Privacy Policy


Your privacy is very important to Sunstone Metals Ltd. With this Privacy Policy, we want to make you aware of how we collect and process your personal data.


Sunstone Metals Ltd, and its subsidiaries, process personal data in accordance with all laws that apply to the protection of personal data, including the GDPR, i.e. the European Union’s General Data Protection Regulation 2016/679 GDPR (“Data Protection Laws”). We process personal data for the purposes of keeping
subscribed investors up to date and marketing, amongst others. In accordance with the Data Protection Laws, those persons whose personal data we process are entitled to obtain information on the personal data we process and to use their rights based on the GDPR as further described in this Privacy Policy.

We do our best to ensure that your personal data is processed lawfully and in a transparent manner, and to ensure that your personal data is safe, accurate and up to date.

We apply the appropriate technical and organisational measures to ensure that your personal data is safe with us. These measures include, for example, data processing agreements and non‐disclosure agreements that we have concluded with our vendors and business partners.

Legal basis and purposes for processing your personal data

We use personal data where you have given us consent to send marketing information to you via a medium where we need your consent (for example, email marketing to private email addresses).

How do we collect personal data and how do we use it?

We primarily collect personal data from the data subject directly when we manage our marketing activities and communicate with the data subjects for the purposes of marketing. We collect personal data e.g. in order to send out communications to those that have registered their interest in receiving such communications.

Subscribing to communications

You can subscribe to our news alerts here. You can unsubscribe at any time to stop receiving this information.


Our website uses cookies to analyse how the site is used, including the number of visitors, how you found your way to our website and the pages you visit as well as the total time you spend on our website.

Cookies are text files that are placed on your computer that allow your computer to be recognised by our website. The cookies on our website may be used by and delivered to you by us or by third‐party web analytics services. The cookies collect  information in an anonymous form, and we do not use this data to identify our website visitors even if the technologies used would make such identification possible.

You may refuse to accept cookies from our website and delete existing cookies by selecting the appropriate settings on your browser. If you wish to do so, please refer to your browser’s user guide to find out how to control cookies by adjusting your browser’s preferences.

As mentioned above, we primarily process personal data we have obtained directly from you. When necessary, we may also collect or update personal data from publicly available sources or from commercial databases.

What types of personal data do we process?

We may process personal data of the following categories:

  • Basic identifying data, including name and contact details (such as email address, telephone number and address);
  • When we send or receive email from you we collect the address and content of the emails, the success or failure of our attempts to send you email, and information about when you receive, open or click on content in emails we send you and any subsequent visits you or other recipients make to our websites;
  • Information about whether you have consented to or opted out of receiving direct marketing.

Where do we store personal data?

We primarily process personal data on servers located within Australia.

We will implement appropriate safeguards under the GDPR to ensure that your personal data remains protected and secure. Such international transfers of personal data will be based on the standard contractual clauses approved by the European Commission.

Will data be transferred or disclosed to third parties?

We use partners and service providers in connection with business activities that require the processing of personal data, and as such, personal data will be transferred to and processed by third‐party providers (data processors) that provide services to Sunstone Metals Ltd.

All of these partners and third‐party service providers must implement appropriate technical and organisational measures to ensure the protection of your personal data. Furthermore, they may not process any personal data transferred to them for any other purposes than for providing services to us. The only employees with access to your personal data will be those employees who need to process your personal data.

We will not disclose personal data to any other third parties unless we are required to do so under applicable laws.

Retention time

Where we process personal data for marketing purposes or with your consent, and you remain an active user of our communications services, we process the data until you ask us to stop and for a short period after this (to allow us to implement your requests). We also keep a record of the fact that you have asked us not to send you direct marketing or to process your data indefinitely so that we can respect your request in future.

Where you cease to be an active user of our communications services, we will retain your data used for marketing purposes for a period of two years from your last interaction with us.

What are your rights regarding your personal data?

You have the right to ask us for a copy of your personal data: to correct, delete or restrict processing of your personal data; and to obtain the personal data you provide in a structured, machine readable format.

You have the right to opt out of marketing communications: Each of our marketing emails includes instructions on how you can opt out (unsubscribe) of future marketing.

You have the right to erasure: You may request the erasure of your personal data, and we are obliged to comply with your request e.g. in the event that the relevant personal data is no longer required for the purposes for which it was collected, or where we have unlawfully processed the relevant personal data.

These rights may be limited, for example if fulfilling your request would reveal personal data about another person, or if you ask us to delete information which we are required by law or have compelling legitimate interests to keep.

Contact us

If you have any questions regarding the processing of your personal data, please feel free to us at


This Privacy Policy was updated in May 2018. We reserve the right to update and amend this Privacy Policy.

Unless otherwise provided in mandatory applicable legislation, we may not personally notify the data subjects of any changes we make to this Privacy Policy. We kindly ask that you review this Privacy Policy from time to time for possible changes.