Privacy Policy
1. Introduction and Privacy Commitment
Sunrise Carpet Specialists (“Sunrise”, “we”, “us” or “our”) respects the privacy of customers, suppliers, contractors and other individuals who provide personal information to our business.
We are committed to handling personal information responsibly, transparently and securely in accordance with applicable Australian laws and our stated privacy commitments.
The Privacy Act 1988 (Cth) and Australian Privacy Principles (APPs) apply to our operations to the extent required by law. We also seek to maintain responsible privacy practices regardless of whether particular statutory privacy obligations apply.
Our Privacy Commitment
Sunrise Carpet Specialists does not sell, rent, trade or exchange personal information, or provide it to unrelated parties for their independent marketing or commercial purposes, without express consent, unless disclosure is required or otherwise authorised by law.
We may use reputable external providers, including accounting and other business administration platforms, to carry out legitimate business operations.
These providers have their own applicable legal and contractual responsibilities for handling information. Sunrise also retains its own responsibilities under applicable Australian law.
2. Personal Information We Collect
We may collect the following information where reasonably necessary for our services or business operations:
- Customer names, telephone numbers and email addresses.
- Residential, business, billing and service addresses.
- Details of enquiries, quotations, bookings and requested services.
- Correspondence and service-related communications.
- Invoices, payments, transaction records and accounting information.
- Customer feedback, complaints and relevant service history.
- Supplier, contractor and business representative information.
- Technical information generated through website visits, where applicable.
We do not ordinarily request sensitive information as defined under Australian privacy law. Where collecting sensitive information is necessary, we will comply with any applicable requirements, including obtaining consent where required. We seek to avoid collecting information that is unnecessary for providing our services.
3. Collection of Information
Personal information may be collected when an individual:
- Submits a website enquiry or quotation request.
- Contacts us by telephone or email.
- Books or purchases a service.
- Communicates with our employees or authorised representatives.
- Provides billing or payment details.
- Submits feedback or a complaint.
We may also receive information from an authorised representative, contractor or other lawful source. Where reasonably practicable, we collect information directly from the individual concerned.
General enquiries may be made anonymously where practicable and lawful, although identifying information may be necessary to issue quotations, deliver services, administer payments or fulfil legal obligations.
4. Purposes for Which Information Is Used
Sunrise uses personal information for purposes reasonably connected with its business operations, including:
- Responding to enquiries and preparing quotations.
- Arranging and providing carpet, flooring and related services.
- Scheduling appointments and communicating service information.
- Issuing invoices, processing payments and administering customer accounts.
- Maintaining accounting and taxation records.
- Managing warranties, complaints and service-related issues.
- Communicating with suppliers, contractors and authorised representatives.
- Maintaining business security and administrative records.
- Fulfilling contractual and legal obligations.
We will not use personal information for materially unrelated purposes without appropriate consent or another lawful basis. Where a third party processes information on our behalf, we seek to limit that processing to legitimate and authorised business activities.
5. Customer Confidentiality and Third-Party Disclosure
Sunrise considers the confidentiality of customer information an important business responsibility.
We do not sell, rent, trade or exchange personal information for unrelated commercial gain.
Personal information may be provided to another party where:
- The individual has expressly consented.
- The recipient is an authorised provider involved in delivering or administering our services.
- The disclosure is for the purpose for which the information was collected, or another purpose permitted by law.
- The disclosure is required or authorised under Australian legislation or a legally enforceable order.
Authorised recipients may include accounting providers, payment processors, website hosting services, business technology providers, professional advisers and contractors where their access is reasonably necessary.
We seek to restrict disclosure to information relevant to the recipient’s authorised responsibilities. The use of an external service provider does not grant unrestricted permission to exploit, sell or repurpose customer information.
6. Third-Party Administration Providers and Due Diligence
Sunrise may use independent third-party administration and technology systems, including MYOB where engaged, to manage legitimate business activities.
These services may support:
- Accounting and financial recordkeeping.
- Invoicing and payment administration.
- Customer correspondence and operational communications.
- Secure document management.
- Website operation, hosting and technical maintenance.
6.1 Provider Selection
We seek to select providers based on reasonable assessments of their suitability and reliability. Where appropriate and reasonably practicable, selection considerations include:
- Professional reputation and business standing.
- Reliability and established operational history.
- Industry recommendations and common professional practice.
- Published privacy and confidentiality policies.
- Available information concerning cybersecurity and data protection.
- Relevant certifications, independent assessments or recognised security practices, where available.
- Data breach response procedures and contractual commitments.
