Privacy Notice

1. Who controls your data and what this Notice covers

MODERN VILLA HUAHIN COMPANY LIMITED operates SANAMO and is the controller for personal data processed to provide the website, accounts, player booking, venue management, direct-payment evidence, notifications and support.

A venue may also have its own legal responsibilities for player information it receives to provide a court booking. This Notice covers SANAMO's processing; a venue should explain any separate use outside SANAMO.

2. Information we collect

Depending on the features you use, we collect:

• account data: internal user ID, email address, optional display name and avatar;
• authentication data: a third-party sign-in account reference and session information needed for sign-in, or password credentials managed by our authentication provider;
• profile and preference data: locale, theme, onboarding choice and Player or Venue access;
• legal evidence: document type, version, content hash, displayed language, acceptance or acknowledgement time and method, separate system-adoption evidence for the version 1.2 transition, optional marketing choice and withdrawal;
• venue and business data: venue name, address, Google Maps URL, coordinates, Google Place ID when available, translations, contact email, membership roles, courts, sports, opening hours, closures, prices, cancellation rules and publication status;
• venue payment data: a payment QR image or PDF and technical metadata, which may contain the payee name, payment identifier or other information encoded by the venue or its bank;
• booking data: player, venue, court, start/end time, price and rule snapshot, booking and cancellation state, payment method and payment state;
• payment evidence: a payment receipt image or PDF, filename, file type, size, upload time, review state, rejection note and related audit events;
• venue-plan data: trial or subscription state and supporting payment evidence when that feature is used;
• communications: transactional email address, message type, provider status, support requests and feedback;
• technical and security data: timestamps, request and error records, audit events, idempotency and security events. Service providers may also process IP address, browser/device information and delivery metadata in their service logs.

We do not intentionally collect card numbers or card security codes, health or biometric data, government identifiers, or children's data through the current Service. Do not include unnecessary personal data in venue descriptions, QR files, receipts, support messages or feedback.

First-party analytics records bounded events such as public catalogue and venue views, date or slot selections, booking clicks, sign-in steps, booking review, QR holds, receipt submission and booking outcomes or cancellation, including embedded schedule use. Records contain the event time and identifier, pseudonymous session, an internal account reference after verified sign-in where applicable, relevant venue or booking-intent reference, language, a fixed page category, source (website, landing page or embedded schedule), a sanitised referring hostname and limited campaign source, medium and name, coarse device and viewport categories, and limited outcome details. Analytics excludes email addresses, display names, raw IP addresses, full user-agent strings, full URLs or query strings, precise location, Google or LINE account identifiers, QR or receipt content and filenames, free text, secrets and access tokens. These exclusions apply to analytics; separate account, booking, payment and security records remain as described above.

3. How we collect information

We receive information:

• directly from you when you register, choose preferences, create or manage a venue, configure courts and prices, make or manage a booking, upload a QR or payment receipt, or contact support;
• from a third-party sign-in provider when you choose that method and approve the scopes shown by the provider;
• from a map provider when you search for, select or confirm a location;
• from a venue representative when they manage a booking or review payment evidence;
• automatically when the Service creates a session, booking, hold, audit event, notification or security/error record;
• from a communications provider when it reports acceptance, delivery, bounce or another status for a service message.

A temporary venue form draft may be held in your browser's session storage so it can survive navigation in the same session. You can remove it by clearing the form or browser storage.

Our own website records operational analytics while you browse and use booking features. After verified sign-in, the current guest journey may be linked to your internal account so we can understand completion and failure in that journey. We do not use this to link unrelated anonymous browsing history or reassign a journey to another account. Embedded schedules pass the selected booking journey to SANAMO for sign-in; they do not send your account details to the embedding website.

4. Why we use information and our legal bases

We use account, profile, venue, booking and payment-evidence data to provide the Service, authenticate users, publish authorised venue information, reserve courts, show booking records, let venues review direct-payment evidence, and provide support. The primary basis is taking steps at your request and performing the Service agreement.

We use limited audit, security, file-validation, notification and error data to prevent misuse, protect accounts, diagnose failures, maintain reliable records and establish or defend legal claims. The basis is legitimate interests balanced against user rights and legal obligations where applicable.

We record Terms acceptance and Privacy acknowledgement to identify the exact version shown and to keep evidence of the agreement. For accounts existing at the version 1.2 transition, we record separate system adoption with the account, timestamp, system method, document language, version and content hash. We retain earlier human acceptance evidence; the system record does not claim that you clicked or acknowledged the new text and does not enable marketing. We process payment evidence only to support a direct player-to-venue payment workflow; technical acceptance does not establish bank settlement.

SANAMO news, offers, promotions, product updates and optional research invitations by email require separate, optional consent. Email marketing starts off; you can enable it or withdraw at any time in Account. A later LINE marketing option would require you to enable that channel separately; LINE marketing is not currently enabled. Refusing or withdrawing consent does not prevent registration, booking, venue management, necessary transactional messages or operational analytics. You can withdraw even if you have not accepted a newer required document.

We do not sell personal data, use it for personalised advertising, credit scoring or solely automated decisions with legal or similarly significant effects, or intentionally use it to train AI models.

We use private first-party analytics to understand the booking journey, find errors, assess use of public schedules and embedded booking, and improve the Service. We rely on legitimate interests in operating and improving the Service, subject to applicable law and your rights, rather than optional marketing consent. You may object to this processing as described in section 10. Aggregate and de-identified statistics support operation, analysis and improvement; we do not attempt to reidentify individuals from those statistics.

