Privacy Policy

1. Information We Collect

Depending on how you interact with Sanrotechnologies, we may collect information including:

Information You Provide Directly to Us

When you contact, enquire with, or engage Sanrotechnologies, you may provide information such as:

• Name
• Business name
• Job title or position
• Email address
• Telephone or mobile number
• Business address
• Website address
• Information contained in your enquiry
• Service requirements and preferences
• Information provided through contact, enquiry, subscription or other forms
• Information provided during communications with us
• Billing and transaction information
• Other information you voluntarily provide to us

Please do not provide sensitive or confidential personal information unless it is necessary for the services we have agreed to provide and there is an appropriate basis for us to receive and process that information.

Information Collected Automatically

When you visit our website, we may automatically collect certain technical and usage information, including:

• Internet Protocol (IP) address
• Browser type and version
• Device type
• Operating system
• Date and time of access
• Referring and exit pages
• Pages viewed
• Approximate location information
• Website interaction information
• Information relating to website performance and usage
• Other technical information made available by your browser or device

The information collected automatically may be used for website security, administration, analytics, performance monitoring, troubleshooting and other legitimate business purposes, subject to applicable law.

2. When Do We Collect Information?

We may collect personal information when you:

• Visit or use our website
• Complete an enquiry or contact form
• Contact us by email, telephone, WhatsApp or another communication channel
• Subscribe to a newsletter or other communication
• Request information about our services
• Enter into an agreement with us
• Purchase or use our services
• Communicate with our team
• Participate in a survey, promotion or other activity
• Interact with our digital marketing campaigns
• Provide information through third-party platforms
• Otherwise voluntarily provide information to us

We may also receive information from third parties where permitted by applicable law, such as advertising, analytics, CRM, technology or business service providers.

3. How Do We Use Your Information?

Depending on the circumstances and applicable law, we may use personal information to:

1. Respond to enquiries and requests
2. Provide, manage and improve our services
3. Communicate with clients and prospective clients
4. Personalise your experience with our website
5. Understand how visitors use our website
6. Improve our website, services and customer experience
7. Process transactions and payments
8. Provide quotations, proposals and service information
9. Manage client accounts and business relationships
10. Send service-related communications
11. Send marketing communications where permitted by applicable law
12. Conduct analytics and measure campaign performance
13. Monitor and improve website and advertising performance
14. Detect, prevent and address fraud, security issues or misuse
15. Maintain business, accounting and administrative records
16. Comply with applicable legal and regulatory obligations
17. Protect our legal rights and interests
18. Carry out other purposes disclosed to you at the time information is collected or otherwise permitted by applicable law

We will not use personal information for purposes that are materially inconsistent with the purposes for which it was collected unless permitted or required by applicable law.

4. Legal Basis for Processing

Depending on the circumstances and the law applicable to the particular processing activity, Sanrotechnologies may process personal information on the basis of:

• Your consent
• The performance of a contract or steps taken at your request before entering into a contract
• Compliance with a legal obligation
• Legitimate business purposes or interests, where recognised by applicable law
• Protection of rights and interests
• Other lawful grounds available under applicable privacy and data protection laws

Where consent is required, we will seek consent in an appropriate manner. Where applicable, you may withdraw consent, although withdrawal will not affect processing that was lawfully undertaken before withdrawal.

5. Direct Marketing

Sanrotechnologies may use personal information to communicate information about our services, offers, updates, events, resources and other marketing communications where permitted by applicable law.

We may communicate through channels such as:

• Email
• Telephone
• SMS
• WhatsApp
• Social media
• Other electronic or communication channels

Where applicable law requires consent, we will obtain the required consent before sending commercial electronic communications.

Marketing communications will include an appropriate method for opting out or unsubscribing where required.

You may request that we stop sending marketing communications at any time by using the unsubscribe mechanism provided in the communication or by contacting us.

Please note that even after opting out of marketing communications, we may continue to send non-marketing communications where reasonably necessary, such as communications relating to an existing service, transaction, account, security matter or legal obligation.

