Privacy policy.

Who we are

The Watchmaker's Atelier is a watch servicing workshop, watch club and cafe at 11 Binjai Park, Singapore 589823, operated by Gallant-Times Pte. Ltd. (“we”, “us”).

This policy explains how we handle personal data in line with Singapore's Personal Data Protection Act 2012 (PDPA). It covers information you give us through this website, on WhatsApp, by phone or email, and in person at the atelier.

What we collect

We only ask for what we need to look after you and your watch.

When you get in touch

Your name, phone number and email address, and whatever you choose to send us: messages, and photographs of your watch or of a piece you would like to sell.

When you leave a watch with us

Your contact details; the watch's brand, model, reference and serial numbers, its condition and photographs taken while we work on it; the work you approve, the estimate and the service history.

When you buy, sell or consign a piece

Details of the piece and the transaction, and payment records. Where the law requires it, such as the anti-money-laundering checks that apply to dealers in precious metals and stones, we also collect identification details. We don't ask for NRIC or passport numbers otherwise.

Card and PayNow payments are processed by the banks and payment providers involved. We keep a record of the payment, not your full card details.

How we use it

• To reply to your enquiries and give you a diagnosis and estimate.
• To carry out the work you've approved, and to reach you before doing anything that changes the estimate.
• To tell you when your watch is ready, and to honour your service warranty.
• To arrange the sale, purchase or consignment of pre-owned pieces.
• To take payment and keep proper business records.
• To meet our legal and regulatory obligations.
• To send you news about the atelier, club events or new pieces, but only if you've asked us to. You can stop these at any time.

Your consent

When you give us personal data for one of the purposes above, you consent to our using it for that purpose. We won't use it for anything else without asking you first, unless the law allows or requires it.

You can withdraw your consent at any time by contacting us. We'll act on it within a reasonable time and tell you if it affects what we can do for you. For example, we can't confirm an estimate or return a watch without a way to reach you.

Who we share it with

We don't sell or rent personal data. We share it only when we need to:

• with suppliers we have to involve to complete work you've approved, for example to order a genuine part;
• with banks and payment providers, to process payments;
• with couriers, if you ask us to send something;
• with the providers that run our messaging, email, website and records, who may use it only to provide their service;
• with professional advisers, and with the police, regulators or courts where the law requires it.

Some of these providers, WhatsApp among them, store data outside Singapore. Where personal data leaves Singapore, we take reasonable steps to make sure it is protected to a standard comparable to the PDPA.

This website

You can browse this site without telling us who you are. It has no forms. The contact buttons open WhatsApp, your phone or your email app, and anything you send from there reaches us as an ordinary message.

My Watches

If you've left a watch with us, you can sign in on the My Watches page to see where it is in our workshop, its service history, its warranty and the photographs we have already sent you. There's no password: you sign in by sending us a one-time code on WhatsApp from your own phone, and the page then shows only the records linked to the number it came from. Nothing can be changed from the page.

Cookies and analytics

We don't use analytics or advertising trackers. The only cookies on this site are the two that signing in to My Watches needs: one holds a sign-in attempt for a few minutes, and the other keeps you signed in on that device for up to 14 days, or until you log out. Scripts on the page can't read them, and they aren't used for anything else. If you never sign in, neither is set. The page also leaves a note in your browser that you've signed in before, so it can open straight to your record; the note holds no personal data and is removed when you log out.

Hosting and third-party content

The site is hosted by Vercel, whose servers keep standard technical logs (IP address, browser type, the page requested and the time) to deliver the site and keep it secure.

To show you the site, your browser also loads typefaces from Google Fonts, the code for the 3D watch from jsDelivr, and the photographs on the Shop, Projects and My Watches pages from the platform we use to manage our listings and service records. Like any web request, these receive your IP address and browser details.

Links

Links to WhatsApp, Facebook, Instagram and Google Maps take you to services with their own privacy policies.

Keeping it safe

We protect personal data with reasonable security arrangements against unauthorised access, collection, use, disclosure, copying, modification and disposal.

No way of sending information over the internet is completely secure, so please don't send card numbers over WhatsApp or email. If a data breach is likely to cause you significant harm, we will tell you and the Personal Data Protection Commission, as the PDPA requires.

How long we keep it

We keep personal data only while it serves the purpose we collected it for, or for as long as the law requires. Service records are kept for at least the length of any warranty so that we can honour it, and business and transaction records for the period Singapore law requires. After that, we delete or anonymise them.

Your rights

You can ask us:

• for a copy of the personal data we hold about you, and how it has been used or disclosed in the past year;
• to correct anything that is wrong or incomplete;
• to stop using your data for a purpose, by withdrawing your consent.

Send your request to the contact details below. We'll reply as soon as we reasonably can, and within 30 days; if we need longer, we'll tell you when to expect an answer. We may charge a reasonable fee for a copy of your data, and will tell you the amount before we go ahead.

Changes to this policy

We may update this policy when our practices or the law change. The date at the top of this page shows when it was last revised.

Contact us

Questions, requests and concerns about personal data go to our Data Protection Officer:

If you're not satisfied with our response, you can contact the Personal Data Protection Commission at pdpc.gov.sg.