We recognise that a provider’s popularity or industry reputation is not, by itself, proof of compliance or adequate information security.
Our selection and ongoing use of providers are intended to reflect reasonable business judgement, the nature of the information involved and the risks associated with the service.
We do not represent that every provider has received an independent security audit or obtained a particular certification unless that has been verified.
6.2 Independent Provider Responsibilities
Independent third-party providers operate their own infrastructure, systems and internal security arrangements. They are responsible for complying with the privacy, confidentiality, security and other legal obligations applicable to their activities.
Sunrise expects providers to process customer information for authorised purposes and to maintain security arrangements appropriate to the nature of their services.
Where appropriate, Sunrise may consider the provider’s contractual terms, published security measures, breach notification arrangements and available compliance information.
6.3 Independent Security Incidents and Liability
Despite reasonable precautions, security incidents may occur within independently operated third-party systems. Sunrise cannot guarantee the uninterrupted security, availability or performance of infrastructure that it does not directly operate or control.
Where a breach or security incident arises from an independent provider’s conduct, that provider may bear responsibility for its own acts, omissions and failures to comply with applicable legal or contractual duties.
Sunrise does not voluntarily assume responsibility for independent third-party acts or omissions beyond the responsibilities imposed on Sunrise by applicable law or its own enforceable obligations.
However, engaging an independent provider, relying on industry recommendations or undertaking reasonable due diligence does not automatically remove Sunrise’s statutory responsibilities.
Where applicable law makes Sunrise responsible for information it holds or discloses, that responsibility continues in accordance with the law. Nothing in this policy excludes or limits a legal right, remedy, duty or liability that cannot lawfully be excluded or limited.
6.4 Continuing Responsibilities of Sunrise
Where required by applicable law, Sunrise remains responsible for taking reasonable steps to:
- Protect personal information it holds or controls.
- Manage access to information within its own business.
- Use appropriate safeguards when engaging and operating external systems.
- Assess suspected privacy and security incidents.
- Comply with applicable data breach notification requirements.
- Address failures attributable to its own conduct or legal obligations.
Responsibilities arising from an incident will depend on the facts, the relevant legal requirements and the respective conduct of the parties.
7. Information Security
Sunrise seeks to protect personal information against misuse, interference, loss and unauthorised access, modification or disclosure.
Reasonable precautions may include:
- Restricting access to authorised personnel.
- Using reputable business administration platforms.
- Managing access credentials and permissions.
- Applying appropriate internal information-handling practices.
- Reviewing service provider arrangements where warranted.
- Securely retaining or disposing of information when appropriate.
The particular precautions adopted depend on the information involved, available technology, operational requirements and relevant legal obligations.
No system can provide an absolute guarantee against cyberattacks, accidental disclosure or technical failure. We nevertheless recognise our responsibility to take reasonable security precautions where required by law.
8. Data Breaches and Incident Management
Where Sunrise becomes aware of a suspected or confirmed incident affecting personal information, we will take steps appropriate to the circumstances. These may include:
- Investigating the nature and potential extent of the incident.
- Taking reasonable steps to contain the incident.
- Assessing which information and individuals may be affected.
- Working with relevant technology providers or other parties.
- Taking reasonable steps to reduce the risk of harm.
- Determining any applicable statutory assessment or reporting requirements.
- Notifying affected individuals and regulators where legally required.
Where the Notifiable Data Breaches scheme applies and there are reasonable grounds to suspect an eligible data breach, we will take all reasonable steps to complete the required assessment within the statutory timeframe, generally 30 calendar days.
If an eligible data breach is established, we will comply with applicable notification requirements. Where an incident originates with an independent provider, Sunrise will assess its own obligations and cooperate with relevant parties as appropriate.
9. Legal Obligations and Compulsory Disclosure
Sunrise respects the confidentiality of information provided to its business. However, confidentiality obligations do not prevent disclosures required or authorised under Australian law.
Personal information may be disclosed in response to:
- A valid court or tribunal order.
- A legally enforceable subpoena, warrant or statutory notice.
- A lawful requirement of an authorised regulatory or government body.
- Applicable taxation, financial reporting or recordkeeping laws.
- Other Australian legal requirements or authorisations.
Where reasonably practicable, we will assess the scope and validity of a request before responding. We will seek to limit disclosures to information appropriately covered by the relevant legal requirement or authorisation.
Where legally permitted and appropriate, affected individuals may be informed of a disclosure. We do not disclose customer information merely because an unrelated party requests it without an appropriate lawful basis.
