Privacy Policy
Effective date: September 6, 2026 Last updated: September 6, 2026
Sunstone Systems ("Sunstone Systems," "we," "us," or "our") respects your privacy. This Privacy Policy explains what information we collect, how we use it, who we share it with, and the choices you have. It applies to our website at sunstonesystems.co, our text messaging program, and our communications with clients and prospective clients.
If you do not agree with this Policy, please do not use our website or services.
1. Who we are
Sunstone Systems is an operational infrastructure firm serving mid-market service businesses. We are located at:
Sunstone Systems 1501 Saint Andrew Street La Crosse, WI 54603 scott@sunstonesystems.co
2. Information we collect
2.1 Information you provide directly
Contact information — name, business name, email address, mailing address, and phone number, including mobile number.
Communications — the contents of emails, text messages, form submissions, and other correspondence you send us, along with any files or information you choose to include.
Engagement information — information you share with us in the course of a project or engagement, including business process details, operational data, and system access where you have granted it under a separate agreement.
2.2 Information collected automatically
When you visit our website, we and our service providers may automatically collect:
IP address and general location derived from it
Browser type, device type, and operating system
Pages visited, time spent, and referring URLs
Date and time of access
This is collected through cookies and similar technologies. See Section 6.
2.3 Information from third parties
We may receive your business contact information from publicly available sources, business directories, or from a colleague or referral partner who provides it to us.
We do not purchase consumer contact lists, and we do not acquire mobile phone numbers from third parties for text messaging purposes.
3. SMS/Text Messaging
This section describes our text messaging practices specifically.
How we collect mobile numbers
Sunstone Systems collects mobile phone numbers from clients and business contacts who provide them directly to us and who give consent to receive text messages. Consent is collected verbally during a call or in-person conversation with a Sunstone Systems representative. The recipient's affirmative consent, the date, and the representative's name are recorded in our internal contact records.
How we use them
We use mobile numbers only to conduct direct, two-way communication with you about your engagement with Sunstone Systems — including scheduling, project coordination, status updates, and responses to your questions. We do not use text messaging for marketing or promotional purposes.
Sharing
We do not sell your personal information. Mobile information will not be shared with third parties or affiliates for marketing or promotional purposes. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. All of the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.
We share mobile numbers only with the communications service providers that transmit our messages on our behalf, and only for that purpose.
Frequency and cost
Message frequency varies based on the nature of your engagement and your communication with us. Message and data rates may apply.
Opting out
You may opt out at any time by replying STOP to any message. You will receive a single confirmation message and will not receive further texts unless you opt back in by replying START. For assistance, reply HELP to any message or contact us at scott@sunstonesystems.co.
4. How we use your information
We use the information we collect to:
Respond to your inquiries and communicate with you
Deliver, manage, and support our services under a client engagement
Schedule and coordinate meetings and project work
Operate, maintain, secure, and improve our website
Send administrative and service-related communications
Comply with legal obligations and enforce our agreements
Detect, investigate, and prevent fraud, abuse, or security incidents
5. How we share your information
We share personal information only in the following circumstances:
Service providers. We use third-party vendors to operate our business — including communications platforms, cloud hosting and infrastructure providers, project management and collaboration tools, email and calendar services, and analytics providers. These vendors process information on our behalf and are contractually restricted from using it for their own purposes.
Legal requirements. We may disclose information if required by law, subpoena, court order, or other legal process, or where we believe in good faith that disclosure is necessary to protect our rights, your safety or the safety of others, or to investigate fraud.
Business transfers. If Sunstone Systems is involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction. We will provide notice before your information becomes subject to a different privacy policy.
With your direction. We share information with others when you ask us to or otherwise direct us to.
We do not sell your personal information, and we do not share it with third parties for their own direct marketing purposes.
6. Cookies and tracking technologies
Our website uses cookies and similar technologies to operate the site and understand how it is used.
Essential cookies are required for the site to function.
Analytics cookies help us understand aggregate traffic patterns and improve the site.
Most browsers let you refuse or delete cookies through their settings. Disabling cookies may affect how parts of our site function.
We do not currently respond to browser "Do Not Track" signals, as no common standard for them has been adopted.
7. Data retention
We retain personal information for as long as needed to fulfill the purposes described in this Policy, to maintain our business records, and to comply with legal, tax, and accounting obligations. Engagement records are typically retained for the duration of the client relationship plus the period required by applicable law or our agreements. Text message opt-in consent records are retained for as long as the number remains opted in, and for a reasonable period afterward to demonstrate compliance.
When information is no longer needed, we delete it or de-identify it.
8. Security
We use administrative, technical, and physical safeguards designed to protect personal information — including access controls, encryption in transit, and vendor security review. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
If you believe your interaction with us is no longer secure, contact us at scott@sunstonesystems.co.
9. Your privacy rights
Depending on where you live, you may have the right to:
Request access to the personal information we hold about you
Request correction of inaccurate information
Request deletion of your information
Request a portable copy of your information
Opt out of the sale or sharing of your personal information (note: we do not sell or share personal information)
Opt out of targeted advertising (note: we do not engage in targeted advertising)
Not be discriminated against for exercising these rights
To exercise any of these rights, contact us at scott@sunstonesystems.co. We will verify your identity before responding, and will respond within the timeframe required by applicable law. You may designate an authorized agent to make a request on your behalf; we may require proof of that authorization.
If you are a client, note that information we process on your behalf as part of an engagement is governed by our agreement with you, and requests relating to that information should be directed through that relationship.
10. Children's privacy
Our website and services are directed to businesses and are not intended for children. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us information, contact us at scott@sunstonesystems.co and we will delete it.
11. Third-party websites
Our website may link to third-party sites we do not control. This Policy does not apply to those sites, and we are not responsible for their content or privacy practices. Review their policies before providing information.
12. Users outside the United States
Sunstone Systems operates in the United States, and information we collect is processed and stored in the United States. Data protection laws in the United States may differ from those in your country. By using our website or services, you understand that your information will be transferred to and processed in the United States.
13. Changes to this Policy
We may update this Policy from time to time. When we do, we will revise the "Last updated" date above. If we make material changes, we will provide additional notice, such as by email or a notice on our website. Your continued use of our website or services after the effective date constitutes acceptance of the updated Policy.
14. Contact us
Questions, concerns, or requests regarding this Policy:
Sunstone Systems 1501 Saint Andrew Street La Crosse, WI 54603 scott@sunstonesystems.co