Privacy Policy

1. Scope

This Privacy Policy explains how Sanmarris Pty Ltd (“Sanmarris”, “we”, “us” or “our”) collects, holds, uses and discloses personal information through our websites, enquiries, marketing activities and business relationships. Product-specific agreements or notices may provide additional information where Sanmarris processes customer data on behalf of an organisation.

We aim to handle personal information consistently with applicable privacy laws, including the Australian Privacy Principles where they apply and, for relevant individuals, applicable GDPR or UK GDPR requirements.

2. Information we collect

Depending on how you interact with us, we may collect contact and business information such as your name, organisation, role, email address and telephone number; enquiry, demo and sales information; account and support information; and technical or usage information such as IP address, approximate location, browser/device information, referral source, pages viewed, search activity and interaction events.

We do not intentionally send contact-form contents, names, email addresses, phone numbers or free-text AI conversations to our website analytics event layer. AI interactions may be classified into broad topics such as pricing, products, services or sales for aggregate analysis.

3. How we collect information

We may collect information directly from you when you contact us, request a demo, subscribe, create or use an account, communicate with our team or otherwise provide information. We may also collect technical and usage information through our website and, where permitted by your choices and applicable law, analytics or marketing technologies.

4. Why we use information

We may use personal information to provide and improve our websites, products and services; respond to enquiries; arrange demonstrations and sales discussions; provide support; administer business relationships; secure and troubleshoot our systems; understand website and product usage; measure marketing; comply with legal obligations; and establish, exercise or defend legal claims.

Where GDPR or UK GDPR applies, our lawful basis will depend on the activity and may include performance of a contract, steps requested before entering a contract, legitimate interests, compliance with legal obligations, or consent where consent is required.

5. Sharing and overseas processing

We may disclose information to service providers that support hosting, communications, analytics, security, customer support, professional advice and other business functions, and to authorities or other parties where required or permitted by law. We do not sell personal information as a standalone business activity.

Some service providers may process information outside Australia, including in the United States and other countries in which those providers or their subprocessors operate. The exact locations can change as providers update their infrastructure. Where required, we use appropriate contractual or other safeguards for international transfers.

6. Analytics, cookies and advertising

Our site uses a consent mechanism for non-essential technologies. If you allow analytics, Google Analytics and Microsoft Clarity may be loaded to help us understand traffic, engagement and user experience. If you allow marketing technologies, LinkedIn Insight may be loaded to measure LinkedIn campaigns and support advertising audiences.

You can change your choices at any time using Cookie settings. See our Cookie Policy for more detail.

7. Retention and security

We retain personal information for as long as reasonably necessary for the purpose for which it was collected, our legitimate business needs, contractual obligations and applicable legal requirements. We then delete, de-identify or securely dispose of it where appropriate.

We use administrative, technical and organisational measures designed to protect information against unauthorised access, loss, misuse or disclosure. No internet or storage system can be guaranteed to be completely secure.

8. Your privacy rights

Depending on where you are located and the law that applies, you may have rights to request access to or correction of personal information and, in some jurisdictions, erasure, restriction, objection, portability or withdrawal of consent. These rights can be subject to legal limitations and exceptions.

You can submit a request through our Data & Privacy Requests page. We may need to verify your identity before fulfilling a request.

9. Questions and complaints

For privacy questions, requests or complaints, contact privacy@sanmarris.com. We will review privacy complaints and respond within a reasonable period. If you are not satisfied, you may have the right to contact the relevant privacy regulator, such as the Office of the Australian Information Commissioner (OAIC), or an applicable EU/UK supervisory authority.

10. Changes to this policy

We may update this policy as our services, technology or legal obligations change. The current version will be published on this page with its last-updated date.