Privacy Policy

1. Who We Are

Stak Maker is a custom fabrication studio based in the Philippines, offering 3D printing, laser cutting, and Cricut & vinyl services to individuals and businesses. We operate the website stakmaker.com and its sub-domains.

We are registered as a personal data controller with the National Privacy Commission (NPC) of the Philippines under RA 10173. When we say "we," "our," or "Stak Maker," we mean the business and the people who run it.

2. What Information We Collect

We only collect what we need to serve you. Depending on how you use our site, this may include:

• Contact information — your name, email address, and phone number when you submit a quote request, create an account, or message us.
• Order information — items ordered, delivery address, payment method, and transaction records when you purchase through our shop.
• Project files — design files (STL, SVG, PNG, etc.) you upload when requesting a quote or placing an order. These are used only to produce your order and are not shared.
• Account information — username, password (stored as a hash — we never see it in plain text), and saved preferences if you create an account.
• Technical information — browser type, device type, IP address, and pages visited, collected automatically through cookies and server logs. We use this to keep the site secure and to understand how visitors use it.

We do not collect sensitive personal information as defined under RA 10173 (health records, race, religion, etc.).

3. How We Use Your Information

We use your personal data to:

• Process and fulfil your orders and quote requests
• Send order confirmations, status updates, and delivery notifications
• Respond to your messages and inquiries
• Issue invoices and process payments
• Improve our services and website based on how people use them
• Comply with legal and tax obligations in the Philippines

We do not sell, rent, or trade your personal data to any third party for marketing purposes.

4. Cookies

Our website uses cookies — small text files stored in your browser — to make the site work properly. Specifically:

• Essential cookies — required for your shopping cart, login session, and security features (WooCommerce). Without these the shop cannot function.
• Preference cookies — remember your calculator settings and saved preferences if you're logged in.
• Analytics cookies — we may use Google Analytics to understand how visitors use our site (pages visited, time on site). This data is anonymous and aggregated.

You can control cookies through your browser settings. Disabling essential cookies will affect cart and checkout functionality.

5. Third-Party Services

Running our shop requires sharing limited data with trusted third parties:

• WooCommerce (by Automattic) — our e-commerce platform. Order and payment data is processed through WooCommerce.
• Payment processors — if you pay online, your payment details are handled by a PCI-compliant payment gateway. We do not store your full card number.
• Google Analytics — collects anonymous browsing data to help us improve the site. Governed by Google's Privacy Policy.
• Facebook — if you contact us via Facebook Messenger, Facebook's data policies apply to those messages.

Each of these services is bound by its own privacy policy. We choose partners that take data protection seriously.

6. How We Store and Protect Your Data

Your data is stored on servers hosted in the Philippines / Southeast Asia region. We apply reasonable technical and organizational measures to protect your information, including:

• HTTPS encryption on all pages
• Password hashing (we never store plain-text passwords)
• Restricted access — only the people who need to see your data (to process your order) can access it
• Regular backups and security monitoring

No system is 100% secure. If we ever discover a breach that affects your personal data, we will notify you and the NPC in accordance with RA 10173.

7. How Long We Keep Your Data

• Order records — kept for up to 5 years to comply with Philippine tax and accounting requirements (BIR regulations).
• Quote requests — kept for 1 year or until you ask us to delete them.
• Account data — kept while your account is active. You can request deletion at any time.
• Project files — removed from our systems within 90 days after your order is completed, unless you ask us to keep them for reorders.

8. Your Rights Under RA 10173

As a data subject under the Philippine Data Privacy Act, you have the right to:

• Be informed — know what data we hold about you and how we use it (this policy)
• Access — request a copy of your personal data that we hold
• Correct — request that we fix inaccurate or outdated information
• Erasure — request deletion of your data, subject to legal retention requirements
• Object — object to certain types of processing, including direct marketing
• Data portability — receive your data in a structured, commonly used format
• Damages — claim compensation if we violate your privacy rights

To exercise any of these rights, email us at hello@stakmaker.com. We will respond within 15 working days.

If you believe we have not handled your data properly, you may file a complaint with the National Privacy Commission at www.privacy.gov.ph.

9. Children's Privacy

Our services are not directed to children under 18. We do not knowingly collect personal data from minors. If you believe a child has submitted information to us, please contact us and we will delete it promptly.

10. Changes to This Policy

We may update this policy when our services change or when required by law. We will post the updated policy here with a new "Last updated" date. For significant changes, we will notify customers by email.

Continued use of our site after a policy update means you accept the revised policy.

11. Contact Us