Cookie Policy

1. What Are Cookies

Cookies are small text files placed on your device (computer, smartphone, or tablet) when you visit a website. They are widely used to make websites function properly, enhance user experience, and provide information to website operators.

In addition to cookies, we may also use similar technologies such as:

• Web beacons (also called pixel tags or clear GIFs)
• Local storage (HTML5 localStorage and sessionStorage)
• Device fingerprinting (limited to essential security purposes only)

This policy applies to all such technologies. When we refer to "cookies," we include all applicable tracking technologies unless stated otherwise.

2. How We Use Cookies

We use cookies and similar technologies for the following purposes:

• Essential Operations: Enabling core functionality such as user authentication, session management, and security
• Preferences: Remembering your settings, such as language preference and display options
• Analytics: Understanding how visitors interact with our website to improve user experience and performance
• Marketing: Measuring the effectiveness of our advertising and delivering relevant content (only with your consent)

3. Types of Cookies We Use

3.1 Strictly Necessary Cookies

These cookies are essential for the website to function. They enable core features like page navigation, secure access, and form submissions. The website cannot function properly without these cookies, and they cannot be disabled.

Legal Basis: Legitimate interest / contractual necessity (no consent required under PDPA §24(6) and GDPR Article 6(1)(f)).

3.2 Functional Cookies

These cookies allow the website to remember your choices and provide enhanced, personalized features. For example, they store your preferred language (English, Thai, or Chinese) so you don't have to set it each visit.

Legal Basis: Consent (PDPA §19, GDPR Article 6(1)(a)).

3.3 Analytics Cookies

These cookies help us understand how visitors use our website by collecting anonymized, aggregated data such as pages visited, time spent on pages, bounce rates, and traffic sources. This data helps us improve the website's performance and user experience.

Legal Basis: Consent (PDPA §19, GDPR Article 6(1)(a)).

3.4 Marketing Cookies

These cookies may be used to track visitors across websites and display relevant advertisements. We currently do not use marketing cookies on the SpaManager website. If we introduce marketing cookies in the future, we will update this policy and request your explicit consent before activation.

Legal Basis: Explicit consent required (PDPA §19, GDPR Article 6(1)(a)).

4. Specific Cookies We Use

4.1 First-Party Cookies

4.2 Third-Party Cookies

Note: Google Analytics cookies are only set after you provide consent via our cookie banner. For Google's privacy practices, see Google's Privacy Policy.

5. Cookie Consent

5.1 When you first visit our website, a cookie consent banner will appear allowing you to accept or reject non-essential cookies.

5.2 Strictly necessary cookies do not require consent and are set automatically, as they are essential for the website to function.

5.3 All other cookies (functional, analytics, marketing) require your explicit, informed consent before activation.

5.4 You can withdraw your consent at any time by:

• Clearing your browser cookies and revisiting our website (the consent banner will appear again)
• Adjusting your browser settings to block or delete specific cookies
• Contacting us at privacy@spamanager.io

5.5 Withdrawing consent does not affect the lawfulness of processing based on consent before its withdrawal, in accordance with PDPA §19 paragraph 5 and GDPR Article 7(3).

6. Managing Cookies

You can control and manage cookies through your browser settings. Below are instructions for common browsers:

Browser Settings

• Google Chrome: Settings → Privacy and security → Cookies and other site data
• Mozilla Firefox: Settings → Privacy & Security → Cookies and Site Data
• Safari: Preferences → Privacy → Cookies and website data
• Microsoft Edge: Settings → Cookies and site permissions → Cookies and site data

Opt-Out of Analytics

You can opt out of Google Analytics tracking by installing the Google Analytics Opt-Out Browser Add-on.

7. Third-Party Cookies

Some cookies are placed by third-party services that appear on our pages. We do not control how these third parties use their cookies. We recommend reviewing their privacy policies:

• Google (Analytics): Privacy Policy
• Google Fonts: Privacy FAQ

We only use third-party services from reputable providers who comply with applicable data protection regulations.

8. Do Not Track (DNT)

Some browsers support a "Do Not Track" (DNT) signal. While there is no universal standard for honoring DNT signals, we respect your choice. When DNT is enabled, we will not load non-essential cookies or analytics scripts unless you have explicitly opted in via our cookie consent banner.

9. Legal Basis (PDPA & GDPR)

Our use of cookies complies with the following data protection laws:

Thailand — PDPA (B.E. 2562)

• Essential cookies: Legitimate interest under PDPA §24(6) — necessary for the performance of a contract or legitimate purpose
• Non-essential cookies: Explicit consent under PDPA §19 — collected only after you provide informed, specific consent
• Right to withdraw consent: PDPA §19 paragraph 5 — you may withdraw consent at any time

EU/EEA — GDPR & ePrivacy Directive

• Essential cookies: Legitimate interest under GDPR Article 6(1)(f)
• Non-essential cookies: Consent under GDPR Article 6(1)(a) and ePrivacy Directive Article 5(3)
• Right to withdraw consent: GDPR Article 7(3)

USA — CCPA/CPRA

• California residents have the right to opt out of the "sale" or "sharing" of personal information. We do not sell personal information collected through cookies.
• You may exercise your rights by contacting us at privacy@spamanager.io

10. Changes to This Policy

We may update this Cookie Policy from time to time to reflect changes in technology, legislation, or our business practices. When we make material changes:

• We will update the "Last Updated" date at the top of this page
• We will reset the cookie consent banner so you can make an informed choice based on the updated policy
• For material changes affecting analytics or marketing cookies, we will request fresh consent

11. Contact Us

If you have questions about our use of cookies or wish to exercise your rights regarding cookie data, please contact us: