1. Who We Are

PanomaticsVR International is a virtual tour production and digital marketing company providing 360° virtual tour, video production, and related services to hospitality and corporate clients globally. Our website is www.panomatics.com.

For the purposes of applicable data protection law, PanomaticsVR International acts as:

• Data Controller — in respect of personal data collected through our website and direct enquiries
• Data Processor — in respect of personal data processed on behalf of our hotel and corporate clients

2. What Data We Collect

Website Visitors

When you visit our website, we automatically collect certain technical access data including:

• Browser type and version
• Operating system
• Referring URL (previously visited page)
• IP address
• Date and time of server request

This data is used solely for statistical analysis and website improvement, and is not linked to any individual.

Enquiries and Contact Form

When you contact us via our website contact form or by email, we collect your name and email address for the sole purpose of responding to your enquiry. This data is not used for any other purpose without your consent.

Platform Users (Hotel & Corporate Clients)

If you are an authorised user of the PanomaticsVR platform on behalf of a client organisation, we process your name, email address, and platform usage data as necessary to provide the platform services. This processing is carried out under the instructions of your organisation (the Data Controller) and governed by a separate Data Processing Agreement.

3. Legal Basis for Processing

We process personal data on the following legal bases:

• Contractual necessity — to fulfil our service agreements with clients
• Legitimate interests — for website security, fraud prevention, and improving our services
• Legal obligation — where required by applicable law
• Consent — for newsletter subscriptions and marketing communications

4. How We Use Your Data

We use personal data to:

• Respond to your enquiries and provide our services
• Manage client accounts and platform access
• Send newsletters and marketing communications (only where you have subscribed)
• Comply with legal and regulatory obligations
• Improve the performance and security of our website and platform

We do not sell, rent, or share your personal data with third parties for their own marketing purposes.

5. Data We Process on Behalf of Clients

As a Data Processor, PanomaticsVR International processes personal data on behalf of hotel and corporate clients under their instructions. We do not use this data for our own purposes, and do not share it with any third party without the client’s authorisation. All such processing is governed by a Data Processing Agreement.

We do not use client data to train AI models, and no client data is included in any aggregated datasets for product development or benchmarking.

6. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected:

• Website access data: retained for up to 90 days, then permanently deleted
• Enquiry and contact data: retained for up to 2 years following last contact
• Client platform user data: retained for the duration of the service agreement, then deleted or returned within 30 days of contract termination
• Financial and contractual records: retained for up to 7 years as required by law

7. Data Security

We take the security of your personal data seriously. Our technical and organisational measures include:

• Encryption of all data in transit using TLS
• Encryption of data at rest on cloud servers
• Role-based access control with multi-factor authentication
• Separate production and development environments
• Daily automated backups
• Annual disaster recovery testing
• Endpoint protection on all company devices

8. Your Rights

Depending on your location, you may have the following rights in relation to your personal data:

• Right to access — request a copy of the data we hold about you
• Right to rectification — request correction of inaccurate data
• Right to erasure — request deletion of your data in certain circumstances
• Right to data portability — receive your data in a structured, machine-readable format
• Right to object — object to processing based on legitimate interests
• Right to withdraw consent — where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days.

9. Cookies

Our website uses cookies to improve your experience and for website analytics. These include:

• Strictly necessary cookies — required for basic website functionality
• Analytics cookies — to understand how visitors use our site (e.g. Google Analytics)

You can control cookie settings through your browser. Disabling certain cookies may affect website functionality.

10. International Transfers

PanomaticsVR International operates internationally. Where personal data is transferred outside of the European Economic Area (EEA) or Thailand, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) where applicable.

11. Third Parties and Sub-processors

We may share personal data with trusted service providers who assist in delivering our services, including cloud hosting providers and email delivery platforms. All such providers are bound by confidentiality obligations and are not permitted to use personal data for their own purposes.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Where changes are material, we will notify you by email or by posting a prominent notice on our website. The date at the top of this policy indicates when it was last updated.

13. Contact Us

If you have any questions about this Privacy Policy or how we handle your personal data, please contact: