Cookie and Privacy Policy

At Shopmaak, we know that privacy is a fundamental right. This policy outlines how we handle personal data with transparency, following our "privacy-by-design" philosophy. Our goal is to protect your information while providing a seamless digital experience.

Article 1 – Context and Legal Basis

Shopmaak scrupulously respects national and international privacy laws. This policy informs you about the data we collect, why we collect it, and your legal rights.Legal Compliance: Our data processing is designed to comply with:

• Thailand: The Personal Data Protection Act (PDPA).
• Singapore: The Personal Data Protection Act (PDPA Singapore) – where our infrastructure is hosted.
• USA: Compliance with state-specific privacy acts (such as CCPA/CPRA) regarding transparency and data non-sale.
• European Union: The General Data Protection Regulation (GDPR).

Article 2 – Definitions

• Shopmaak: Refers to the agency, "we", "us", or "our".
• User: Any visitor to the Website https://shopmaak.com.
• Personal Data: Any information relating to an identified or identifiable individual.

Article 3 – Your Personal Data

3.1 – Collection MethodsWe collect data when you voluntarily contact us via our website, email, or phone. We may also query public business registries to verify corporate information (Registration numbers, official headquarters).3.2 – Data Collected & AnalyticsContact Data: Name, email, phone number, or any other information provided via our contact forms.Technical Data: IP address and electronic messaging metadata.Privacy-First Analytics: We use AnalyticsWP for internal statistics to improve our services. Our analytics are fully anonymized. Our analytics are fully anonymized and processed locally on our infrastructure. We do not use Google Analytics, intrusive cross-site trackers, or third-party hosted resources (such as Google Fonts). This ensures that your IP address and browsing habits are never exposed to external tech corporations. Data collected includes: search keywords used, pages visited, duration, and browser type. No link is established between this data and your physical identity.3.3 – Data Hosting & Security (Singapore)Your data is hosted on secure servers located in Singapore. Singapore provides a high level of data protection and security standards. We implement rigorous technical measures to protect your data against unauthorized access, loss, or alteration.3.3 – Data Hosting & Security (Singapore)To secure our forms and protect our infrastructure from automated attacks (bots), we use Altcha, a privacy-focused security solution. Unlike traditional captcha services, Altcha does not use tracking cookies, does not profile users, and does not transmit your personal data to third-party servers for marketing purposes. It works by requiring your browser to solve a complex mathematical puzzle (Proof-of-Work) locally on your device. The only data processed is the result of this calculation to verify that you are a human visitor. This process is fully compliant with our "privacy-by-design" philosophy.

Article 4 – Cookie Policy

We only use strictly necessary and functional cookies. These include remembering your language preferences (via Weglot) and ensuring a secure checkout process. These cookies do not track you for marketing purposes.To improve your experience, we use AnalyticsWP, a privacy-friendly analytics solution. Unlike traditional tools, AnalyticsWP is hosted directly on our servers and does not share data with third parties. It collects anonymized metrics without intrusive tracking or cross-site profiling. Because we do not track you personally, use third-party marketing cookies, or rely on intrusive third-party security trackers (like Google reCAPTCHA), we do not interrupt your browsing with an intrusive cookie banner. Our security verification (Altcha) is strictly functional and does not require consent as it does not store or process identifying information.

Article 5 – Third-Party

Our website is designed to be as autonomous as possible to protect your privacy. We do not use intrusive third-party hosted resources such as Google Fonts or Google reCAPTCHA. Instead, we host our own security assets on our secure infrastructure in Singapore.To provide our services, we only partner with specialized providers who adhere to strict privacy standards and international data protection laws:

• Altcha (Self-Hosted): For bot protection and form security. Unlike traditional captcha services, Altcha is hosted directly on our servers. It uses a "Proof-of-Work" mechanism that processes calculations locally in your browser. No tracking cookies are used, and no data is sent to third-party servers for this security check.
• Weglot: For website translation. Weglot processes only the data necessary to display the website in your preferred language.
• BeamCheckout: For secure payment processing. BeamCheckout ensures your transaction data is handled with the highest level of encryption and security.

These partners only process the data necessary to perform their specific functions (e.g., language display, transaction routing, or security verification) and are contractually committed to non-disclosure. Shopmaak does not sell, rent, or trade your personal data to any third partie

Article 6 – Your Rights

Regardless of your location, Shopmaak grants you the following rights:

• Access & Rectification: Get a copy or correct your data.
• Erasure: Request the deletion of your personal information.
• Non-Discrimination: We will never discriminate against you for exercising your privacy rights.
• Opt-out: You have the right to object to any direct marketing.

Article 7 – Contact & Claims

For any questions or to exercise your rights, please contact our Data Privacy Officer: Email: moc.kaampohs@ycavirp. If you feel your rights are not respected, you may lodge a complaint with the PDPC (Thailand), the PDPC (Singapore), or your local data protection authority.