6. Client-Provided Information and Customer Data

Sanrotechnologies may provide digital marketing services involving information belonging to our clients or their customers, leads, website visitors or other individuals.

For example, a client may provide or authorise access to:

• Customer databases
• Lead lists
• Email marketing lists
• CRM information
• Advertising audiences
• Website analytics information
• Remarketing audiences
• Customer contact information
• Campaign data
• Other information required to provide agreed services

Where we process personal information on behalf of a client, the client may determine the purposes for which that information is processed, and Sanrotechnologies may act as a processor, service provider or equivalent role depending on the applicable law and circumstances.

The client is responsible for ensuring that it has the appropriate rights, permissions, notices, consents or other lawful basis required to collect, use and provide such information to Sanrotechnologies and to instruct us to process it.

Clients must not provide personal information to Sanrotechnologies where doing so would breach applicable law, contractual obligations or the rights of the individuals concerned.

Where appropriate, Sanrotechnologies may enter into a separate Data Processing Agreement (DPA) with a client.

7. Information We Share

We may disclose personal information where reasonably necessary for the purposes described in this Privacy Policy and as permitted by applicable law.

Depending on the circumstances, information may be disclosed to:

• Employees and authorised personnel
• Contractors and consultants
• Hosting and cloud service providers
• Website and technology providers
• CRM providers
• Email and marketing platforms
• Analytics providers
• Advertising platforms
• Payment processors
• IT and cybersecurity providers
• Professional advisers, including legal and accounting advisers
• Government authorities, regulators or law enforcement agencies where legally required
• Business partners or service providers where necessary to provide agreed services
• Other parties where you have authorised the disclosure or it is otherwise permitted by law

We do not sell personal information merely because we use third-party technology or advertising platforms.

8. Third-Party Service Providers

Sanrotechnologies may use third-party technology and service providers to operate our website and provide services.

Depending on the services used by Sanrotechnologies at any particular time, these may include providers for:

• Website hosting
• Cloud storage
• Analytics
• Advertising
• Email marketing
• CRM
• Communication
• Payment processing
• Website security
• Website development
• Social media management
• Marketing automation
• Other business or technology functions

Third-party providers may collect or process information in accordance with their own privacy policies and contractual obligations.

Where we use third-party providers to process personal information on our behalf, we will take reasonable steps to require appropriate privacy and security protections where required by applicable law.

9. Analytics, Advertising and Tracking Technologies

Sanrotechnologies may use cookies, pixels, tags, scripts, APIs, web beacons and similar technologies to operate, analyse and improve our website and digital marketing activities.

These technologies may help us:

• Understand website traffic
• Measure website performance
• Analyse user behaviour
• Improve user experience
• Measure advertising effectiveness
• Attribute conversions
• Understand campaign performance
• Create or use advertising audiences
• Deliver or optimise advertising
• Detect security or technical issues

Depending on the tools actually implemented on our website, these technologies may include services provided by companies such as Google, Meta, LinkedIn, Microsoft or other analytics and advertising providers.

The actual third-party technologies used may change from time to time.

Where applicable law requires consent for certain cookies or tracking technologies, we will seek the required consent.

10. Cookies

Our website may use cookies and similar technologies.

Cookies are small text files that may be stored on your device when you visit a website.

Essential Cookies

These may be necessary for the operation, security and functionality of our website.

Analytics Cookies

These may help us understand how visitors use our website and identify areas for improvement.

Functional Cookies

These may allow the website to remember certain preferences or settings.

Advertising and Marketing Cookies

Where used and permitted by applicable law, these may help measure advertising campaigns, understand conversions, create audiences and provide more relevant advertising.

You may be able to control or disable cookies through your browser settings or, where provided, through our cookie-consent tools.

Disabling certain cookies may affect the functionality of our website.

11. Log Files

Sanrotechnologies may use standard server logs and technical monitoring tools.

Information collected may include:

• IP addresses
• Browser type
• Internet Service Provider
• Device information
• Date and time stamps
• Referring and exit pages
• Pages viewed
• Other technical information

This information may be used to:

• Analyse trends
• Administer the website
• Monitor website performance
• Detect security issues
• Troubleshoot technical problems
• Understand website usage
• Improve our services

Technical information may constitute personal information depending on the circumstances and applicable law.

