1. Introduction

Sunny Advertising respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains how we collect, use, store, and disclose your personal information in line with the Privacy Act 1988 (Cth), including the Privacy and Other Legislation Amendment Act 2024, and the Australian Privacy Principles (APPs).

By using our services or website, you agree to the terms of this policy.

2. What Personal Information We Collect

We may collect the following types of personal information:

• Name, business name, job title
• Email address, phone number, and other contact details
• Company information submitted through forms or proposals
• Usage data (e.g. IP address, browser type, device identifiers)
• Preferences or behaviours inferred through cookies or analytics
• Marketing preferences and opt-in status

We may also process customer data supplied to us by our clients as part of advertising or marketing campaigns. This may include personal information about third parties, such as names, email addresses, or behavioural data, provided that consent has been obtained.

3. How We Collect Personal Information

We collect personal information through:

• Website forms (e.g. proposal requests, contact forms)
• Cookies, tracking pixels, and analytics tools (e.g. Google Analytics, Meta Pixel)
• Email correspondence and phone calls
• Social media interactions
• Client data uploads (e.g. spreadsheets of leads)

Cookies and Tracking
We use cookies to:

• Analyse website usage
• Personalise content and advertising
• Remember your site preferences

Our website uses a cookie preference tool that allows you to opt in or out of non-essential cookies (e.g. marketing and analytics).
While we take reasonable steps to honour your preferences, enforcement may vary depending on your browser or device settings.

You can manage cookie settings at any time using our Cookie Settings link below.

‍

4. How We Use Personal Information

We use personal information to:

• Provide services and respond to enquiries
• Deliver and optimise advertising campaigns
• Send relevant email updates (where consented)
• Improve website performance and user experience
• Maintain internal records and business reporting
• Conduct market research

We are committed to ensuring that all personal information is handled in a way that is fair and reasonable in the circumstances, as required by Section 15A of the Privacy Act 1988. This means we consider your expectations, the purpose of collection, and potential privacy impact before using or sharing your data.

We will only use personal information for the purpose for which it was collected, or for a related purpose you would reasonably expect.
If we intend to use your data for a new or different purpose, we will seek fresh consent or update this policy accordingly.

We do not sell or rent your personal information.

5. Disclosure of Personal Information

We may disclose personal information to:

• Advertising platforms (e.g. Meta, Google) for campaign delivery
• Email and CRM providers (e.g. HubSpot, Mailchimp)
• Analytics and performance tracking services
• Subcontractors or business partners assisting in our services
• Government or regulatory authorities if required by law

All third parties are contractually required to handle your data in accordance with Australian privacy standards.

6. Overseas Disclosures

We may store or process personal information in countries outside Australia, including:

• The United States
• Ireland
• Singapore

These disclosures typically occur when we use cloud platforms or service providers based overseas.

We take reasonable steps to ensure your information remains protected. This may include using contractual clauses that require compliance with the Australian Privacy Principles.

Note: If data is accessed by a staff member or contractor located overseas, this may also constitute an overseas disclosure under APP 8.

7. Client-Supplied Data and Consent

If we receive your personal information from one of our clients (e.g. for an ad campaign), we require that client to:

• Verify that they have your informed, voluntary, and current consent
• Provide details on how, when, and why your data was collected
• Ensure consent covers marketing and data sharing

We use such data strictly within the agreed campaign scope. Any additional use requires fresh consent or a privacy notice update.

If you believe your data has been shared without your consent, please contact us and we will investigate promptly.

8. Profiling and Automated Decision-Making

We may use profiling to:

• Segment audiences by interest or behaviour
• Improve the relevance of advertising

We do not use personal data in automated decision-making that has legal or significant effects on individuals.

To learn more about how we approach artificial intelligence, please read our Responsible AI Policy.

9. Direct Marketing and Opt-Outs

If you have opted in, we may send you:

• Industry news or insights
• Invitations to events
• Promotions or service updates

You may opt out at any time by:

• Clicking “Unsubscribe” in emails
• Updating your communication preferences
• Contacting us directly

We will honour all opt-out requests in a timely manner.

10. Data Security

We take reasonable technical and organisational steps to protect your personal information, including:

• Password protection and role-based access controls
• Encryption of sensitive files and secure cloud storage (e.g. Google Drive, HubSpot)
• Staff privacy training and acceptable use policies
• Routine security reviews

Only authorised personnel have access to personal data, and only for legitimate business purposes.

11. Retention and Deletion

We retain personal information only as long as necessary for the purposes outlined above or as required by law.

Our default retention period is:

• 12 months after a campaign or engagement ends
• Earlier if a valid deletion request is received
• Longer if required by law or contractual obligations

We regularly review and securely delete expired or unneeded data, including from backups.

To request deletion of your data, please contact us or complete our Right to Erasure Form.

12. Your Rights

You have the right to:

• Access the personal information we hold about you
• Correct any inaccurate or outdated data
• Withdraw consent to marketing or profiling
• Request deletion of your personal information

To exercise these rights, please email:
📧 admin@sunnyadvertising.com.au

We aim to respond within 30 days of receiving your request.

13. Complaints

If you believe we have mishandled your personal information, please contact our Privacy Officer. We will investigate your complaint and respond promptly.

If you are not satisfied with our response, you may contact the:

Office of the Australian Information Commissioner (OAIC)
📍 www.oaic.gov.au

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The latest version will always be available at:

🌐 www.sunnyadvertising.com.au/privacy-policy

We encourage you to review it regularly. Major updates will be communicated via email or website banner where appropriate.

15. Contact Us

If you have any questions or wish to exercise your privacy rights, please contact:

Privacy Officer – Sunny Advertising
📧 saraha@sunnyadvertising.com.au

© 2025 Sunny Advertising

Performance Advertising Agency - Sunshine Coast | Sydney | Brisbane

‍