Privacy notice隐私通知

Cartsmith Studio ("we") is a small web studio in Malaysia run by Junyu. This notice explains what personal data we collect through this website, why, and your choices, in line with Malaysia's Personal Data Protection Act 2010.

What we collect

• Request form: your name, brand name, Instagram handle, email (optional), shop link, the template and package you're interested in, and your message.
• AI chat: the messages you type in the chat window. If you share your name, brand, shop link or Instagram handle in the chat, a copy of the conversation is saved so we can follow up.
• Demo stores: the cart and checkout in our demo stores run only in your browser. Nothing you type in a demo checkout is sent to us or anyone else.
• Fee calculator: runs only in your browser. Nothing is saved or sent.

Why we use it

To prepare your free mockup, reply to your questions, send you a quotation if you ask for one, and keep a record of our conversation. We do not sell your data and we do not add you to mailing lists without asking.

Who processes it for us

• Netlify hosts this website and stores form submissions.
• DeepSeek provides the AI that answers chat messages. Your chat messages are sent to DeepSeek's API to generate a reply and may be processed outside Malaysia. Please don't share passwords, IC numbers, card or bank details in the chat.
• Instagram (Meta), if you choose to message us there.

How long we keep it

Requests and chat leads are kept for up to 12 months after our last conversation, then deleted — unless you become a client, in which case we keep what we need for the project and our accounts. Mockups for people who don't go ahead are deleted within 14 days.

Your choices

You can ask us to show, correct or delete the personal data we hold about you, or tell us to stop contacting you. Message us on Instagram at @cartsmith.studio. We reply within 7 working days.

Cookies

This website doesn't use advertising or tracking cookies. Your browser stores your demo cart and chat conversation locally so they survive a page refresh; clearing your browser data removes them.