Privacy Policy

Who we are

This policy explains how Manditale Co., Ltd. (the MATÉR brand) (“we”) collects, uses and protects your personal data when you use materdining.com, in line with Thailand’s Personal Data Protection Act B.E. 2562 (PDPA).

Data controller: Manditale Co., Ltd. (the MATÉR brand) · Address: 741/87 Moo 7, Soi Ban Don Udom, Mak Khaeng, Mueang Udon Thani, Udon Thani · Privacy contact: LINE @manditale or email [email protected]

Data we collect

We collect only what we need to serve you:

• Account: email address (used for OTP sign-in)
• Order & delivery: full name, phone number, shipping address
• Tax invoice (if requested): name / company name, 13-digit tax ID, address
• Payment: handled by Omise — card details never reach or get stored on our server
• Chat: messages and files you send us about your order (custom-order chat)
• Technical: basic request/security data (e.g. IP address) for system security
• Anonymous usage analytics: which products/finishes you view or click, with a random anonymous id kept in your browser (localStorage) — not a cookie, and not linked to your name, account or order

Purpose & legal basis

We use your data to:

• Process and deliver your order — basis: performance of a contract
• Manage your account and contact you about orders — contract / consent
• Issue tax documents and meet legal duties — basis: legal obligation
• Keep the service secure and prevent fraud — basis: legitimate interest
• Understand which products/finishes are popular to improve the collection and site (anonymously) — basis: legitimate interest

Sharing / recipients

We do not sell your data. We share it only with the parties needed to run the service:

• Omise (Opn) — payment processing
• Brevo — order-confirmation and OTP emails
• Cloudflare — website/database hosting and bot-protection (Turnstile)
• Delivery & installation partners (our own Manditale team, plus a private courier for upcountry deliveries) — receive name, phone and address to deliver and install your order

International processing / transfers

Some providers process data outside Thailand: Brevo (EU servers), Cloudflare (global infrastructure) and Google Fonts (font loading); Omise processes in Thailand.

We use providers with appropriate data-protection standards and handle cross-border transfers in line with the PDPA.

Cookies & usage analytics

Cookies: we use a single strictly-necessary cookie (a session cookie for sign-in) so the site can work.

Usage analytics: we collect first-party, anonymous statistics with our own system — recording which products/finishes are viewed or clicked, using a random anonymous id stored in your browser’s localStorage (not a cookie). No identifying data, not shared with third parties, and no cross-site tracking.

We do NOT use third-party analytics or advertising tools such as Google Analytics or Meta Pixel.

You can clear it yourself: clearing the site’s data / localStorage in your browser resets this anonymous id.

Data retention

We keep data only as long as needed for its purpose:

• Account data: until you ask us to delete your account.
• Order and tax records: 5 years, as required by tax law.
• Security / access logs: 90 days.

Data security

We maintain appropriate technical and organisational measures to protect data against unauthorised access, use, alteration, disclosure or loss.

Technical: personal data encrypted with AES-256 at rest · all traffic over HTTPS/TLS · OTP sign-in with bot protection (Turnstile).

Organisational: access limited to those who need it.

If you do not provide data

Some data — such as your name, phone and address — is required to process and deliver your order. If you do not provide it, we may be unable to process or deliver your order.

Marketing

We do not currently use your data for marketing or advertising. If we introduce a newsletter or promotions in future, we will ask for separate consent and you can opt out at any time.

Your rights (under PDPA)

Subject to the conditions of the law, you have the right to:

• Access and obtain a copy of your data
• Rectify inaccurate data
• Erase your data / withdraw consent
• Object to or restrict processing
• Data portability
• Lodge a complaint with the PDPC

Exercising your rights & contact

To exercise your rights or ask about your personal data, contact us at LINE @manditale or email [email protected]. We will act on your request within the timeframe required by law. If you are unsatisfied, you may complain to the PDPC.

Changes to this policy

We may update this policy from time to time. Changes take effect when posted on this page with an updated “Last updated” date; for material changes we will highlight them clearly on the site (or by email where appropriate).