1. Who we are
This Privacy Policy applies to information collected by SUNRISE MARINE AUSTRALIA PTY LTD (ABN 61 697 392 706, ACN 697 392 706), trading as Sunrise Marine Australia ("Sunrise Marine", "we", "us", "our") — a supplier of surplus, unused and end-of-project industrial, marine, oil & gas, mining, and heavy-industrial equipment, based in Harrisdale, Perth WA 6112, Australia, with the founder's industry experience dating to 1994.
Throughout this policy, "you" and "your" refer to any individual who interacts with us — whether as a website visitor, inquiry submitter, prospective buyer, customer, supplier, or surplus-seller. For privacy matters, the contact details in Section 17 are authoritative.
2. Scope of this policy
This policy covers personal information collected through:
- This website (sunrisemarine.com.au and any subdomains we operate)
- Inquiry, sourcing, and surplus-offer forms
- Email and telephone correspondence with our team
- Direct interactions at trade events, supplier visits, or industry meetings
- Third-party platforms we may use for marketing or business operations (such as LinkedIn or Google Workspace), to the extent we receive personal information from them
This policy does not cover practices of third-party websites we may link to. Their privacy practices are governed by their own policies.
3. Information we collect
The categories of personal information we may collect include:
- Identification & contact
- Full name, company / employer, job title, business email, business telephone, business address, country.
- Inquiry content
- Subject and message bodies, product references (item, part number, OEM, quantity), required-by dates, certification requirements, attached documents (specifications, datasheets, photos).
- Transactional & commercial
- Quotation references, purchase orders, invoice details, payment confirmations, freight forwarder details, Incoterms, port-of-destination, customs information.
- Surplus-seller information
- If you offer surplus to us: facility location, item lists, photos, valuation expectations, decommissioning context.
- Technical & usage
- IP address, device type, browser type, referring URL, pages viewed, timestamps, approximate location derived from IP, anti-spam tokens.
- Marketing & preferences
- Subscription status, communication preferences, recorded opt-outs.
We do not knowingly collect sensitive information as defined in the Privacy Act (health, racial or ethnic origin, political opinion, religious beliefs, sexual orientation, criminal record, biometrics or genetic data). Please do not include such information in inquiries.
4. How we collect it
We collect personal information:
- Directly from you — when you submit a form, send an email, place a telephone call, or hand over a business card.
- Automatically — through standard server logs, security tools, and analytics (see Cookies & tracking).
- From third parties — where you authorise it (for example, a freight forwarder providing a delivery address on your behalf) or where information is lawfully publicly available (company registries, LinkedIn).
- From referrers — when an existing client or supplier introduces you to us with your apparent consent.
5. Why we collect it
We collect personal information for the following purposes:
- To respond to inquiries, sourcing requests, and surplus-disposal offers
- To prepare and issue formal quotations and pro-forma invoices
- To process orders, arrange freight, prepare export documentation, and complete sales
- To maintain account, supplier, and customer records
- To comply with Australian tax, customs, AML/CTF, and export-control law
- To verify identity for high-value orders or unusual transactions (fraud and sanctions screening)
- To handle complaints, warranty correspondence, and after-sale support
- To send transactional notifications (order confirmations, despatch updates, certificates)
- To send relevant trade communications where permitted (see Marketing)
- To improve our website, search, and catalogue navigation
- To protect against fraud, abuse, security threats, and to enforce our Terms of Sale
6. Lawful basis for processing
Under the Australian Privacy Principles, we collect, use and disclose personal information only where reasonably necessary for one or more of our functions or activities. Where the EU GDPR or similar foreign law applies (because of your location), we rely on:
- Performance of a contract — to respond to your inquiry, deliver a quote, fulfil an order.
- Legitimate interests — to operate our B2B trading business, secure our infrastructure, prevent fraud.
- Legal obligation — taxation, customs, export-controls, anti-money-laundering.
- Consent — for optional marketing communications (you can withdraw at any time).
7. Disclosure to third parties
We share personal information only with parties who need it to perform a function on our behalf or as required by law. Categories of recipient include:
- Hosting & technology providers
- Web hosting, content delivery, email transport, anti-spam filtering, error monitoring, backup services.
- Freight, logistics & customs
- Freight forwarders, shipping lines, airline cargo agents, customs brokers, and packaging contractors — to despatch goods and prepare export documentation.
- Financial services
- Banks and payment processors handling telegraphic transfers, foreign-exchange providers, and where applicable letters of credit.
- Professional advisers
- Lawyers, accountants, auditors, and insurers — only where confidentiality and necessity apply.
