04-01-2026

General information

sanatos operates sanatos.pro to provide information, product listings and customer support for AI home devices. This privacy policy explains which categories of personal data we collect, how we use them, with whom we may share them, and the safeguards we apply. We process data to deliver services such as order handling, device compatibility information, customer inquiries, and technical support. Our registered contact details are: 2187, Ban Meng Sub District, Amphoe Nong Ruea District, Khon Kaen Province 40210, Thailand. Phone: +66911670625. Business ID: 8490854707460. We handle personal data in line with applicable Thai law and relevant international standards where they apply.

sanatos 2187, Ban Meng Sub District, Amphoe Nong Ruea District, Khon Kaen Province 40210, Thailand [email protected]

Definitions

The following definitions are used in this policy to describe roles and types of data processing relevant to sanatos.pro and its services.

Personal data: any information relating to an identified or identifiable natural person, such as name, contact details, identifiers, and device usage information linked to a user account.

Processing: any operation performed on personal data including collection, storage, use, disclosure, deletion and transmission.

User: an individual who accesses or uses the sanatos.pro website or related services, including potential customers, purchasers and support requesters.

Service: the provision of product descriptions, sales facilitation, technical documentation, and support for AI home devices via sanatos.pro.

Cookies: small text files stored in a user’s browser to support site functionality, analytics and preferences.

What data we collect

We collect personal data both directly from users and automatically through technical systems. Collected data is limited to what is necessary for the intended purpose and is retained only as long as reasonably required.

Information you provide

When you interact with sanatos.pro, you may provide information needed to create accounts, place orders, request support, or communicate with us.

Identity and contact details: full name, email address, shipping and billing address, phone number.
Account and authentication data: username, password hashes, and profile settings.
Order and payment details: items ordered, invoices, and transaction references (payment credentials are processed by third-party payment providers).
Device and configuration details you submit: device model identifiers, serial numbers, and network configuration details when requesting compatibility information.
Support communications: messages, support tickets, and diagnostic data you provide during troubleshooting.
Marketing preferences and consent choices you provide when opting into newsletters or promotional communications.

Automatically collected data

Our systems collect technical and usage data automatically to operate the site, improve services, and analyze performance.

Device and connection data: browser type, operating system, IP address, and device identifiers.
Usage data: pages visited, search queries on the site, interaction events and time spent on pages.
Location data: coarse location derived from IP address for regional settings or fraud prevention.
Cookies and similar technologies used for session management and preferences.
Error and diagnostic logs relevant to site performance and support diagnostics.
Analytics data collected via third-party analytics tools used to improve the site experience.

Third-party data sources

We may receive information about you from service providers and partners when necessary to provide the services or to validate information.

Payment processors and business service providers for payment confirmation and fraud prevention.
Logistics and delivery partners for shipping and delivery coordination.
Authorized analytics and cloud infrastructure providers that host services and provide performance metrics.

Purposes of processing

We use collected data for the following legitimate purposes, each limited to what is necessary for that purpose.

To process orders, arrange delivery and manage billing.
To provide customer support and respond to inquiries or technical requests.
To maintain user accounts, authentication and basic account security.
To analyze usage and improve website content, navigation and device compatibility information.
To communicate with users about order status, service updates and important policy changes.
To detect, prevent and contribute security incidents, abuse and fraud.
To comply with legal and regulatory obligations and to respond to lawful requests from authorities.
To deliver marketing communications only where the user has given explicit consent.

Lawful bases for processing

Where applicable, we rely on appropriate legal bases to process personal data. The basis depends on the processing activity and jurisdiction.

Performance of a contract: processing necessary to fulfill orders and provide contracted services.
Consent: where users have agreed to receive marketing communications or optional tracking.
Legitimate interests: for fraud prevention, security, and improving website functionality, balanced against user rights.
Legal obligation: processing required to comply with statutory or regulatory duties.

Cookies and similar technologies

We use cookies and similar tools to support essential site functions, analytics and optional preferences. You can manage cookie settings via your browser or available opt-out controls.

Types include essential cookies (session and security), preference cookies (language and settings), analytics cookies (usage measurement) and marketing cookies (when consented).

Essential cookies are required for site operation. Analytical and marketing cookies are used only with consent or where permitted by law.

You can disable non-essential cookies through your browser settings or by adjusting consent preferences where provided on sanatos.pro. Blocking essential cookies may affect functionality.

View cookie details

Sharing and disclosures

We share personal data only with parties necessary to provide services or fulfill legal obligations, and we require those parties to protect personal data appropriately.

