Privacy Policy
Last updated: TODO — set on publish
This notice explains how CoreAxis Technology Co., Ltd ("3DFabTH", "we") collects and uses personal data when you use 3dfabth.com. It is written to meet Thailand's Personal Data Protection Act (PDPA) and applies to everyone who uses the site.
This policy is currently available in English only. A Thai translation is in preparation. If anything here is unclear, please contact us and we will explain it in Thai.
1. What we collect
- Account information
- When you sign in with Google we receive your email address, name and profile picture. If you place an order we also store the first name, last name, username, phone number and date of birth you enter, and any delivery addresses you save.
- 3D models you upload
- Files you upload to the print calculator (STL, 3MF, OBJ, STEP) are stored so we can slice them, quote them and print them. We treat these as confidential: your model files and their filenames are never shared with advertising or analytics providers, and are not used for any purpose other than fulfilling your order.
- Orders and payments
- We store your order contents, prices, delivery address and order status. Card details are entered directly with our payment provider and never reach our servers.
- Usage data
- If you accept analytics cookies we collect anonymous information about how the site is used — pages viewed, uploads attempted, quotes generated and orders completed. This is tied to a random identifier, not to your name or email.
- Messages you send us
- If you use the feedback form we keep the message, and the name and email you provide, so we can reply.
2. Why we use it, and our lawful basis
- To provide the service — performance of a contract
- Slicing your model, quoting a price, taking payment, printing and delivering your order, and letting you see your order history.
- To keep the service working — legitimate interest
- Keeping you signed in, preventing abuse of the slicing service, diagnosing faults, and remembering your language and theme choice.
- To understand and improve the site — consent
- Analytics cookies are used only if you accept them in the cookie banner. You can decline, and the site works exactly the same.
- To meet our obligations — legal obligation
- Keeping invoices and tax records for the period Thai law requires.
3. Cookies
We use the smallest set of cookies we can. Analytics cookies are off until you accept them.
| Cookie | Purpose | Needs consent? |
|---|---|---|
| session_token | Keeps you signed in. | Essential |
| session_id | Keeps your cart and uploaded files together before you sign in. | Essential |
| lang | Remembers whether you chose English, Thai or Burmese. | Essential |
| themeMode | Remembers light or dark mode. | Essential |
| cookieConsent | Remembers your answer to the cookie banner. | Essential |
| _ga, _ga_* | Google Analytics. Measures how the site is used. Only set after you accept. | Analytics |
If you decline, no analytics cookies are set and no usage data is sent. You can change your mind by clearing this site's cookies, which makes the banner appear again.
4. Who we share data with
We do not sell personal data. We share only what each provider needs to do its job:
- Google — sign-in. Verifies your identity when you use Sign in with Google.
- Google Analytics — usage measurement, only with your consent. Receives anonymous usage events. Never receives your name, email, address, or the filenames of models you upload.
- Stripe — payments. Processes your card and receives the order amount. We never see or store your card number.
- Cloud object storage — file hosting. Stores your uploaded models and product images.
Some of these providers process data outside Thailand. Where that happens we rely on the provider's standard contractual protections.
5. How long we keep it
We keep each kind of data only as long as it is needed for the purpose it was collected for:
- Account details — while your account is open. TODO: confirm the period after closure.
- Uploaded 3D models — kept so you can reprint them from your file history. TODO: confirm retention period.
- Orders and invoices — TODO: confirm, must satisfy Thai tax record-keeping requirements.
- Analytics data — TODO: confirm, GA4 is configured for either 2 or 14 months.
TODO — these periods must be confirmed and this note removed before publishing.
6. Your rights
Under the PDPA you can ask us to:
- Give you a copy of the personal data we hold about you.
- Correct anything that is wrong or out of date.
- Delete your data, where we are not required to keep it.
- Stop or limit how we use it.
- Send your data to you or another provider in a usable format.
- Object to a particular use, including withdrawing analytics consent at any time.
- Complain to Thailand's Personal Data Protection Committee if you think we have handled your data wrongly.
To exercise any of these, contact us using the details below. We will respond within the time the PDPA allows.
7. Security
Traffic to the site is encrypted in transit. Sign-in uses Google rather than a password we store. Uploaded models are held in access-controlled storage and served through short-lived links. No system is perfectly secure, but we take reasonable steps to protect your data and will tell you promptly if a breach affects you.
8. Children
The service is not intended for children. If you believe a child has given us personal data, contact us and we will delete it.
9. Changes to this policy
If we change how we use personal data we will update this page and change the date at the top. Significant changes will be announced on the site.
10. Contact us
CoreAxis Technology Co., Ltd (3DFabTH)
Registered address
TODO — add registered company address
Privacy enquiries
TODO — add contact address for data subject requests
TODO — state whether a Data Protection Officer has been appointed, and give their contact details if so.