Privacy Policy

1. Introduction

Bumi Watch Repair & Restoration ("Bumi", "we", "us") operates the workshop at 36 Jalan Padungan, 93100 Kuching, Sarawak, Malaysia, and this website at bumiorax.live. We are committed to handling personal information responsibly and in line with the Personal Data Protection Act 2010 (PDPA) of Malaysia.

This policy describes what personal data we collect, why we collect it, how we use it, and the choices available to you. If you have questions about this policy, please write to us at [email protected].

2. Data We Collect

We collect only the information necessary to respond to enquiries and carry out our services:

• Contact details — name, email address, and telephone number submitted via the enquiry form or provided at the workshop.
• Service information — description of the piece and work requested, used to carry out assessment and service.
• Website usage data — browser type, pages visited, time on page, and similar analytics data collected via cookies (where consent is given).

We do not collect payment card data directly. Payments at the workshop are handled in person.

3. Legal Basis for Processing

Under the PDPA 2010 and general data protection principles, we process personal data on the following bases:

• Contract performance — when a service commission is agreed, processing name and contact details is necessary to fulfil it.
• Legitimate interests — responding to enquiries and maintaining workshop records.
• Consent — for analytics and marketing cookies, which you may accept or decline.

4. How We Use Your Data

• To respond to enquiries submitted via the website form or email.
• To carry out the agreed repair or restoration service.
• To contact you with updates if the scope of a commissioned service changes.
• To maintain a record of services carried out, for workshop reference and your future enquiries.
• To improve our website using anonymised analytics data (where consent is given).

We do not use your data for unsolicited marketing. We do not sell personal data to third parties.

5. Data Retention

Contact and service records are retained for three years from the date of the last service, after which they are deleted unless legal or warranty obligations require otherwise. Analytics data is retained for 26 months by the analytics provider.

6. Data Sharing

We share personal data only where necessary:

• Analytics providers — anonymised website usage data may be processed by analytics services (such as Google Analytics) where consent is given.
• Legal obligations — where required by Malaysian law or a court order.

We do not share your data with advertising networks or other commercial third parties.

7. Data Protection Measures

Workshop records containing personal information are stored in a locked cabinet accessible only to workshop staff. Website form submissions are transmitted over encrypted (HTTPS) connections. Access to digital records is restricted to authorised personnel. In the event of a data breach that may affect your rights, we will notify you and the relevant authority within a reasonable timeframe.

8. Cookies

Our website uses cookies to support basic functionality and, where you have consented, to collect anonymised analytics data. You can manage cookie preferences at any time via the cookie banner or our Cookie Policy. Essential cookies cannot be disabled as they are required for the site to function.

9. Your Rights

Under the PDPA 2010, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Request deletion of your data, subject to any legal retention obligations.
• Withdraw consent for optional processing (such as analytics cookies) at any time.
• Lodge a complaint with the Department of Personal Data Protection Malaysia.

To exercise any of these rights, contact us at [email protected]. We will respond within 21 days.

10. Third-Party Links

This website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and recommend you review their policies directly.

11. Children's Privacy

Our services are intended for adults. We do not knowingly collect data from individuals under 18 years of age. If you believe a minor has submitted data via our site, please contact us and we will delete it promptly.

12. Policy Updates

We may update this policy from time to time. The current version will always be available on this page with the last-updated date shown at the top. Continued use of the website after changes constitutes acceptance of the updated policy.

13. Contact

For privacy-related questions or data requests:

• Email: [email protected]
• Address: 36 Jalan Padungan, 93100 Kuching, Sarawak, Malaysia
• Phone: +60 82-374 951