Privacy Policy

We are the personal information controller for the personal data described in this Policy.

This Policy applies to personal data we process about:

• Visitors to our website and individuals who submit inquiries through it
• Individuals who express interest in career opportunities through our Join Us page, using the same inquiry form

It does not cover the independent privacy practices of third-party websites we link to. It also does not cover our internal processing of employee data, in-process job-applicant data (e.g. resumes and interview records collected outside the website), or business-partner and vendor data - those are addressed by our separate internal HR and business policies, not published here.

Website visitors and inquirers - when you use our inquiry form, we collect your full name, work email address, company name, and your message. Our hosting and content-delivery infrastructure also logs limited technical data automatically (IP address, browser type, device type, pages viewed). Google Fonts (typography) may process minimal technical signals as described in §9.

Career-interest inquiries (Join Us) - our Join Us page directs interested candidates to the same inquiry form used for general and partnership inquiries. We do not collect resumes, employment history, educational background, or assessment results through the website - if you contact us about career opportunities via the website, we collect the same fields as any other inquiry: full name, work email address, company name (if applicable), and your message. Any further recruitment information you provide later in the hiring process (e.g. a resume submitted directly to us) is handled under our internal recruitment privacy practices, not this Policy.

• Responding to inquiries submitted through our website, including career-interest inquiries submitted via Join Us
• Operating and maintaining our website and its inquiry pipeline
• Marketing and business-development follow-up on inquiries you initiate
• Detecting and preventing fraud, spam, or abuse of our inquiry form
• Compliance with legal obligations applicable to the data described in this Policy

• Consent - for information you voluntarily provide through our website
• Legitimate interest - to respond to inquiries you initiate and to operate and maintain our website
• Compliance with a legal obligation - where applicable, such as responding to a lawful order from the National Privacy Commission or a court

We do not sell your personal data. We may share it with:

• Service providers who process data on our behalf: Amazon Web Services (S3, CloudFront - website hosting; Lambda and SES - inquiry-notification email), and Google (Apps Script and Sheets - inquiry-form processing and records storage; Fonts - typography)
• Other Sun* Group companies, on a joint-use basis for the purposes described in Section 7
• Authorities, where disclosure is required by law, regulation, or court order, or to protect the rights, property, or safety of Sun* Philippines, our people, or the public

Personal data collected through this website may be used jointly by Sun Asterisk Software Development Inc. and other companies within the Sun* Group, including our parent company in Japan and affiliates elsewhere in Asia, as follows:

• Items of personal data used jointly: full name, work email address, company name, and inquiry message submitted through our website
• Purpose of joint use: group-wide business development coordination, client relationship management, and internal reporting
• Party responsible for managing the jointly used data: Sun Asterisk Software Development Inc. (contact details in Section 16)

Some of our service providers and Sun* Group affiliates (see Sections 6-7) may store or process data on servers located outside the Philippines. Where we transfer personal data outside the Philippines, we take reasonable contractual and organizational steps to require a comparable standard of protection, consistent with NPC guidance on cross-border data transfers.

Our website does not currently set analytics or advertising cookies. Loading Google Fonts may involve minimal technical cookies or identifiers necessary for that service to function; these are not used to identify you personally for marketing purposes. If we introduce analytics tools (such as GA4) in a future phase, we will update this Policy and implement a cookie-consent mechanism as required.

General inquiries. Website inquiry records are retained for as long as reasonably necessary to respond to and maintain a record of the inquiry, and to comply with any applicable legal or accounting obligations.

Career-interest inquiries (Join Us). We retain applicant personal information only for as long as necessary to fulfill the purposes for which it was collected, including recruitment, evaluation, and consideration for future employment opportunities, or as otherwise required or permitted by applicable laws and regulations.

If you have visited our website or submitted an inquiry through it (including a career-interest inquiry), you have the right to:

• Be informed that your personal data will be, is being, or has been processed
• Access the personal data we hold about you
• Object to the processing of your data
• Request correction of inaccurate or outdated data
• Request erasure or blocking of your data, subject to any legal retention requirements
• Data portability, where technically feasible
• Claim damages in case of inaccurate, incomplete, or unlawfully obtained personal data
• Lodge a complaint with the National Privacy Commission (NPC)

To exercise any of these rights, contact our Data Protection Officer at admin-ph@sun-asterisk.com. We will respond within a reasonable time and in accordance with the Data Privacy Act's requirements.

We implement reasonable organizational, physical, and technical measures to protect personal data submitted through our website against unauthorized access, disclosure, alteration, or destruction - including access restrictions on our inquiry records and reliance on established providers (AWS, Google) for infrastructure-level security.

For privacy questions, or to exercise your data-subject rights under the Data Privacy Act of 2012, you may contact our Data Protection Officer:

Our Data Protection Officer is also the contact point for coordinating with the National Privacy Commission on personal data privacy and security matters.

Our website is intended for business audiences and is not directed at children. We do not knowingly collect personal data from individuals under 18 years of age through our website.

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The date at the top indicates the most recent revision. Material changes will be communicated on this page.

For general questions about this Privacy Policy, please contact us at: