Who this policy covers

This policy covers visitors to the SunriseOne website and people who contact us about our services. If your business uses software built or hosted by SunriseOne, the information handled by that software depends on the features your business chooses and the terms agreed with us.

Your business may act as the decision-maker for information about its own customers and staff. In that case, your business is responsible for giving those people the notices and choices required for its use of the software.

Information we may handle

When you send an enquiry, we may receive the details you choose to provide, such as your name, email address, phone number, subject and message. Please do not send passwords, payment card details or sensitive personal information through the general website contact form.

When a business uses a SunriseOne solution, the system may process business records configured by that customer. Examples can include invoices, stock entries, membership records, appointments or contact details. The exact data depends on the product and setup.

Our website hosting may also record basic technical details such as the time of a request, browser type and IP address for operation, troubleshooting and security.

How information is used

We use information to respond to enquiries, understand software requirements, provide and support agreed services, send service-related updates, maintain and secure systems, and meet applicable legal obligations. We do not use enquiry details for unrelated marketing unless you ask for or agree to those updates.

SMS and WhatsApp messages sent through a business workflow depend on that business's instructions, message setup and applicable permissions. The business using the messaging service is responsible for ensuring its messages are appropriate for its recipients.

Service providers and sharing

We may use hosting, cloud infrastructure, email, SMS, WhatsApp or other technical providers to deliver a service. For cloud deployments, hosting may use AWS or another provider selected for that product and customer setup. Providers receive information only as needed to operate the relevant service, subject to the applicable arrangement.

When reCAPTCHA Enterprise is enabled on the contact form, Google processes interaction and device information to assess whether a submission is likely to be automated. Google's Privacy Policy and Terms of Service apply to that service.

We do not sell personal information. We may disclose information where required by law, to protect the service from misuse, or when a customer instructs us to do so under an agreed service arrangement.

Storage, backups and security

We use reasonable technical and organisational measures intended to protect information handled through our services. No internet-connected system can be promised to be completely risk-free, so please protect account credentials and tell us promptly if you suspect unauthorised access.

Cloud location, backup options, backup frequency and retention can vary by product and customer configuration. We can confirm the arrangements for a specific solution in its proposal or service agreement. Customers should use the backup options provided for their deployment and keep any additional copies they require.

Your choices and requests

You can ask us to correct or delete information you provided in an enquiry. For information held in a business account, contact the business that operates that account first; where SunriseOne provides the software, we will handle requests according to our agreement with that business and applicable law. Some records may need to be retained for support, security or legal reasons.

Changes to this policy

We may update this page when our website, services or applicable requirements change. The latest revision date will appear near the top of this page.