5. Who receives information

We disclose only the information reasonably needed to:

• contracted service providers that support operation, security, authentication, hosting, private-file storage, maps and service communications;
• the relevant venue and its authorised representatives, for the player's booking, contact, payment state and payment receipt review;
• players, for published venue location, contact, court, price, cancellation and payment instructions;
• authorised SANAMO operators, professional advisers or public authorities where access is needed for operations, security, disputes or law.

Contracted service providers may process information only as permitted by the applicable agreement and law, except where a provider acts as an independent controller for a service you choose to use.

Payment QR information supplied for a published venue is shown to players who use that venue's QR payment option. Receipt files are private and are limited to the relevant player, authorised venue representatives and authorised SANAMO operational access.

We do not disclose one venue's private booking or payment evidence to another venue.

First-party analytics is private. Access is restricted to authorised SANAMO operational roles. Any future Admin Analytics interface will be restricted to authorised administrators and will present aggregate statistics, not public individual browsing records. Venues and embedding websites do not gain access to a player’s private analytics history.

6. Google Maps and third-party links

When you use the map picker, the selected address, coordinates, search or place details may be sent to Google Maps Platform. SANAMO may store the resulting address, coordinates, Google Maps URL and Google Place ID so the venue can be displayed and opened in maps.

Google processes information under the Google Privacy Policy and Google Maps Platform Terms. Maps and directions are third-party content; verify the location before travelling or publishing a venue.

7. International processing

Some service providers may process information outside Thailand. We use contractual and other safeguards required by applicable law and keep relevant processing locations and transfer safeguards under review.

8. Retention

We keep personal data only for as long as needed for the purposes described above and applicable legal, accounting, security and dispute requirements.

• account and profile data are normally kept while the account is active and while an account-deletion request is processed;
• legal acceptance records may be kept to prove the version and choice recorded;
• bookings, payment states, venue decisions, notification and audit records may be retained where needed for venue operations, accounting, disputes, abuse prevention or legal obligations;
• temporary upload grants and unused temporary receipt files expire and enter controlled cleanup;
• confirmed receipt and venue QR files remain subject to the approved operational and legal retention schedule;

Retention periods may differ where a longer or shorter period is required by law, accounting, security, fraud-prevention or dispute needs. We do not present an internal engineering target as a legally guaranteed deletion period.

First-party analytics sessions have an absolute lifetime of 30 days. We remove expired session material and raw analytics events older than 13 calendar months. We retain aggregate, de-identified statistics without account or session identifiers indefinitely. These analytics periods are separate from required booking, legal and security retention.

9. Security

Current controls include HTTPS, managed authentication, server-side authorisation, access controls, private file storage, scoped credentials, file validation, data-integrity checks and audit records.

No online service is completely secure. If you believe an account or file has been exposed, contact sanamo.book@gmail.com.

10. Your rights

Subject to Thailand's PDPA and applicable exceptions, you may request access, a copy, correction, deletion or anonymisation, restriction, portability where applicable, or objection to certain processing. You may withdraw optional consent at any time without affecting lawful processing before withdrawal.

Send requests to sanamo.book@gmail.com. We may request information necessary to verify the requester and protect other users. You may complain to Thailand's Personal Data Protection Committee if you believe your rights have been infringed.

11. Account deletion

You may request account deletion through the account control or sanamo.book@gmail.com. Deletion can remove access and personal data from active use, but we may retain the minimum information required for bookings, payment evidence, legal acceptance, accounting, security, fraud prevention or disputes.

A request is recorded and processed under the applicable deletion workflow. We will explain any material information that cannot yet be deleted and the basis for retaining it.

When an account deletion is carried out, analytics links to the profile, session and guest journey are irreversibly removed so retained aggregate statistics no longer link to that account. Submitting a deletion request does not itself mean deletion is complete. Required booking, legal and security records follow their separate retention rules.

12. Cookies and similar storage

The Service uses first-party cookies or browser storage for authentication, security, locale, theme, form-draft recovery and booking journeys. A random first-party analytics session cookie lasts for at most 30 days from creation; analytics stores a hash of the token rather than the raw token. It supports operational journey analysis described above and is separate from optional marketing consent.

We do not use advertising or personalised-ad tracking cookies. If a new tracker or purpose requires consent under applicable law, SANAMO will update this Notice and provide that choice before enabling it.

13. Children and changes

The Service is limited to users aged 20 or older and is not directed to children. If we learn that children's data was provided, we will restrict access and assess deletion and any required guardian process.

We assign a version and effective date when practices change. Material changes will be shown clearly, and a new consent will be requested before a new consent-based purpose begins.

For existing accounts, the version 1.2 transition is recorded as separate system adoption as described in section 4; it is not a fresh acknowledgement click and creates no marketing consent. New accounts still acknowledge the Notice explicitly. This transition does not apply automatically to arbitrary future versions.

14. Contact and language

MODERN VILLA HUAHIN COMPANY LIMITED Company registration and Tax ID: 0775560002414 228 Moo 14, Huai Mongkhon Road, Hin Lek Fai, Hua Hin, Prachuap Khiri Khan 77110, Thailand sanamo.book@gmail.com

The English and Thai versions are intended to have the same meaning. The Service initially displays Thai when the browser language preference indicates Thai and English otherwise. You may switch language before acknowledging this Notice. The displayed language, version and content hash are recorded. If the versions conflict, the recorded-language version controls to the extent permitted by law. Mandatory Thai law remains unaffected.