12. Data Security

Sanrotechnologies takes reasonable technical and organisational measures designed to protect personal information from unauthorised access, misuse, loss, interference, alteration or disclosure.

Security measures may include:

• Access controls
• Authentication mechanisms
• Restricted access to information
• Secure technology providers
• Password and credential controls
• Security monitoring
• Backups where appropriate
• Other reasonable technical and organisational safeguards

However, no method of electronic transmission, storage or processing can be guaranteed to be completely secure.

You are also responsible for maintaining the confidentiality and security of credentials that you use to access systems or accounts associated with our services.

13. Data Breaches and Security Incidents

If Sanrotechnologies becomes aware of a security incident involving personal information, we will assess and respond to the incident in accordance with applicable law and our internal procedures.

Where legally required, we may notify affected individuals, clients, regulators or other relevant parties.

Where Sanrotechnologies processes personal information on behalf of a client, we may notify the client and cooperate with the client in accordance with the applicable agreement and applicable law.

14. International Data Transfers

Sanrotechnologies operates and provides services in Australia, India and other countries.

We may use employees, contractors, cloud providers, technology providers, advertising platforms, analytics providers and other service providers located in different countries.

As a result, personal information may be accessed, stored, processed or transferred across international borders.

Where personal information is transferred internationally, Sanrotechnologies will take reasonable steps and implement appropriate contractual, technical or organisational measures required by applicable privacy and data protection laws.

The privacy protections applicable in another country may differ from those in your country of residence.

Where applicable law requires additional safeguards, consent or other requirements for international transfers, Sanrotechnologies will address those requirements as applicable to the relevant processing activity.

15. Australia

Where applicable to Sanrotechnologies and the relevant processing activities, we handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

Australian privacy requirements may apply differently depending on the nature of the business, the information being handled, the circumstances of collection and the applicable legal thresholds and exceptions.

Where applicable, the Australian Privacy Principles include requirements concerning matters such as:

• Transparency about the handling of personal information
• Collection
• Use and disclosure
• Direct marketing
• Cross-border disclosures
• Security
• Access
• Correction

Nothing in this Privacy Policy is intended to exclude, restrict or modify rights or obligations that cannot lawfully be excluded, restricted or modified under Australian law.

16. India

Where applicable to Sanrotechnologies and the relevant processing activities, we handle personal data in accordance with applicable Indian privacy and data protection laws, including the Digital Personal Data Protection Act, 2023 and applicable provisions of the Digital Personal Data Protection Rules, 2025, as and when those provisions are in force and applicable.

The manner in which personal data is processed may depend on the nature of the information, the services being provided, the parties involved and the applicable legal requirements.

Where applicable, we will provide appropriate notices, obtain consent where required, respect applicable rights and implement appropriate safeguards.

17. International Clients

Sanrotechnologies provides services to clients in multiple jurisdictions.

Clients located outside Australia and India are responsible for complying with privacy, advertising, consumer protection, electronic marketing, data protection and other laws applicable to their business, customers and target markets.

This may include laws concerning:

• Personal information
• Consent
• Cookies
• Online advertising
• Email marketing
• SMS marketing
• Customer databases
• Retargeting
• Data transfers
• Consumer protection
• Industry-specific requirements

Sanrotechnologies may reasonably assist clients in implementing agreed marketing activities but does not provide legal or regulatory advice unless expressly agreed in writing.

Clients should obtain independent legal advice where they require advice concerning the legality of their particular marketing activities.

18. Your Privacy Rights

Depending on where you are located and the laws applicable to your personal information, you may have rights relating to your personal information.

These may include rights to:

• Request access to personal information we hold about you
• Request correction of inaccurate or incomplete information
• Request deletion or erasure where applicable
• Withdraw consent where processing is based on consent
• Opt out of direct marketing
• Make a privacy complaint
• Exercise other rights available under applicable privacy laws

The availability and scope of these rights may differ depending on the applicable law.

