Privacy Policy

Last Updated: January 10, 2026

At Pivot & Grain, we respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your data when you visit our website or use our watch repair services.

1. Information We Collect

We collect information that you provide directly to us, including:

  • Name and contact information (email address, phone number, postal address)
  • Details about your watch and service requirements
  • Communication preferences
  • Payment information (processed securely through our payment providers)

We also automatically collect certain information when you visit our website:

  • Browser type and version
  • IP address and location data
  • Pages visited and time spent on our website
  • Referring website addresses

2. How We Use Your Information

We use the information we collect for the following purposes:

  • To provide watch repair and maintenance services
  • To communicate with you about your service requests and appointments
  • To send service updates and important notices
  • To improve our website and services
  • To respond to your inquiries and requests
  • To comply with legal obligations and protect our rights
  • To analyze website usage and optimize user experience

3. Legal Basis for Processing

We process your personal data based on:

  • Contract Performance: To fulfill our service agreements with you
  • Legitimate Interest: To improve our services and communicate relevant information
  • Consent: When you provide explicit permission for specific uses
  • Legal Compliance: To meet regulatory and legal requirements

4. Data Sharing and Disclosure

We do not sell your personal information. We may share your data with:

  • Service Providers: Third parties who assist with payment processing, email communications, and website hosting
  • Parts Suppliers: When necessary to source components for your watch repair
  • Legal Authorities: When required by law or to protect our legal rights

All third parties are required to maintain the confidentiality of your information and use it only for the purposes we specify.

5. Data Retention

We retain your personal information for as long as necessary to:

  • Provide our services and maintain service history records (typically 7 years)
  • Comply with legal, tax, and accounting requirements
  • Resolve disputes and enforce our agreements

After this period, we will securely delete or anonymize your data unless longer retention is required by law.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information:

  • Secure data encryption for sensitive information
  • Limited access to personal data on a need-to-know basis
  • Regular security assessments and updates
  • Secure physical storage of client records
  • Staff training on data protection practices

While we strive to protect your information, no method of transmission over the internet is completely secure. We cannot guarantee absolute security but continuously work to maintain the highest standards.

7. Cookies and Tracking

Our website uses cookies to enhance your browsing experience. We use:

  • Essential Cookies: Necessary for website functionality
  • Analytics Cookies: To understand how visitors use our site
  • Preference Cookies: To remember your settings and choices

You can manage your cookie preferences through our Cookie Policy page or your browser settings.

8. Your Rights

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the right to:

  • Access: Request a copy of the personal data we hold about you
  • Correction: Request correction of inaccurate or incomplete data
  • Withdrawal: Withdraw consent for data processing where applicable
  • Data Portability: Receive your data in a structured format
  • Deletion: Request deletion of your data (subject to legal retention requirements)
  • Restriction: Request limitation on how we use your data

To exercise these rights, please contact us at [email protected]

9. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.

10. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

11. International Data Transfers

Your information is primarily stored and processed in Malaysia. If we transfer data internationally, we ensure appropriate safeguards are in place to protect your information in accordance with applicable data protection laws.

12. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will notify you of significant changes by:

  • Posting the updated policy on our website with a new "Last Updated" date
  • Sending an email notification for material changes

Your continued use of our services after changes indicates your acceptance of the updated policy.

13. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Pivot & Grain

17 Jalan Dato' Bandar Tunggal

70000 Seremban, Negeri Sembilan

Malaysia

Email: [email protected]

Phone: +60 6-7628 3491

14. Supervisory Authority

If you believe we have not addressed your concerns adequately, you have the right to lodge a complaint with the relevant supervisory authority:

Personal Data Protection Department

Ministry of Communications and Digital

Malaysia