Privacy Policy

Last updated: 15 September 2026

SANA respects your privacy and is committed to protecting the personal information you provide when using our website, contacting us, requesting information about our products and services, or placing an order.

This Privacy Policy describes how personal data is collected, used, stored, disclosed and protected when you visit or use https://sanahouses.com, communicate with SANA, submit an enquiry, create an account, place an order or otherwise interact with our services.

This Privacy Policy applies to visitors, prospective customers, customers and other individuals who interact with the SANA website.

We process personal data in accordance with applicable data protection legislation, including the General Data Protection Regulation (EU) 2016/679 (GDPR) and applicable national legislation.

1. Who We Are

SANA is a brand and business operating in the field of modular architecture, prefabricated buildings, saunas and related architectural solutions.

Our website is currently operated by:

SIA “AVENTA BŪVE”
Registration No.: 40003655275
Jaunmoku iela 34
Riga, LV-1046
Latvia

Website: https://sanahouses.com

For customers and business enquiries in Germany, Austria and Switzerland, SANA may also operate through a DACH representative who assists with customer communication and regional business enquiries.

DACH Representative: 
VAT ID: DE452562160

The applicable legal entity responsible for a particular transaction or service will be identified in the relevant contractual, ordering or invoicing documentation.

2. Personal Data We Collect

The type and amount of personal data we collect depends on how you interact with our website and services.

When you browse the website, submit an enquiry, request a quotation, create an account, place an order or communicate with us, we may collect information including, but not limited to:

• first and last name;

• email address;

• telephone number;

• residential, billing or delivery address;

• company name;

• company registration information;

• VAT identification number;

• information relating to your business or project;

• product and configuration preferences;

• quotation and enquiry information;

• order history;

• delivery and installation information;

• payment and transaction information;

• correspondence with SANA;

• information submitted through contact forms;

• technical information about your browser and device;

• IP address;

• approximate geographic information derived from technical data where applicable;

• information relating to website usage;

• cookie identifiers and similar online identifiers.

Where you voluntarily provide additional information in an enquiry or communication, we may also process that information where it is relevant to responding to your request or providing our services.

We do not intentionally collect information that is not relevant to the purposes described in this Privacy Policy.

3. Information You Provide Directly

You may provide personal information directly to us when you:

• contact us by email;

• use a contact form;

• request a quotation;

• request information about a product;

• communicate with our sales or project team;

• create a customer account;

• add products to a shopping cart;

• place an order;

• provide delivery information;

• request customer support;

• submit a warranty or product-related enquiry;

• request a return or refund;

• communicate with us regarding an existing order.

The information you provide is used for the specific purpose for which it was submitted and for related legitimate business purposes.

4. Information Collected Automatically

When you access our website, certain technical information may be collected automatically by the website, hosting provider, security systems, analytics tools or other technical services.

This information may include:

• IP address;

• browser type and version;

• operating system;

• device type;

• screen resolution;

• language settings;

• referring website;

• pages visited;

• approximate time and duration of visits;

• interactions with website elements;

• technical error information;

• information concerning cookies and similar technologies.

This information may be used to maintain website security, prevent abuse, understand website performance, diagnose technical problems and improve the functionality and usability of the website.

5. How We Use Personal Data

We may process personal data for a number of purposes depending on how you interact with SANA.

These purposes may include:

Processing orders

We use personal information to process purchases, confirm orders, communicate order status and provide the products and services requested.

Providing quotations

Where you request a quotation or price offer, we may use the information provided to prepare, communicate and follow up on the quotation.

Customer communication

We may use your contact information to respond to questions, provide requested information and communicate with you about enquiries, projects or existing orders.

Delivery and logistics

Where products are delivered, we use the relevant information to organise transportation, coordinate delivery and communicate with logistics providers.

Payments

We use relevant transaction information to facilitate payment processing, confirm transactions and maintain appropriate financial records.

Customer support

We may use information associated with an order or enquiry to provide customer support, address complaints and manage warranty or after-sales matters.

Website operation

Technical and usage information may be used to maintain and improve the security, stability, performance and functionality of the website.

