Privacy Policy

Last updated: TODO — set on publish

This notice explains how CoreAxis Technology Co., Ltd ("3DFabTH", "we") collects and uses personal data when you use 3dfabth.com. It is written to meet Thailand's Personal Data Protection Act (PDPA) and applies to everyone who uses the site.

This policy is currently available in English only. A Thai translation is in preparation. If anything here is unclear, please contact us and we will explain it in Thai.

1. What we collect

Account information
When you sign in with Google we receive your email address, name and profile picture. If you place an order we also store the first name, last name, username, phone number and date of birth you enter, and any delivery addresses you save.
3D models you upload
Files you upload to the print calculator (STL, 3MF, OBJ, STEP) are stored so we can slice them, quote them and print them. We treat these as confidential: your model files and their filenames are never shared with advertising or analytics providers, and are not used for any purpose other than fulfilling your order.
Orders and payments
We store your order contents, prices, delivery address and order status. Card details are entered directly with our payment provider and never reach our servers.
Usage data
If you accept analytics cookies we collect anonymous information about how the site is used — pages viewed, uploads attempted, quotes generated and orders completed. This is tied to a random identifier, not to your name or email.
Messages you send us
If you use the feedback form we keep the message, and the name and email you provide, so we can reply.

2. Why we use it, and our lawful basis

To provide the service — performance of a contract
Slicing your model, quoting a price, taking payment, printing and delivering your order, and letting you see your order history.
To keep the service working — legitimate interest
Keeping you signed in, preventing abuse of the slicing service, diagnosing faults, and remembering your language and theme choice.
To understand and improve the site — consent
Analytics cookies are used only if you accept them in the cookie banner. You can decline, and the site works exactly the same.
To meet our obligations — legal obligation
Keeping invoices and tax records for the period Thai law requires.

3. Cookies

We use the smallest set of cookies we can. Analytics cookies are off until you accept them.

Cookie Purpose Needs consent?
session_token Keeps you signed in. Essential
session_id Keeps your cart and uploaded files together before you sign in. Essential
lang Remembers whether you chose English, Thai or Burmese. Essential
themeMode Remembers light or dark mode. Essential
cookieConsent Remembers your answer to the cookie banner. Essential
_ga, _ga_* Google Analytics. Measures how the site is used. Only set after you accept. Analytics

If you decline, no analytics cookies are set and no usage data is sent. You can change your mind by clearing this site's cookies, which makes the banner appear again.

4. Who we share data with

We do not sell personal data. We share only what each provider needs to do its job:

  • Google — sign-in. Verifies your identity when you use Sign in with Google.
  • Google Analytics — usage measurement, only with your consent. Receives anonymous usage events. Never receives your name, email, address, or the filenames of models you upload.
  • Stripe — payments. Processes your card and receives the order amount. We never see or store your card number.
  • Cloud object storage — file hosting. Stores your uploaded models and product images.

Some of these providers process data outside Thailand. Where that happens we rely on the provider's standard contractual protections.

5. How long we keep it

We keep each kind of data only as long as it is needed for the purpose it was collected for:

  • Account details — while your account is open. TODO: confirm the period after closure.
  • Uploaded 3D models — kept so you can reprint them from your file history. TODO: confirm retention period.
  • Orders and invoices — TODO: confirm, must satisfy Thai tax record-keeping requirements.
  • Analytics data — TODO: confirm, GA4 is configured for either 2 or 14 months.

TODO — these periods must be confirmed and this note removed before publishing.

6. Your rights

Under the PDPA you can ask us to:

  • Give you a copy of the personal data we hold about you.
  • Correct anything that is wrong or out of date.
  • Delete your data, where we are not required to keep it.
  • Stop or limit how we use it.
  • Send your data to you or another provider in a usable format.
  • Object to a particular use, including withdrawing analytics consent at any time.
  • Complain to Thailand's Personal Data Protection Committee if you think we have handled your data wrongly.

To exercise any of these, contact us using the details below. We will respond within the time the PDPA allows.

7. Security

Traffic to the site is encrypted in transit. Sign-in uses Google rather than a password we store. Uploaded models are held in access-controlled storage and served through short-lived links. No system is perfectly secure, but we take reasonable steps to protect your data and will tell you promptly if a breach affects you.

8. Children

The service is not intended for children. If you believe a child has given us personal data, contact us and we will delete it.

9. Changes to this policy

If we change how we use personal data we will update this page and change the date at the top. Significant changes will be announced on the site.

10. Contact us

CoreAxis Technology Co., Ltd (3DFabTH)

Registered address

TODO — add registered company address

Privacy enquiries

TODO — add contact address for data subject requests

TODO — state whether a Data Protection Officer has been appointed, and give their contact details if so.