Service providers and subprocessors who support payments, hosting, analytics and delivery.
Device manufacturers and technical partners when necessary to address compatibility and warranty-related service requests.
Legal and regulatory authorities when required under applicable law or to respond to lawful requests.
Affiliated service providers for customer support and localized services in Thailand.
Third parties with your explicit consent, such as marketing partners when you opt in.
In the event of a corporate transaction, information may be transferred as part of business assets subject to confidentiality protections.

International transfers

Personal data may be transferred to service providers and partners located in other countries. When transfers occur, we take steps to ensure appropriate safeguards such as contractual protections, standard contractual clauses, or data transfer agreements where required.

We assess third-party safeguards and rely on contractual commitments, encryption and limited data access to mitigate risks associated with cross-border transfers.

Data retention

We retain personal data for the period necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required or permitted by law.

Account and profile data is retained for as long as the account is active and for a reasonable period after account closure to address obligations or disputes, typically up to 3 years unless otherwise required.

Support communications and messages are retained for the duration necessary to resolve the issue and for a limited period afterwards, typically 1 to 2 years depending on subject matter.

System logs and analytics data are retained in aggregated or anonymized form where possible; raw logs are retained for operational and security purposes, typically not longer than 12 months.

When retention periods expire or you request deletion under applicable law, we will remove personal data from active systems and take reasonable steps to delete backups within practical timeframes.

Security measures

We implement technical and organizational measures to protect personal data against unauthorized access, disclosure, alteration and destruction. Measures are reviewed periodically and adjusted according to risk and technological developments.

Encryption in transit (TLS) and encryption for sensitive data at rest where appropriate.
Access control policies, role-based access and regular account reviews to limit data access to authorized personnel.
Regular security assessments, vulnerability scanning and incident response planning.

How to exercise your rights

You may exercise your data subject rights by contacting us. We will verify requests and respond within applicable timeframes under relevant law.

To request access, correction, restriction, or deletion of your personal data, contact our data protection team via the details below.
To withdraw consent for marketing or cookies, update preferences on the site or follow unsubscribe links in communications.
To lodge a complaint with a supervisory authority if you believe processing violates applicable data protection law.
To request data portability where applicable or to object to processing based on legitimate interests.
Right to data portability: request a copy of personal data in a commonly used, machine-readable format to transfer to another provider where technically feasible.
Right to restriction of processing: request temporary limitation of processing when accuracy or legitimate grounds are disputed.
Right to withdraw consent: where processing is based on consent, withdraw that consent at any time without affecting processing carried out prior to withdrawal.
Right to lodge a complaint: the right to contact a competent data protection authority if you consider your rights are not being respected.

Exercising your privacy rights

To exercise any privacy right related to personal data held by sanatos, submit a request describing the right you wish to exercise and the personal data concerned. Include sufficient identification so we can verify your identity and process the request. Requests can be sent in writing to the postal address or via email provided below. We may request additional information to confirm identity or to clarify the scope of the request.

[email protected]

We aim to respond to valid requests as promptly as possible and generally within 30 days. Complex requests or those requiring verification may take longer; if additional time is needed we will inform you and explain the reasons.

Marketing communications

Sanatos may use contact details to provide product updates, offers, and informational messages about AI devices and related services. Marketing communications are sent only where permitted under applicable law or where you have provided consent. Communications include email newsletters, SMS, and in-app messages depending on your preferences and the contacts you provide.

To stop receiving marketing communications, use the unsubscribe link in any marketing message or contact our privacy team at [email protected]. Processing of unsubscribe requests will be carried out promptly and will apply to future communications only.

Children's privacy

sanatos does not knowingly collect personal data from children for commercial profiles or direct marketing. If we discover we have collected personal data from a child without appropriate parental consent, we will take steps to delete such data as required by applicable law. Parents or guardians who believe their child’s information has been provided to sanatos should contact our privacy team.

Third-party links

Our website and applications may contain links to third-party sites, marketplaces, or services such as manufacturers, logistics partners, or analytics providers. Links are provided for convenience and do not indicate endorsement. These third parties have their own privacy practices; review their policies before sharing personal information.

Changes to this privacy policy

We may update this privacy policy to reflect changes in legal requirements, our business, or data practices. Material changes will be posted on sanatos.pro with an updated effective date. Continued use of our services after such updates constitutes acceptance of the revised policy.

How to contact us

Privacy inquiries and requests should be sent to: sanatos, 2187, Ban Meng Sub District, Amphoe Nong Ruea District, Khon Kaen Province 40210, Thailand. Email: [email protected]. Phone: +66911670625. Business ID: 8490854707460.

+66911670625