Sunrise Strategy Group Book my call

Privacy Policy

Effective date: May 1, 2026. Last updated: October 5, 2026.

1. Who we are

Sunrise Strategy Group LLC ("SSG," "we," "us") is a Florida limited liability company that provides marketing technology and advertising services to businesses of all kinds. Our contact email is corey@sunrisestrategygroup.com.

2. Scope of this policy

This Privacy Policy describes how SSG collects, uses, stores, and shares information in connection with our website at sunrisestrategygroup.com and our Meta (Facebook) developer application that allows our business clients to authorize SSG to manage their Meta advertising accounts on their behalf. It covers both the information you give us directly, such as when you request a strategy call, and the information we receive through that application.

3. Information we collect

When a client authorizes SSG through our Meta application, we collect:

  • The Meta access token issued by Meta to SSG for the authorizing user.
  • The names and categories of the Facebook Pages the client grants us access to, used to identify which Pages the integration manages. We do not retain per-Page access tokens.
  • The identifiers of the Meta ad accounts and Pages the client explicitly grants us access to.
  • The name and email address of the authorizing Meta user, as returned by Meta.
  • Ad performance data (impressions, clicks, conversions, spend) for the ad accounts the client authorizes us to manage.

We do not collect personal information about the end users who see or interact with our clients' ads. Meta provides only aggregated, non-identifying performance data to us.

Separately, a business that has engaged us is sent a private onboarding form at a link we provide. That form collects business information needed to set up the services they have bought: the legal entity name and employer identification number, the business address and phone number, the owner's name, email address and mobile number, operating hours, service area, pricing, and the identifiers of the advertising and business accounts they are asking us to manage. It is submitted by the business, about the business. We ask for no payment details and no passwords on it, and it is not indexed or linked from anywhere on this site.

When you request a strategy call through a form on this website, we collect the information you enter: your name, your business name, your email address, your mobile number, your business website, what you currently spend on advertising each month, and what you would most like to improve. We also record which page you submitted from, and any campaign parameters present in the link you arrived on, so we know which of our own advertising brought you here.

When you ask for a free resource, such as a checklist, we collect your first name and email address. You can ask through a form on this website, or by commenting on one of our Instagram or Facebook posts and answering our direct message, in which case we also receive your public profile name and username from Meta. We record which of those two routes you used, and how you answer any question we ask you in that message.

When you visit our website, our hosting provider (Cloudflare) logs standard HTTP request data for security and abuse prevention. That includes your IP address and user agent. We do not use Cloudflare Web Analytics.

We use the Meta Pixel on the pages of this website. It is a small piece of code from Meta. When a page loads, it sends Meta the address of that page and of the page that sent you there. It also sends your browser and device information, your IP address and a cookie identifier. When you submit our form, it tells Meta that a lead came in. That signal can include a hashed form of the name, email address and phone number you entered. We also send Meta hashed contact details from our server through its Conversions API, as described in section 6. We use all of this to measure and improve our Meta ads. Meta handles this information under its own privacy policy. You can control the ads Meta shows you in your Meta ad preferences.

Our classroom pages, under sunrisestrategygroup.com/classroom, embed video hosted by Loom. Those pages are open to anyone with the link and ask you for nothing. Opening one sends Loom nothing. The still image you see is served from this site. No video is loaded until you ask for it. When you press play, your browser loads the player from Loom directly, so from that point Loom receives your IP address and browser user agent and may set its own cookies in order to play the video and count views. If you do not press play, your visit is never disclosed to Loom. We do not receive from Loom, or ask it for, any information identifying you.

4. How we use the information

We use the information you submit through a form on this website to contact you about your enquiry, to prepare for and hold the call you requested (which includes reviewing your business's public website and listings, such as its Google Business Profile and any ads it runs in Meta's public Ad Library), and to measure which of our own marketing produced the enquiry. By submitting a form you agree that we may contact you by phone, text message and email about that enquiry. Message and data rates may apply, message frequency varies, and you can opt out of text messages at any time by replying STOP or by emailing us. We do not sell your information and we do not use it to advertise to you on behalf of anyone else.

When you ask for a free resource, we use your email address to send it to you, and then to send you our email about advertising, usually one a week. Every one of those emails has an unsubscribe link, and one click stops them. We do not text you about a free resource, and we do not send your details to Meta as a conversion event.

We use the information collected through our Meta application solely to deliver the services our client has engaged us to perform, namely creating, managing, and reporting on Meta advertising campaigns on the client's behalf. We do not use this information for any other purpose, and we do not use it to build profiles of, or advertise to, the client's customers or end users.

5. How we store and protect the information

Meta access tokens and ad account identifiers are transmitted over encrypted connections and stored in access-controlled configuration operated by SSG. Tokens are scoped per client and are never reused across clients. They are handled only by SSG administrators and are never committed to version control systems, public repositories, or any publicly accessible document.

6. Sharing

We do not sell, rent, or trade any information collected through our Meta application or website. We share data with third parties only as needed to deliver the services and run our own business:

  • GoHighLevel, our customer relationship management provider, stores the details you submit through a form on this website or through our Instagram and Facebook messages, so we can respond to you, schedule your call, and send you what you asked for. The booking calendar on our site is provided by GoHighLevel.
  • Sendblue, our text messaging provider, carries the text messages we send to your mobile number and your replies to them.
  • Meta receives three separate things. We send API requests to Meta on a client's behalf to manage their advertising. The Meta Pixel on our pages sends Meta what section 3 describes. And when you submit a form on this website, our server sends Meta a conversion event through its Conversions API. We use it to see which of our own ads produced an enquiry. That event contains an irreversibly hashed form of your email address, phone number and name. It also contains a hashed form of the record number our CRM gives you, and your country. It carries your IP address and browser user agent. If you arrived from one of our ads, it carries the ad's click identifier. It also carries the page you submitted from. Your multiple choice answers, such as your monthly ad budget, are sent as short codes. Meta uses it to attribute and optimise our advertising. We do not send Meta your business name or your website.
  • Slack, with Telegram as a backup, delivers an internal alert to our team when an enquiry arrives, so someone sees it quickly. That alert contains the details you submitted.
  • Cloudflare hosts this website and runs our form and authorization endpoints.
  • Google Workspace (Gmail) delivers internal transactional notifications and our replies to you.
  • Loom hosts the videos embedded on our classroom pages, and receives your IP address and browser user agent once you press play on one. Merely opening a classroom page sends Loom nothing. We do not send Loom anything you have submitted to us, and no page outside the classroom embeds a Loom video.

No other third parties receive this data.

Mobile information is never shared or sold. No mobile information, mobile opt-in, or SMS consent will be shared with or sold to any third party or affiliate for marketing or promotional purposes. Text messaging originator opt-in data and consent are not shared with any third party. Mobile numbers and consent are used only to send the messages described in our SMS Terms, and are passed only to the messaging providers that carry those messages on our behalf, which may not use them for any other purpose.

7. Compliance with Meta Platform Terms

SSG complies with Meta's Platform Terms and Developer Policies. We use access tokens only for the purposes the client has authorized and only for as long as the client maintains an active engagement with us. If a client revokes our access through their Meta settings, we cease using their token immediately and delete it from our systems.

8. Data retention and deletion

We retain the details you submit through a form for as long as we are in contact with you about your enquiry and for up to 24 months afterwards, so that we can pick up a conversation you restart. You can ask us to delete them sooner at any time, using the address below.

We retain Meta access tokens and associated identifiers only for the duration of an active client engagement. When a client engagement ends, or when a client requests deletion, we remove the relevant tokens and identifiers from our systems within 30 days. To request deletion, email corey@sunrisestrategygroup.com with the subject line "Data deletion request."

9. Your rights

If you have submitted an enquiry through this website, you can ask us what we hold about you, ask us to correct it, ask us to delete it, and ask us to stop contacting you. Email us and we will action it. To stop text messages immediately, reply STOP to any message.

If you are a client or an authorized user of one of our clients, you have the right to know what information we hold about you, to request correction or deletion, and to revoke our access at any time. You can revoke SSG's Meta access directly from your Meta account settings under Business Integrations. You can also contact us at the email above to exercise any of these rights.

10. Children

Our services are intended for businesses, not individuals under 18. We do not knowingly collect personal information from children.

11. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page will reflect the most recent change. Material changes will be communicated to active clients by email.

12. Contact

Questions about this policy can be sent to corey@sunrisestrategygroup.com.