プライバシーポリシー

1. Data Controller

This policy explains how Septillion Co., Ltd. (“the Company”, “we”), as the data controller, collects, uses, discloses, and protects your personal data when you use the Print My Design website (printmydesign.net), in accordance with Thailand’s Personal Data Protection Act B.E. 2562 (PDPA). Company registration no. 0105556031281 · Address 388/13-14 B-Avenue, Ratchaphruek Rd., Bang Waek, Phasi Charoen, Bangkok 10160 · For personal-data matters, contact [email protected].

2. Data We Collect

• Account & contact data: name, email, phone, password (stored hashed); and for business customers, company name, tax ID, and address.
• Shipping & order data: addresses, items, order history, quotations, and enquiries.
• 3D model files you upload to request a quote or print.
• Payment data: processed through payment providers. We do not store your card number, but we keep payment status and transaction references.
• Location (GPS) data: only when you allow it in your browser, to show nearby promotions and for regional analytics.
• Device & usage data: IP address, browser/device type, cookies, and visit data.

3. Sources of Data

We receive data directly from you (e.g. registration, orders, forms), automatically from your use of the website (cookies and logs), and from external sign-in providers you choose (Google, Microsoft), to the extent you permit.

4. Purposes and Legal Bases

We process data to: (a) perform a contract — create your account, process orders, deliver, issue receipts/tax invoices, and provide the 3D printing service; (b) our legitimate interests — security, fraud prevention, and service improvement; (c) legal obligations — retaining accounting and tax records; and (d) consent — marketing, analytics/advertising cookies, and access to GPS location. You may withdraw consent at any time.

5. Cookies

We use three categories of cookies: Necessary (make the site work; no consent required), Analytics (e.g. Google Analytics), and Marketing (e.g. advertising pixels and AdSense). Third-party analytics and marketing cookies run only after you consent via the cookie banner, which you can change at any time. See our Cookie Policy for details.

Visit-source cookies — From the first page you open, before you choose in the cookie banner, we set our own cookie pmd_src to remember for 30 days the channel that brought you here (e.g. Google, Facebook, LINE or ChatGPT), the campaign name and the time you arrived. It stores no ad-click ID and nothing that identifies you, and we do not pass it to any ad platform. When you place an order, we keep that channel with the order to measure which ads and channels work, on the basis of our legitimate interest. If you reject non-essential cookies or switch off analytics cookies, we delete it and record no source with your order. The cookies pmd_ref and pmd_sl are set when you arrive through a partner's referral link, to calculate the partner's commission (kept 30 days), and stay even if you reject non-essential cookies.

Advertising pixels and data matching — If you allow marketing cookies, we use advertising pixels from Google, Meta (Facebook/Instagram), Microsoft and OpenAI (ads in ChatGPT) to measure whether visits and orders came from an ad on that platform. The OpenAI Ads Pixel hashes (SHA-256) any email or phone number you type into a form on this site, inside your browser, before sending it. If you are signed in, it also sends your account email and member ID, hashed (SHA-256) on our server first. When you pay for an order, we send the order details to Meta and OpenAI together with contact details hashed with SHA-256 (Meta: email, phone number, name, district, province, postcode and country; OpenAI: email and phone number), plus your IP address and browser details. This data may be processed outside Thailand. If you do not consent, or withdraw consent in cookie settings, we do not send it.

6. Disclosure and Sharing

We disclose data only as necessary to processors who provide services to us — payment providers (Omise/Opn, Stripe), carriers (e.g. iShip, DHL, FedEx), cloud and email providers, and our internal management system (ERPNext); advertising platforms (Google, Meta, Microsoft, OpenAI) only if you allow marketing cookies (see section 5) — and to authorities where legally required. We do not sell your personal data.

7. International Transfers

Some providers may process data outside Thailand. We apply appropriate safeguards to protect it to PDPA standards.

8. Data Retention

We keep account data while your account is active. Order data and tax/accounting records are kept for the period required by law (generally at least 5 years). Uploaded 3D model files are auto-deleted per our retention policy, and marketing data is deleted when you withdraw consent.

9. Your Rights

Under the PDPA you have the right to access and obtain a copy of your data, rectify it, erase or destroy it, restrict its use, object to processing, request portability, and withdraw consent. To exercise these rights, contact [email protected]. You also have the right to lodge a complaint with the Personal Data Protection Committee (PDPC).

10. Data Security

We apply appropriate technical and organisational measures — including encrypted connections (HTTPS), password hashing, and access controls — to protect your data from unauthorised access, alteration, or disclosure.

11. Children’s Data

This service is not directed at minors. If you are a minor, please use the service under a guardian’s consent as required by law.

12. Marketing and Communications

We always send essential emails about your orders and service. Marketing and newsletter emails are sent only if you opt in, and you may unsubscribe at any time.

13. Changes to This Policy

We may update this policy from time to time. The version shown on this page is the current one.

14. Contact Us

Personal-data matters: Septillion Co., Ltd. · Email [email protected] · Tel 02 028 7445 · Address 388/13-14 B-Avenue, Ratchaphruek Rd., Bang Waek, Phasi Charoen, Bangkok 10160