Fraud and abuse prevention

We may process technical and transactional information to detect, prevent or investigate fraudulent activity, abuse, unauthorised access or other activities that could compromise the security of our website or customers.

Legal compliance

We may process personal information where necessary to comply with accounting, tax, consumer protection, legal, regulatory or other applicable obligations.

6. Legal Bases for Processing

Depending on the circumstances, we process personal data on one or more of the following legal bases under the GDPR:

Performance of a contract.
Where processing is necessary to enter into or perform a contract with you, including processing an order, arranging delivery or providing requested services.

Legal obligation.
Where processing is necessary to comply with applicable legal obligations, including accounting, taxation and record-keeping requirements.

Legitimate interests.
Where processing is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms.

Examples may include maintaining website security, preventing fraud, managing business communications and improving our services.

Consent.
Where applicable law requires consent, we will request it before carrying out the relevant processing activity. You may withdraw consent at any time, although withdrawal does not affect processing carried out before withdrawal.

7. Orders and Customer Accounts

If you place an order through the website, we process the information necessary to fulfil the transaction.

This may include your name, contact details, billing information, delivery information, order details and information required for invoicing.

If the website allows customer accounts, account information may include login credentials, order history and other information associated with the account.

You are responsible for keeping your account credentials confidential and should notify us if you believe that your account has been accessed without authorisation.

8. Quotations and Project Enquiries

SANA may provide quotations or project-specific proposals for modular buildings, saunas and related products.

Information provided as part of a quotation request may include project location, intended use, product preferences, dimensions, configuration requirements and other project information.

Such information may be retained where reasonably necessary to prepare the quotation, communicate with you, manage a potential contractual relationship or comply with legal and accounting obligations.

9. Payments

Payments may be processed through third-party payment service providers.

Depending on the payment method selected, the payment provider may collect and process payment information directly.

SANA does not generally store complete payment card numbers or security codes on its own website.

Payment providers may process information in accordance with their own privacy policies and terms.

Where necessary to confirm or reconcile a transaction, we may receive limited transaction information such as payment status, transaction identifier, payment method or other relevant information.

10. Shipping and Delivery

For physical products, we may need to provide certain personal information to transport companies, freight providers, logistics companies, installation partners or other service providers involved in fulfilling an order.

The information may include:

• customer name;

• delivery address;

• telephone number;

• email address;

• order reference;

• product and delivery information;

• special delivery instructions.

We only provide information reasonably necessary for the relevant logistics or delivery service.

11. Communication and Customer Service

We may retain correspondence between you and SANA in order to:

• respond to your questions;

• maintain a record of customer communications;

• resolve disputes;

• provide customer support;

• monitor service quality;

• manage contractual relationships.

This may include emails, contact form submissions and other business communications.

12. Cookies and Similar Technologies

Our website uses cookies and similar technologies.

Cookies are small files or identifiers that may be stored on your device when you visit a website.

We may use cookies for purposes including:

• essential website functionality;

• shopping cart functionality;

• checkout functionality;

• security;

• remembering preferences;

• website performance;

• analytics;

• embedded content;

• other functionality necessary to operate or improve the website.

Where required by law, non-essential cookies will only be activated after obtaining your consent.

You can change or withdraw your cookie preferences through the cookie consent mechanism provided on the website.

Disabling certain cookies may affect the functionality of some parts of the website.

13. Third-Party Services

We may use third-party service providers to operate and improve the website and business.

Depending on the services currently enabled, these may include:

• website hosting providers;

• email and communication providers;

• payment providers;

• logistics providers;

• analytics providers;

• security and spam prevention services;

• cookie consent management services;

• embedded video or media providers;

• website development and technical service providers.

Third-party providers may process certain information on our behalf or independently in accordance with their own terms and privacy policies.

Where required by applicable law, we obtain consent before activating non-essential third-party services.

14. Embedded Content

Pages on our website may include content embedded from external websites or services, including videos, images, maps, social media content or other media.

When you interact with embedded content, the relevant third party may collect information about your interaction in accordance with its own privacy policy.

Third-party services may also use cookies or similar technologies.

We recommend reviewing the privacy policies of third-party providers where you interact with their embedded content.

