1. Who controls your information
SANITY OS LTD is the controller of personal information described in this policy. We are registered in England and Wales under company number 09734818 and have our registered office in London, United Kingdom.
2. Information we collect
We collect only the information needed to operate our website, store and product services. Depending on how you interact with us, this may include:
- Your name, organisation, email address, telephone number and message when you contact us.
- Your name, email address, billing and transaction details, purchased product, selected platform and Stripe payment references when you place an order.
- Licence details, product entitlement, download requests, downloader email address and technical records used to issue secure download access.
- A display name, rating, review text and anonymous preference when you submit a product review.
- Essential authentication and security information used to protect administrative areas of the website.
Stripe handles complete payment card details. Sanity OS does not receive or store your full card number or security code.
3. How and why we use information
We use personal information to process purchases, fulfil orders, generate and administer licences, provide secure downloads, respond to enquiries, provide product support, prevent misuse, handle refunds or disputes, moderate reviews, maintain business records and comply with legal obligations.
Our principal lawful bases are performance of a contract, compliance with legal obligations and our legitimate interests in operating, securing and improving our services, preventing fraud and protecting our intellectual property. Where consent is required, we will request it separately and you may withdraw it at any time.
We do not sell personal information. We do not use it for automated decision-making that produces legal or similarly significant effects.
5. Product reviews
If you submit a review, your chosen display name, rating, review text and review date may be published. If you select the anonymous option, the public review will not display your submitted name. We use a protected reference derived from the licence to enforce one review per licence without publishing the licence key.
6. How long we keep information
We retain information only for as long as reasonably necessary for the purpose collected. Order, payment, licence and accounting records may generally be retained for up to six years after the relevant transaction or business relationship, or longer where required by law or an active dispute. Contact enquiries are retained while relevant to the enquiry and our relationship. Download security records and unsuccessful technical events are retained for shorter operational periods where practicable. Published reviews may remain visible until removed or no longer required.
8. Your data protection rights
Depending on the circumstances, UK data protection law may give you rights to access, correct or erase personal information, restrict or object to processing, receive portable data and withdraw consent. Some rights are limited where information must be retained for legal, contractual, security or record-keeping reasons.
You also have the right to complain to the UK Information Commissioner’s Office. We encourage you to contact us first so we can try to resolve your concern.
9. Security
We use reasonable technical and organisational safeguards designed to protect information, including restricted administrative access, secure payment processing, protected licence records and short-lived download links. No internet service can guarantee absolute security, so you should keep licence keys and download links confidential.
10. Contact and updates
To ask a privacy question or exercise a data protection right, use our contact page. We may update this policy when our services or legal obligations change. The latest version will always appear on this page.