Sunrise Foundation Ltd – Privacy Policy

At Sunrise Foundation Ltd (“Sunrise”, “we”, “our”), your privacy matters. We’re committed to handling personal information responsibly—protecting your details while helping more people feel safe, supported, and at home.

This policy outlines how we collect, use, share, and protect your personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

1.1 Purpose

We collect and manage personal information to deliver services, support communities, and meet our obligations under Australian law. This policy ensures Sunrise:

  • Is transparent about how and why we handle personal information

  • Collects, uses, and shares information only when necessary

  • Takes steps to keep information safe and secure

  • Acts in line with this policy and supporting procedures

1.2 How We Collect and Use Personal Information

Personal information is anything that can identify you—or could reasonably be used to. We only collect the information we need to:

  • Deliver housing and support programs

  • Stay in touch and respond to your queries

  • Meet legal, contractual, or reporting obligations

This may include contact details, housing history, financial information, or health-related details (with consent). Depending on your interaction with us, we may collect this:

  • Directly from you

  • Through phone, email, our website or social media, face-to-face, or via client portals

  • From third parties like support workers, family, healthcare professionals, or service partners

  • From suppliers working on our behalf—e.g. recruitment agencies, IT service providers, or marketing partners

If we need to collect sensitive information, we’ll always seek your consent.

1.3 Who We Share Your Information With

We only share personal information when it’s:

  • Needed to provide services

  • Required by law

  • Reasonably expected (e.g. with your case worker or a service partner)

  • With your permission

  • Necessary to keep someone safe

Our team and partners will only access your information on a ‘need-to-know’ basis.

1.4 Staying Anonymous

You can choose not to share personal information—but in some cases, we may not be able to offer you a service or process your application without it.

1.5 How We Store and Secure Information

We store personal information securely, in both physical and digital formats. Most of our systems are hosted in Australia, but some are located in other countries with comparable privacy laws (including the USA, EU, Greece, Armenia, Japan, the Philippines and Sri Lanka). We take reasonable steps to ensure overseas providers meet Australian privacy standards.

We also work with secure third-party suppliers to store specific data types (e.g. payment info, analytics). Security measures include:

  • Staff training and access controls

  • Multi-factor authentication and encrypted storage

  • Physical protections (e.g. secure access to offices)

1.6 How Long We Keep Your Information

We retain your personal information for as long as it’s needed to:

  • Deliver services

  • Meet legal or regulatory requirements

  • Support ongoing engagement

When it’s no longer needed, we’ll securely delete or de-identify it.

1.7 Your Rights: Access, Corrections & Deletion

You have the right to:

  • Access your personal information

  • Request corrections if it’s inaccurate, incomplete, or out of date

  • Request deletion (unless we’re required by law to keep it)

To do so, please contact our Privacy Officer (details below). We’ll verify your identity before processing any requests.

1.8 What Happens If There’s a Data Breach

If your personal information is lost, accessed, or disclosed without authorisation, we’ll:

  • Act quickly to investigate

  • Take steps to limit the impact

  • Notify you and the Office of the Australian Information Commissioner (OAIC) if required

1.9 Contacting Us

If you have a question, concern, or complaint about privacy, contact:

Privacy Officer
privacy@sunrisefoundation.com.au
+61 2 9159 6177
PO Box R1438, Royal Exchange NSW 1225

If you’re not satisfied with our response, you may escalate your concern by contacting the Charity Manager at:
info@sunrisefoundation.com.au
Charity Manager, PO Box R1438, Royal Exchange NSW 1225

You can also lodge a complaint with the Office of the Australian Information Commissioner at www.oaic.gov.au.


1.10 Definitions

  • Sunrise – Sunrise Foundation Ltd

  • OAIC – Office of the Australian Information Commissioner

  • Personal Information – As defined by the Privacy Act 1988 (Cth): information or opinion that identifies (or could reasonably identify) an individual

  • Sensitive Information – Includes health information, racial or ethnic origin, religious beliefs, sexual orientation, or criminal records

  • Sunrise People – All Sunrise employees, volunteers, and members

Supplier – Third-party service providers, including program delivery partners, legal, IT, or marketing agencies