15. Sharing Personal Data

We do not sell your personal data.

We may disclose personal information to third parties where necessary for legitimate business purposes, contractual performance or compliance with legal obligations.

Recipients may include:

• payment providers;

• transport and logistics providers;

• hosting providers;

• IT and technical service providers;

• email service providers;

• accounting and tax advisers;

• legal advisers;

• insurance providers where relevant;

• professional consultants;

• public authorities and government bodies where legally required.

Where third parties process personal data on our behalf, we seek to ensure that appropriate contractual and technical safeguards are in place.

16. International Transfers

Some service providers used by SANA may process personal information in countries outside the European Economic Area.

Where personal data is transferred outside the EEA, we take appropriate measures to ensure that the transfer is lawful under applicable data protection legislation.

Depending on the circumstances, this may include:

• an adequacy decision issued by the European Commission;

• Standard Contractual Clauses;

• other recognised legal transfer mechanisms;

• appropriate technical and organisational safeguards.

17. Data Retention

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, unless a longer retention period is required by law.

Different categories of information may therefore be retained for different periods.

Order, invoicing, accounting and tax information may be retained for periods required by applicable financial and tax legislation.

Information relating to contractual relationships may be retained for as long as necessary to establish, exercise or defend legal claims.

Enquiry and quotation information may be retained for a reasonable period following the end of the relevant enquiry or business relationship.

Technical and cookie information may be retained according to the relevant technology and configuration.

When personal data is no longer required, it may be deleted, anonymised or securely disposed of.

18. Data Security

We take reasonable technical and organisational measures to protect personal information against:

• unauthorised access;

• accidental loss;

• destruction;

• alteration;

• disclosure;

• misuse;

• unauthorised processing.

Security measures may include access controls, secure connections, authentication mechanisms, software updates, backups and other appropriate technical measures.

However, no internet transmission or electronic storage system can be guaranteed to be completely secure.

19. Your Rights Under the GDPR

Depending on the circumstances, you have the following rights under applicable data protection law:

Right of access.
You may request information about whether we process your personal data and, where applicable, request access to that data.

Right to rectification.
You may request correction of inaccurate or incomplete personal information.

Right to erasure.
You may request deletion of your personal data where the legal requirements for deletion are met.

Right to restriction of processing.
You may request that processing of your personal data be restricted in certain circumstances.

Right to object.
You may object to certain processing activities where permitted by applicable law, including certain processing based on legitimate interests.

Right to data portability.
Where applicable, you may request to receive certain personal information in a structured, commonly used and machine-readable format.

Right to withdraw consent.
Where processing is based on consent, you may withdraw that consent at any time.

Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

You may also have the right to lodge a complaint with the competent data protection supervisory authority.

20. Exercising Your Rights

To exercise your rights or ask questions about how your personal data is processed, you may contact us using the contact information provided at the end of this Privacy Policy.

We may need to verify your identity before fulfilling certain requests in order to protect your personal information.

We will respond to valid requests within the timeframe required by applicable law.

21. Children’s Privacy

Our website and services are intended for a general audience and are not specifically directed at children.

We do not knowingly collect personal data from children where such collection is prohibited by applicable law.

If you believe that a child has provided personal information to us without appropriate authorisation, please contact us so that we can take appropriate action.

22. External Websites

Our website may contain links to websites operated by third parties.

We are not responsible for the privacy practices, content or security of external websites.

When you leave the SANA website, we recommend reviewing the privacy policy of the website you visit.

23. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our business, website, services, technology or applicable legal requirements.

When we make changes, the updated version will be published on this page and the “Last updated” date will be amended accordingly.

We recommend checking this page periodically for the latest version.

24. Contact

If you have any questions regarding this Privacy Policy, the processing of your personal data, or wish to exercise your data protection rights, please contact SANA through the contact information provided on our website.

SANA
https://sanahouses.com

For customers and business enquiries relating to Germany, Austria and Switzerland:

DACH Representative
VAT ID: DE452562160

SANA is currently operated by:

SIA “AVENTA BŪVE”
Registration No.: 40003655275
Jaunmoku iela 34
Riga, LV-1046
Latvia