Privacy Policy

1. Overview & Statutory Scope

This Privacy Policy outlines how Sanota (Private) Limited (“Sanota”, “we”, “our”, or “us”) collects, uses, processes, and protects personal and corporate data collected through our website (sanotaglobal.com), direct inquiries, technical consultation assessments, and related services.

We respect your personal privacy and comply strictly with the provisions of the Personal Data Protection Act No. 9 of 2022 (PDPA) of the Democratic Socialist Republic of Sri Lanka, and international data protection standards where applicable.

2. Information We Collect

When you interact with Sanota, we collect information you voluntarily provide, which may include:

• Contact details: Full name, business email address, direct phone number, company or factory name, and official designation.
• Technical project inquiries: Details submitted via our “Tell Us Your Challenge” or contact forms, including machinery specifications, automation goals, factory locations, process flow notes, and attached photos or engineering drawings.
• Communication records: Records of phone consultations, WhatsApp messages, emails, and site visit logs.
• Technical telemetry & analytics: Anonymized IP addresses, browser types, referral URLs, and interaction metrics gathered via Google Analytics for performance optimization.

3. Purpose of Data Processing

We process your data exclusively for legitimate commercial and engineering purposes:

• Evaluating technical requirements and preparing customized machine modernization, automation, or AMC proposals.
• Responding to inquiries submitted through our website or customer service channels.
• Fulfilling contracted engineering deliverables, commissioning milestones, and field service visits.
• Ensuring the technical security and reliable operation of our web platforms.
• Complying with statutory Sri Lankan tax, audit, and legal mandates.

We never sell, rent, or trade your personal or business data to third-party advertisers.

4. Data Protection & Confidentiality

Industrial machinery designs, control panel schematics, and factory operational data provided to Sanota are treated with strict industrial confidentiality. Appropriate technical and organizational security measures are maintained to safeguard all electronic and physical records against unauthorized access, loss, or destruction.

5. Your Data Subject Rights

Under the Sri Lanka Personal Data Protection Act No. 9 of 2022, you have the right to request access to your personal data, request correction of inaccurate records, or request erasure of your data where retention is no longer legally mandated.

6. Data Controller & Contact Information

If you have questions about this policy or wish to exercise your data rights, please contact our Data Governance lead: