Privacy Policy

Maesot Market ("we", "us", "our") operates this website and ships Thai and Burmese goods to customers in the United States. This Privacy Policy explains what personal information we collect, how we use it, who we share it with, and the choices you have. By using the site you agree to the practices described here.

1. Information we collect

We collect the following categories of information:

• Account information. Name, email address, password (stored hashed), and phone number when you create an account, sign in with Google or Facebook, or contact us.
• Order & shipping information. Shipping and billing addresses, items purchased, order history, bulk-request details, and any notes you include.
• Payment information. Payments are processed by Stripe. We do not store full card numbers on our servers — Stripe handles card data directly and returns only a payment confirmation and the last four digits.
• Communications. Messages you send through our contact form, customer-request forms, or email, including any attached images.
• Technical information. IP address, browser type and version, device information, pages viewed, and cookies / session tokens needed to keep you signed in.

2. How we use your information

• Process and fulfill your orders, including international shipping to the US.
• Create and maintain your account and authenticate sign-ins.
• Send transactional emails — order confirmations, shipping updates, password resets, and replies to your requests.
• Respond to bulk-request quotes, customer-support tickets, and back-in-stock notifications you have opted into.
• Detect, prevent, and investigate fraud, abuse, and security incidents.
• Comply with legal obligations and enforce our Terms of Service.
• Improve our products, site performance, and customer experience.

3. Service providers we share with

We share the minimum personal information necessary with trusted third-party providers who help us run the business:

• Stripe — payment processing.
• DHL Express and US domestic carriers (USPS, UPS, FedEx) — international and last-mile shipping.
• Cloudinary — image hosting for product photos and customer-uploaded images.
• MongoDB Atlas — database hosting.
• Resend — transactional email delivery.
• Vercel — site hosting and infrastructure.
• Google and Facebook — optional sign-in providers (only if you choose to use them).

Each provider is contractually required to protect your information and use it only for the services they provide to us.

4. Cookies and tracking

We use cookies and similar technologies that are strictly necessary to keep you signed in, remember your cart, and protect against fraud. We do not sell your information and we do not use cross-site advertising trackers. You can block cookies in your browser settings, but parts of the site (cart, checkout, account) will not work without them.

5. International transfers

Maesot Market operates between Thailand and the United States. Information you provide will be transferred to and processed in both countries, as well as anywhere our service providers operate. We take reasonable steps to ensure your information is protected wherever it is processed.

6. Data retention

We keep your account and order information for as long as your account is active or as needed to provide services, comply with legal obligations (such as tax and accounting), resolve disputes, and enforce our agreements. Order records are typically retained for at least seven years for accounting and tax purposes.

7. Your choices and rights

• Access and update. Sign in and visit your account profile to view or update your name, email, phone number, and addresses.
• Account deletion. You can request deletion from your account profile. We honor a 30-day grace period during which you can email us to cancel the request. After the grace period your account is permanently anonymized; older orders are kept (de-linked from you) for our accounting records.
• Marketing emails. We do not currently send marketing email broadcasts. Transactional emails (order updates, password resets, replies to your messages) are part of providing the service and cannot be opted out of while you have an active order or account.
• Regional rights. Depending on where you live (for example, California under the CCPA, or the EU/UK under GDPR), you may have additional rights to access, correct, delete, or port your data, or to object to certain processing. Contact us using the details below to exercise these rights.

8. Children

Maesot Market is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it.

9. Security

We use industry-standard safeguards including TLS encryption in transit, hashed passwords, signed image uploads, and access controls on internal staff tools. No method of transmission or storage is perfectly secure, but we work continually to protect your information.

10. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes we will update the "Last updated" date above and, where appropriate, notify you by email or through the site. Continued use of the site after a change indicates acceptance of the updated policy.

11. Contact us

Questions, requests, or complaints about this Privacy Policy can be sent through our contact form. We typically respond within one business day.