Skip to main content

Privacy Policy

Last updated: 1st of March 2026

1. Who we are

This Privacy Policy explains how Questkit (“we”, “us”) collects, uses, and shares personal information when you visit or make a purchase from https://questkit.co (the “Site”).

Data Controller (GDPR): Marketyze Co., Ltd.
Registered address: 54/22 Soi Sukhumvit 26, Khlongton Sub-District, Khlongtoey District, Bangkok 10110, Thailand
Support email: support@questkit.co

If you are located in the EEA/UK and you have questions about this policy, contact us at the email above.

‍

2. Personal information we collect

We collect personal information in these categories:

A) Information you provide

  • Contact details: name, email, phone, shipping and billing address
  • Order details: items purchased, order history, preferences
  • Customer support: messages you send us and any attachments you provide

B) Information collected automatically

  • Device and usage data: IP address, browser type, device identifiers, pages viewed, referral source, timestamps
  • Cookies and similar technologies (see “Cookies” section)

C) Information from third parties

  • Webflow (storefront and checkout platform)
  • Payment processors (payment confirmation, fraud signals)
  • Shipping carriers (delivery updates)
  • Analytics and advertising partners (attribution and measurement)
  • Third-party B2B contact databases (professional name, business contact details, and job title sourced from Apollo.io for advertising purposes)

‍

3. How we use your information and legal bases (GDPR)

We use your information to:

  1. Process orders and provide the service (payment, shipping, returns, order notifications)
    Legal basis: contract performance
  2. Provide customer support
    Legal basis:     contract performance and legitimate interests
  3. Prevent fraud and secure the Site
    Legal basis:     legitimate interests and legal obligations where applicable
  4. Marketing and communications (email or SMS only if you opt in, or where allowed)
    Legal basis: consent or legitimate interests (where permitted). You can unsubscribe anytime.
  5. Analytics and site improvement
    Legal basis:     legitimate interests, and consent where required for non-essential cookies
  6. Legal compliance (tax, accounting, responding to lawful requests)
    Legal basis: legal obligation
  7. B2B advertising audiences We may use professional contact data obtained from third-party B2B sources to create Custom Audiences on Meta (Facebook/Instagram). This data is used solely for audience matching — Meta hashes all identifiers before processing, and we delete the raw data immediately after upload. We do not use this data to contact individuals directly. Legal basis: legitimate interests (targeted B2B marketing to professional audiences relevant to our product)

‍

4. Sharing your information

We share personal information only as needed with:

  • Webflow (to power the store and checkout)
  • Payment providers [Stripe]
  • Shipping and logistics partners [DHL]
  • Email/SMS and customer support tools [Webflow]
  • Analytics and advertising partners [Google Analytics, Meta Pixel, Meta Custom Audiences]
  • Legal authorities if required by law or to protect rights and safety

‍

5. International data transfers

Your data may be processed outside your country (including the US or other regions) through our service providers. Where required for EEA/UK users, we use appropriate safeguards such as Standard Contractual Clauses.

‍

6. Retention

We keep personal information only as long as necessary:

  • Orders and tax records: 7 years
  • Customer support records: 2 years after last interaction
  • Marketing data: until you unsubscribe or 24 months after last engagement
  • Security logs: 12 months

‍

7. Your rights

EEA/UK: access, correction, deletion, portability, restriction, objection, and withdrawal of consent. You can also complain to your local data protection authority.
California (CCPA/CPRA): right to know, delete, correct, and opt out of “sale” or “sharing” of personal information as defined by law.

Opt-out: Email support@questkit.co with subject “Do Not Sell or Share My Personal Information”. Include the email used on your order/account and your country/state. We will process your request and confirm once completed.

To request removal from any B2B advertising audience, email support@questkit.co with subject "Advertising Audience Opt-Out". We will remove your record from future uploads and submit a suppression request to Meta within 30 days.

‍

8. Cookies

We use essential cookies for cart and checkout, and optional cookies for analytics and marketing if enabled. See our Cookie Policy for controls.

‍

9. Children

The Site is not intended for children under 16. We do not knowingly collect children’s data.

‍

10. Contact

Privacy questions or requests: support@questkit.co
Mail: 54/22 Soi Sukhumvit 26, Khlongton Sub-District, Khlongtoey District, Bangkok 10110