Privacy Policy

1. Introduction

Verge Foliot ("we", "us", "our") operates a watch repair bench at 17 Lorong Toh Aka, 10100 George Town, Pulau Pinang, Malaysia. This Privacy Policy explains how we collect, use, store, and protect personal data when you interact with us through our website at islandblueya.site, by phone, by email, or in person at our premises.

We take the handling of personal information seriously and operate in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia. By using our website or engaging our services, you agree to the practices described in this policy.

Questions about this policy can be directed to [email protected].

2. Data We Collect

2.1 Information You Provide

When you submit an enquiry through our website contact form, or contact us by phone or email, we may collect:

• — Your name
• — Email address
• — Phone number (if provided)
• — Details about the watch you are enquiring about
• — Any other information you choose to include in your message

When a watch is left with us for service, we additionally record make, model, serial number (if visible), and the service scope as agreed in writing.

2.2 Information Collected Automatically

When you visit our website, basic analytics data may be collected automatically, including pages visited, browser type, and approximate geographic location based on IP address. This is collected via cookies and analytics tools as described in our Cookie Policy.

2.3 Legal Basis for Processing

We process personal data on the basis of: (a) your consent where you have provided it; (b) the performance of a contract or pre-contractual steps when you engage our repair services; and (c) our legitimate interests in operating and improving our business.

3. How We Use Your Data

Personal data collected is used to:

• — Respond to your enquiry and confirm service scope
• — Provide the watch repair or refinishing service you have requested
• — Maintain our bench log for service record purposes (retained for three years)
• — Contact you during the service period if scope or timeline changes
• — Send service completion notifications
• — Comply with applicable law and regulations

We do not use your personal data for marketing purposes without your explicit consent. We do not sell, rent, or trade personal data to third parties.

3.1 Data Retention

Enquiry data from website forms is retained for up to twelve months. Service records (bench log entries) are retained for three years from the date of service completion. After these periods, data is securely deleted.

4. Data Protection Measures

We take reasonable steps to protect personal data against unauthorised access, loss, or misuse. These measures include:

• — Website communication over HTTPS (encrypted in transit)
• — Access to personal records limited to bench staff directly involved in your service
• — Physical bench log stored securely on-premises
• — Digital records stored on password-protected systems

In the event of a data breach that is likely to affect your rights and freedoms, we will notify relevant authorities and affected individuals in accordance with PDPA requirements and within a reasonable timeframe.

5. Cookies

Our website uses cookies for basic functionality and optional analytics. Full details of the cookies we use, their purpose, and how to manage your preferences are set out in our Cookie Policy.

6. Your Rights

Under the Personal Data Protection Act 2010 (Malaysia), you have the right to:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete personal data.
• Withdraw consent: Where processing is based on consent, withdraw it at any time.
• Limit processing: Request that we limit how we use your data in certain circumstances.
• Erasure: Request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to our legal record-keeping obligations.

To exercise any of these rights, contact us at [email protected]. We will respond within 21 days. If you believe your rights have not been upheld, you may contact the Department of Personal Data Protection Malaysia (JPDP) at www.pdp.gov.my.

7. Third-Party Links

Our website may contain links to external sites (for example, supplier websites or reference pages). We are not responsible for the privacy practices of those sites and recommend reviewing their own privacy policies.

8. Children's Privacy

Our services are not directed at persons under the age of 18. We do not knowingly collect personal data from children. If you believe a child has submitted data to us, please contact us at [email protected] and we will delete it promptly.

9. Policy Updates

We may update this policy from time to time to reflect changes in our practices or applicable law. The current version is always available at this URL. The "Last Updated" date at the top of this page indicates when the most recent revision took effect. Continued use of our website after a revision constitutes acceptance of the updated policy.

10. Contact

Data controller: Verge Foliot

17 Lorong Toh Aka, 10100 George Town, Pulau Pinang, Malaysia

Phone: +60 4-263 8194

Privacy enquiries: [email protected]