Privacy Policy

1. Introduction

Mainspring Hall ("we", "the workshop") operates from Lot G-22, Suria Mall, Putrajaya Boulevard, 62000 Putrajaya, Malaysia. This policy describes how we collect, use, and protect personal information provided to us through our website, written enquiries, and workshop engagements.

We take the handling of personal information seriously. The information we collect is used solely for the purposes of managing enquiries and delivering workshop services. Questions about this policy can be directed to [email protected].

2. Information We Collect

We collect personal information only when it is provided to us directly, through the following channels:

• Contact form: name, email address, phone number (optional), and message content
• Workshop intake: name, contact details, and relevant information about the piece being submitted
• Website analytics: page view data, browser type, and general location (country level) via analytics cookies, where consent is given

Legal basis for processing: Your information is processed on the basis of your consent (where provided), contractual necessity (when you engage a workshop service), and our legitimate interest in responding to enquiries and maintaining client records.

Retention: Enquiry data is retained for 24 months from the date of last contact. Workshop engagement records (including written reports and correspondence) are retained for 7 years in accordance with standard Malaysian business record-keeping practice.

3. How We Use Your Information

Personal information collected is used for the following purposes:

• Responding to enquiries submitted through the contact form or by email
• Scheduling appointments and managing workshop engagements
• Preparing and delivering written condition reports and project documentation
• Sending annual storage notes and condition reports to clients enrolled in long-term storage
• Complying with applicable Malaysian law and record-keeping obligations
• Understanding how our website is used (analytics, where consent is given)

We do not send marketing communications without explicit consent. We do not sell, lease, or share personal data with third parties for commercial purposes. Analytics data, where used, is processed by a third-party analytics provider under a data processing agreement.

4. How We Protect Your Information

We implement reasonable technical and organisational measures to protect personal information from unauthorised access, disclosure, or loss. These include:

• Secure (HTTPS) data transmission on our website
• Access to personal data restricted to workshop staff directly involved in the relevant engagement
• Physical records stored in a locked environment within the workshop premises
• Digital records stored on password-protected systems

In the event of a data breach affecting your personal information, we will notify affected individuals in accordance with our obligations under the Personal Data Protection Act 2010 (Malaysia) within a reasonable timeframe.

5. Cookies

Our website uses cookies. Essential cookies are required for the website to function. Optional cookies (analytics and preference) are only set with your consent. You can manage your cookie preferences at any time through our Cookie Policy page.

6. Your Rights

Under the Personal Data Protection Act 2010 (Malaysia) and applicable data protection principles, you have the following rights regarding your personal information:

• Access: You may request a copy of the personal data we hold about you
• Correction: You may request correction of inaccurate or incomplete data
• Withdrawal of consent: Where processing is based on consent, you may withdraw that consent at any time
• Erasure: You may request deletion of personal data, subject to legal retention obligations
• Objection: You may object to processing where it is based on legitimate interest
• Complaint: You may lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP) if you believe your rights have been infringed

To exercise any of these rights, contact us at [email protected]. We will respond within 21 days.

7. Third-Party Links

Our website may contain links to external resources. We are not responsible for the privacy practices of third-party websites and encourage you to review their policies independently before providing personal information.

8. Children's Privacy

Our services are intended for adults aged 18 and over. We do not knowingly collect personal information from individuals under the age of 18. If you believe a minor has submitted personal data through our website, please contact us so we can remove it.

9. Changes to This Policy

This policy may be updated periodically to reflect changes in our practices or applicable law. Material changes will be noted with a revised date at the top of this page. Continued use of our website following a change constitutes acceptance of the revised policy.

10. Contact for Data Enquiries

Data controller: Mainspring Hall

Address: Lot G-22, Suria Mall, Putrajaya Boulevard, 62000 Putrajaya, Malaysia

Email: [email protected]