Privacy Policy

1. Introduction

Thepex ("we", "us", "our") is a watch repair and restoration workshop based in Bangkok, Thailand. We take the privacy of our customers and website visitors seriously. This policy explains what personal information we collect, why we collect it, how we use it, and what rights you have in relation to it.

This policy applies to all personal data collected through our website at thepex.world, through our contact form, by telephone, and in person at our workshop. If you have questions about this policy, please contact us at [email protected].

2. Data We Collect

Information You Provide

• Name and contact details (email address, phone number) submitted via the website contact form or provided in person
• Details about your watch and the service you are enquiring about
• Any other information you choose to share in a message or conversation

Information Collected Automatically

• Basic analytics data (pages visited, device type, approximate location) if you accept analytics cookies
• Technical log data (IP address, browser type, visit timestamps) for security purposes
• Cookie preferences stored in your browser's local storage

Legal Basis for Processing (Thailand PDPA)

We process your personal data under Thailand's Personal Data Protection Act B.E. 2562 (2019) ("PDPA"). The legal bases we rely on are: your consent (for optional analytics cookies and marketing communications), performance of a service contract (to respond to your service enquiry and carry out repair work), and our legitimate interests (in maintaining secure systems and improving our website).

3. How We Use Your Data

• To respond to your enquiry about watch repair or restoration
• To communicate with you about the progress of a service or restoration
• To arrange collection or return of your watch
• To maintain a basic service record for follow-up or warranty purposes
• To understand how our website is used and improve the experience (only with analytics consent)
• To comply with applicable Thai laws and regulations

We do not use your personal data for automated decision-making or profiling. We do not send unsolicited marketing emails. If you would like to receive occasional workshop news, you may opt in separately — this is entirely optional and you may withdraw at any time.

4. Data Sharing

We do not sell, rent, or share your personal data with third parties for commercial purposes. We may share data in the following limited circumstances:

• Service providers: Hosting and email providers who process data on our behalf under data processing agreements
• Analytics: Anonymised usage data with Google Analytics, only if you have accepted analytics cookies
• Legal requirements: Where we are required to disclose information by Thai law or a competent authority

5. Data Retention

We retain contact enquiry data for up to 24 months, after which it is securely deleted unless an ongoing service relationship requires longer retention. Service records related to repair work are kept for up to 5 years for warranty and follow-up purposes. Analytics data is retained for a maximum of 14 months as configured in Google Analytics.

6. Data Security

Our website uses HTTPS encryption for data in transit. Access to customer data is restricted to workshop staff who require it to carry out their work. We review our security practices periodically and take reasonable steps to protect personal data from unauthorised access, loss, or alteration. In the event of a data breach that affects your rights, we will notify you as required under the PDPA.

7. Cookies

Our website uses cookies for essential functionality (e.g., remembering your cookie preferences) and, with your consent, for analytics. You can manage your cookie preferences at any time via our Cookie Policy page. Essential cookies cannot be disabled as they are necessary for the site to function.

8. Your Rights Under the PDPA

Under Thailand's Personal Data Protection Act, you have the following rights regarding your personal data:

• Right to access: You may request a copy of the personal data we hold about you
• Right to rectification: You may ask us to correct inaccurate or incomplete data
• Right to erasure: You may request that we delete your personal data where there is no longer a lawful basis to retain it
• Right to restrict processing: You may ask us to pause certain uses of your data while a concern is resolved
• Right to data portability: You may request your data in a structured, machine-readable format where technically feasible
• Right to object: You may object to processing based on our legitimate interests
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting prior processing

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with Thailand's Personal Data Protection Committee (PDPC) if you believe your rights have not been respected.

9. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies before providing any personal information.

10. Children's Privacy

Our services are intended for adults aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe we have inadvertently collected data from a minor, please contact us so we can delete it promptly.

11. Changes to This Policy

We may update this policy from time to time. When we do, we will revise the "Last Updated" date at the top. For material changes, we will provide a more prominent notice on the website. Continued use of our services after changes are posted constitutes acceptance of the revised policy.

12. Contact

For any questions or to exercise your rights under this policy, please contact us: