Privacy notice

1. Who is responsible for your data

Fabable3D, operated from Bangkok, Thailand, is the data controller for the personal data described in this notice under the Personal Data Protection Act B.E. 2562 (PDPA). Questions about this notice and requests to exercise your rights go to the contact address above.

2. What we collect

Account: your email address and either a password (stored only as a hash by our sign-in service) or magic-link sign-ins; your name, phone number and LINE ID if you add them to your profile; and optional survey answers such as company size and how you found us. Our sign-in service also records when you registered, whether you confirmed your email address and when you last signed in.

Orders and quotes: the settings you choose for each part, the price, the order status and history, the payment reference Beam gives us, any PO number you enter, and messages you send us about an order.

Delivery: the recipient name, phone number and Thai address you save or enter at checkout, and the EMS tracking number.

Billing: your company name, tax ID and billing address when you add them so they can appear on receipts, and an accounting contact email if you give one.

Uploaded models: the STL, STEP or 3MF files you upload, the slicer output and preview images derived from them, and the file names. We treat your models as confidential and use them only to quote, produce and support your orders.

Technical: our hosting and security logs record the network address and request details of every visit for as long as needed to run and protect the service. Cookies and optional website analytics are described separately in the cookie policy.

3. Why we use it and on what legal basis

To perform our contract with you (PDPA section 24(3)): giving you a quote, taking payment, producing and delivering your parts, issuing receipts, providing your account, saved parts and reorders, and answering your questions about an order.

To meet legal obligations (section 24(6)): keeping accounting and tax records, and responding to lawful requests from authorities.

For our legitimate interests (section 24(5)), where they are not outweighed by your rights: securing the service and preventing fraud, keeping hosting and security logs, planning printer capacity from anonymous order statistics, reviewing the list of registered accounts and their last sign-in date in our back office so that we can support customers and remove inactive accounts, and improving the service.

With your consent (section 19): optional website analytics, which are off until you accept them and which you can withdraw at any time in the cookie settings. See the cookie policy.

4. Who we share it with

Beam Checkout, our payment provider: when you pay online we send Beam the order amount and a payment reference. You enter your card, PromptPay or wallet details on Beam's own page; they never reach our servers. Beam's privacy policy applies to that page.

Thailand Post: the recipient name, phone number and address on every parcel, so it can be delivered and tracked.

Our email provider, which sends sign-in links, quotation PDFs, receipts and order emails on our behalf. It processes only what each message needs and may do so on servers outside Thailand; we rely on the PDPA exception for transfers that are necessary to perform our contract with you.

Our hosting provider in Bangkok, which supplies the server on which our database and file storage run. It has no routine access to the data, and its staff may act only on our instructions.

Authorities, when the law requires it. We do not sell personal data and do not share your models with anyone else.

5. How long we keep it

Order, payment and receipt records are kept for as long as Thai tax and accounting law requires, currently at least five years after the end of the year in which the order was placed, even if you delete your account.

Uploaded models, slicer output and previews are kept while your account exists so that you can reorder from your saved parts. You can delete a part from your account at any time, or ask us to delete all your files; we then remove them and their derived data from storage and from the next backup cycle. Files uploaded for a quote that never becomes an order are removed on request.

Account and profile data are kept until you delete your account or ask us to. An account that has never placed an order and has not been signed in to for two years is deleted automatically, together with its profile and saved addresses; if it still holds uploaded models, we remove those first. Accounts with orders are kept while the order records must be kept. Hosting and security logs follow a separate, short operational retention.

6. Security

Every connection to fabable3d.com is encrypted with TLS. Your data lives in a database and file storage that we host ourselves on a server in Bangkok, access to which is limited to authorised administrators. Sign-in is handled by a dedicated authentication service; passwords are stored only as hashes. We keep regular backups so that orders and files survive a hardware failure. Access to customer records in our back office is recorded in an audit log kept for one year, and email addresses are masked there unless an administrator deliberately reveals them.

7. Your rights

Under the PDPA you may ask to access your personal data or receive a copy of it, have it corrected, deleted or its use restricted, receive it in a portable format, object to processing based on our legitimate interests, and withdraw any consent you have given. Withdrawing consent does not affect processing that was lawful before you withdrew it.

Write to us at the contact address above. We may ask for information to verify that you are the account holder, and we answer within 30 days. If you are not satisfied with our answer, you can complain to Thailand's Personal Data Protection Committee (PDPC).

8. Changes

We may update this notice when the service or the law changes. The effective date at the top of this page shows the current version; material changes are announced on the site before they take effect.