10. Overseas Information Handling
Some external technology and administration providers may use infrastructure, personnel or subcontractors located outside Australia.
Where Sunrise is likely to disclose personal information to overseas recipients, we will provide information concerning those disclosures as required by applicable law, including identifying relevant countries where practicable.
Overseas storage and overseas disclosure are not necessarily the same under Australian privacy law.
Where APP 8 applies, Sunrise will comply with the requirements governing overseas disclosures and any continuing accountability for overseas recipients.
The engagement of a reputable overseas service provider does not automatically exclude Sunrise from responsibility under Australian privacy law.
Any overseas information-handling arrangements must be assessed according to their actual nature and the applicable legal requirements.
11. Retention and Disposal of Information
Sunrise retains personal information for periods reasonably necessary to conduct its business or meet legal and contractual requirements. These may include:
- Accounting and taxation obligations.
- Financial and transaction records.
- Service agreements and warranty matters.
- Complaints and dispute resolution.
- Other legitimate and lawful business requirements.
Where personal information is no longer reasonably required, and there is no legal requirement or lawful reason to retain it, we will take reasonable steps to securely destroy or de-identify it.
This includes information held in external systems to the extent reasonably practicable and required by applicable law.
13. Direct Marketing
Sunrise does not sell or provide customer contact information to unrelated parties for their independent marketing activities without express consent.
Where we send communications promoting our own services, we will comply with applicable Australian privacy and electronic marketing laws.
Individuals may request that promotional communications cease. Necessary service, transaction, billing and legal communications may continue where appropriate.
14. Access to and Correction of Personal Information
Individuals may contact Sunrise to request access to personal information held about them or to request corrections.
Where the Australian Privacy Principles apply, requests will be considered in accordance with APPs 12 and 13.
We may ask for reasonable proof of identity before disclosing or modifying information.
Access may be refused or restricted where permitted by law. Where legally required, an explanation will be provided. Requests may be submitted using the contact details in Section 18.
15. Privacy Complaints
Individuals who believe Sunrise has handled their personal information improperly may lodge a complaint. We will seek to:
- Acknowledge the complaint.
- Review the relevant circumstances.
- Investigate matters requiring further consideration.
- Determine whether corrective action is appropriate.
- Communicate the outcome.
We aim to respond to written privacy complaints within 30 calendar days.
Where the Privacy Act applies, eligible individuals who remain dissatisfied may have the right to complain to the Office of the Australian Information Commissioner, generally after first raising their concern with Sunrise.
Office of the Australian Information Commissioner: https://www.oaic.gov.au
16. Statutory Rights and Legal Protections
Nothing in this Privacy Policy excludes, restricts or modifies any right, guarantee, remedy, obligation or liability that cannot lawfully be excluded, restricted or modified.
This includes applicable rights and obligations under:
- The Privacy Act 1988 (Cth).
- The Australian Privacy Principles.
- The Competition and Consumer Act 2010 (Cth) and Australian Consumer Law.
- Relevant Commonwealth, Victorian and other applicable state or territory laws.
Any statement concerning third-party responsibility operates only to the extent permitted by applicable law.
This Privacy Policy describes our information-handling practices. It does not override statutory protections or determine legal liability independently of the applicable law and circumstances.
17. Policy Review and Changes
Sunrise may review and update this Privacy Policy as our business, technology, administrative systems or legal obligations change. The latest version will be made available on our website.
We will seek to ensure that the policy accurately reflects our information-handling practices. Where notification or consent is required for a change, we will comply with applicable law.
18. Contact Information
Privacy enquiries, access and correction requests, and complaints may be directed to:
Sunrise Carpet Specialists | ABN: 12 054 273 880
Location: Victoria, Australia
Email: sales@sunrisecarpetspecialists.com.au
Telephone: 0433 992 482
Website: https://www.sunrisecarpetspecialists.com.au
Please identify your correspondence as a privacy enquiry or complaint so it can be directed appropriately.
Our Commitment to Customer Confidentiality
Your information is entrusted to us for legitimate business purposes, not surrendered for unrestricted commercial use.
Sunrise Carpet Specialists is committed to treating customer information with care, maintaining reasonable privacy and security practices, and selecting external business administration providers with appropriate consideration of their reputation, reliability and information-handling arrangements.
We do not sell, trade or exchange customer information for unrelated commercial gain. Independent service providers are responsible for their own applicable legal obligations, while Sunrise retains the responsibilities Australian law places on our business.
We remain committed to transparency, customer confidentiality and responsible information management.