- Government & regulators
- Australian Border Force, the Australian Taxation Office, Defence Export Controls, AUSTRAC, courts, or equivalent overseas authorities — where required by law or a properly issued legal process.
- Successors
- In the event of a sale, merger, restructure or insolvency, personal information may be transferred to a successor entity under equivalent protections.
We do not sell personal information. We do not share it with advertising platforms for targeted advertising or marketing remarketing.
8. International data transfers
Sunrise Marine is based in Australia, but many of our buyers, suppliers and service providers operate overseas. As a result, your personal information may be transferred to, stored in, or accessed from countries outside Australia — most commonly Singapore, the European Union, the United Kingdom, the United States, the United Arab Emirates, India, Indonesia, the Philippines, and other Asia-Pacific or African destinations relevant to a particular transaction.
Before disclosing personal information overseas, we take reasonable steps to ensure recipients handle it consistently with the Australian Privacy Principles, including via contractual terms, standard contractual clauses, or reliance on equivalent local legislation. By submitting personal information to us — particularly when initiating an international order — you consent to the international transfer of that information for the purpose of completing your transaction.
9. Storage & security
We hold personal information in:
- Encrypted databases hosted with reputable infrastructure providers (in transit via TLS 1.2+ and at rest where the provider supports it)
- Encrypted email systems with multi-factor authentication for staff accounts
- Restricted-access file storage for documents (datasheets, certificates, invoices)
- Paper records, where unavoidable, secured in locked cabinets
We apply administrative, technical and physical safeguards to protect personal information against unauthorised access, alteration, disclosure or destruction. These include: access on a need-to-know basis, password and MFA policies, regular software updates, vulnerability monitoring, and incident-response procedures. No system is perfectly secure, however, and we cannot guarantee absolute security.
In the unlikely event of an eligible data breach under Part IIIC of the Privacy Act, we will notify affected individuals and the Office of the Australian Information Commissioner (OAIC) as soon as practicable.
10. How long we keep data
We retain personal information only for as long as reasonably necessary to fulfil the purposes for which it was collected, including legal, tax, and operational record-keeping. Indicative retention periods:
| Category | Typical retention |
|---|---|
| Invoiced transactions (financial records) | 7 years — Australian tax law |
| Export documentation | 5 years — Australian Border Force record-keeping |
| Inquiries that did not result in a quote | Up to 24 months from last contact |
| Unconverted quotations | Up to 36 months from issue |
| Surplus-disposal correspondence | Up to 36 months from last activity |
| Server logs (IP, user agent) | Up to 12 months |
| Marketing consent records | For the duration of consent + 24 months after withdrawal |
After the retention period, personal information is securely destroyed, deleted, or de-identified.
12. Marketing communications
From time to time we may send trade communications to existing customers about stock arrivals, sourcing capability, and industry updates. We rely on the consent or "existing business relationship" exception under the Spam Act 2003 (Cth). Every marketing email contains a clearly identified sender, a working unsubscribe link, and our contact details.
You can withdraw consent at any time by clicking unsubscribe in any email or emailing info@sunrisemarine.com.au. Unsubscribing does not stop transactional communications about an in-progress quote or order.
13. Your rights
Subject to Australian and any applicable foreign law, you have the right to:
- Access — request a copy of the personal information we hold about you
- Correct — request that we correct inaccurate or incomplete information
- Delete — request deletion where there is no longer a lawful basis to retain it
- Restrict or object — to certain processing, where applicable
- Withdraw consent — at any time, for processing based on consent
- Portability — receive a copy in a structured, commonly used format, where applicable
To exercise any right, contact us using the details in Section 17. We will verify your identity (using information already on file) and respond within 30 days. Some requests may be refused where law or contractual necessity requires us to retain information.
14. Complaints
If you believe we have mishandled your personal information, please contact us in the first instance — most concerns are resolved quickly that way. If you remain dissatisfied, you may lodge a complaint with the Office of the Australian Information Commissioner:
Office of the Australian Information Commissioner (OAIC)
GPO Box 5288, Sydney NSW 2001
Phone: 1300 363 992
Web: oaic.gov.au
15. Children's data
Our website and services are aimed at industrial procurement professionals and are not directed at children under 16. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided personal information to us, please contact us so we can delete it.
16. Updates to this policy
We may update this policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. The "Last updated" date at the top of this page shows when the most recent change was made. Material changes that affect your rights will be communicated by a prominent notice on our website or, where appropriate, by direct email.
17. Contact us
For any privacy enquiry, request, complaint, or correction:
Nothing in this policy excludes, restricts or modifies any consumer guarantee or non-excludable right available to you under Australian Consumer Law or the Privacy Act 1988.