To make a privacy request, please contact us using the details provided below.

We may need to verify your identity before responding to certain requests.

We will respond to valid requests within the time period required by applicable law.

19. Marketing Opt-Out

You may opt out of receiving marketing communications from Sanrotechnologies by:

• Clicking the unsubscribe link contained in a marketing email
• Following the opt-out instructions included in another marketing communication
• Contacting us using the details provided in this Privacy Policy

Opting out of marketing communications will not necessarily stop transactional, contractual, security or other non-marketing communications that we are permitted or required to send.

20. Children’s Information

Our website and services are not directed at children where prohibited by applicable law.

Sanrotechnologies does not knowingly collect personal information from children in circumstances where applicable law requires parental or guardian consent, unless the required consent has been appropriately obtained.

If you believe that a child has provided personal information to us in circumstances where collection was not permitted, please contact us.

Where appropriate and required by applicable law, we will take reasonable steps to assess and address the situation.

21. Third-Party Websites

Our website or communications may contain links to third-party websites, platforms or services.

Sanrotechnologies is not responsible for the privacy practices, security, content or policies of third-party websites.

We recommend reviewing the privacy policy of any third-party website before providing personal information.

22. Third-Party Privacy Policies

Where third-party advertising, analytics, payment, social media, hosting or other technology providers process information through their services, their own privacy policies may also apply.

You should review the relevant third party’s privacy policy for information about its collection and processing practices.

Sanrotechnologies does not control the privacy practices of independent third parties.

23. Data Retention

Sanrotechnologies retains personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including to:

• Provide services
• Maintain client and business relationships
• Maintain accounting and financial records
• Comply with legal and regulatory obligations
• Resolve disputes
• Enforce agreements
• Protect our legal rights
• Meet other legitimate business requirements

Retention periods may vary depending on the nature and purpose of the information.

When personal information is no longer required, Sanrotechnologies will take reasonable steps to delete, destroy or de-identify it where required by applicable law.

Some information may remain in secure backups for a reasonable period before being permanently deleted or overwritten.

24. Complaints

If you have concerns about how Sanrotechnologies has handled your personal information, we encourage you to contact us first so that we can investigate and attempt to resolve your concern.

Please provide sufficient information to allow us to understand and investigate your complaint.

We will handle privacy complaints in accordance with applicable law.

Where applicable, you may also have the right to lodge a complaint with the relevant privacy regulator in your jurisdiction.

For example, individuals in Australia may be able to contact the Office of the Australian Information Commissioner (OAIC) where applicable.

25. Business and Transaction Information

When you become a client of Sanrotechnologies, we may collect and retain information necessary to manage our business relationship.

This may include:

• Contact details
• Business details
• Contracts and proposals
• Statements of Work
• Invoices
• Payment information
• Communications
• Service requirements
• Project information
• Account information
• Other information necessary to provide and administer our services

We may retain such information for the period reasonably required for business, legal, accounting, tax, compliance and dispute-resolution purposes.

26. Changes to This Privacy Policy

Sanrotechnologies may update this Privacy Policy from time to time to reflect changes in:

• Our services
• Our website
• Technology
• Privacy practices
• Applicable laws
• Regulatory requirements
• Business operations

When we make changes, we will update the “Last Updated” date at the beginning of this Privacy Policy.

Where required by applicable law, we will provide additional notice or obtain consent for material changes.

27. Contact Us

28. Governing Legal Framework

Sanrotechnologies operates across multiple jurisdictions. The laws applicable to the processing of personal information may depend on the circumstances, the location of the individual, the location and activities of Sanrotechnologies, the nature of the services and other applicable legal requirements.

This Privacy Policy is intended to operate alongside applicable privacy and data protection laws and does not seek to exclude or limit any mandatory legal rights or obligations.

For contractual matters, including the provision of digital marketing services, the applicable governing law and dispute-resolution provisions will be determined by the relevant client agreement, Terms & Conditions or Statement of Work.

Where no separate contractual provision applies, the applicable law will be determined in accordance with the relevant legal principles and mandatory requirements.