our services are directed at adults. We do not knowingly collect personal data from individuals under the age of 18.
2. Data We Collect
Information you provide
When you submit an enquiry through our contact form, we collect the information you enter: your name, email address, and optionally your phone number and a message. No additional personal data is required to make an enquiry.
Information collected automatically
Our website may collect limited technical information when you visit, including IP address, browser type, pages viewed, and the duration of your visit. This is collected through analytics tools and cookies. Please refer to our Cookie Policy for detail on cookie use.
Service records
When you bring a watch for service, we create a written intake record that includes your contact details, a description of the piece, and its documented condition. This record is retained for service management and follow-up purposes.
Legal basis for processing (Personal Data Protection Act 2010, Malaysia)
We process personal data on the following bases: your consent (for marketing communications, if any); the performance of a service contract (for intake records and service delivery); and our legitimate interests in operating a professional workshop and responding to enquiries.
Retention
Enquiry data is retained for up to 24 months from the date of submission. Service intake records are retained for five years to support any future service history reference. You may request earlier deletion — see Section 6.
3. How We Use Your Data
- To respond to your enquiry and provide information about our services
- To create and manage service intake records for your watch
- To communicate with you during the service process regarding scope, timeline, or parts decisions
- To improve the content and usability of our website through anonymised analytics
- To comply with applicable legal obligations
We do not use your data for automated decision-making or profiling. We do not sell personal data to third parties.
Marketing
We do not send unsolicited marketing communications. If in future we introduce a newsletter or service update list, participation will be opt-in only and easily withdrawable.
4. Data Sharing
We do not share personal data with third parties except in the following limited circumstances:
- Service providers: Website hosting and email services operating under data processing agreements that require them to handle your data only as instructed by us
- Analytics: Anonymised, aggregated usage data may be shared with analytics providers to understand site performance
- Legal obligation: Where required by Malaysian law or a valid court order
Parts suppliers consulted during service are provided only with technical watch information, never with your personal contact details.
5. Data Protection Measures
We apply reasonable technical and organisational measures to protect personal data against unauthorised access, loss, or disclosure. These include secure hosting environments, access controls limited to relevant staff, and standard encryption for data in transit.
In the event of a data breach that affects your personal data and poses a risk to your rights, we will notify you and the relevant Malaysian authority without undue delay.
6. Your Rights
Under the Personal Data Protection Act 2010 (Malaysia), you have the following rights in relation to personal data we hold about you:
- Access: Request a copy of the personal data we hold about you
- Correction: Request correction of inaccurate or incomplete data
- Erasure: Request deletion of your data, where it is no longer needed for the purpose it was collected
- Withdrawal of consent: Where processing is based on consent, withdraw that consent at any time
- Objection: Object to processing based on legitimate interests in certain circumstances
To exercise any of these rights, contact us at [email protected]. We will respond within 21 days.
If you are dissatisfied with our handling of a request, you may raise a complaint with the Department of Personal Data Protection Malaysia (PDPD).
7. Cookies
Our website uses cookies to support site functionality and understand visitor behaviour. Essential cookies are necessary for the site to function and cannot be disabled. Optional analytics and preference cookies are only set with your consent via the cookie banner on our homepage.
For full detail on the cookies we use and how to manage them, see our Cookie Policy.
8. Third-Party Links
Our website may contain links to external websites. We are not responsible for the privacy practices of those sites. We encourage you to review the privacy policy of any external site you visit.
9. Children's Privacy
Our services are intended for adults aged 18 and over. We do not knowingly collect personal data from minors. If you believe a minor has submitted data to us, please contact us and we will arrange for its deletion.
10. Policy Updates
This policy may be updated periodically to reflect changes in our practices or applicable law. The "Last Updated" date at the top of this page will reflect the most recent revision. Continued use of our website after an update constitutes acceptance of the revised policy.
11. Contact for Privacy Matters
Data controller: Sang Kala
Address: 12 Persiaran KLCC, 50088 Kuala Lumpur, Malaysia
Email: [email protected]
Phone: +60 3 2382 9647