Privacy Policy

Last updated: 15 July 2026

This Privacy Policy explains how Simplicity Internet Solutions (“Simplicity”, “we”, “us”) collects, uses, stores and protects personal information when you use our website, sign up for our services, or interact with us. It is written to comply with the Protection of Personal Information Act, 4 of 2013 (POPIA). For a plain-language summary, see our POPIA & Privacy Commitment page.

1. Who we are

Simplicity Internet Solutions is a South African Internet Service Provider and Managed Service Provider. For the purposes of POPIA, Simplicity Internet Solutions is the “responsible party” for personal information processed in connection with our services. Our Information Officer can be reached via our contact page.

2. What personal information we collect

Depending on the services you use, we may collect:

  • Identity and contact details — name, company name, ID or registration number, physical address, email address and telephone numbers.
  • Verification documents — copies of identity documents and proof of address, where required by law (including RICA) or for account verification (KYC).
  • Billing information — banking details for debit orders, payment history and invoicing records.
  • Service and technical data — installation address, connection details, IP address assignments, usage and session records, and diagnostic data needed to provision and support your services.
  • Support records — correspondence, support tickets and call notes relating to your account.
  • Website data — information submitted through forms on this website, and limited technical data (such as IP address and browser type) collected through cookies and analytics, described in section 8.

3. Why we collect it (purposes)

We process personal information to:

  • Provide, provision, bill for and support the services you’ve ordered;
  • Verify your identity where required by law, including under RICA;
  • Communicate with you about your account, service changes, maintenance and outages;
  • Comply with legal and regulatory obligations applicable to licensed service providers;
  • Prevent fraud, abuse of our network, and non-payment;
  • Improve our services and website.

We do not sell personal information, and we do not use it for third-party marketing.

4. Lawful basis for processing

We process personal information where: it is necessary to conclude or perform a contract with you; it is required by law; it protects a legitimate interest of yours or ours; or you have consented. Where processing is based on consent, you may withdraw that consent at any time, though this may affect our ability to provide certain services.

5. Who we share information with

We share personal information only where necessary to deliver our services or as required by law, including with:

  • Fibre network operators and upstream providers — to provision and support connectivity at your premises;
  • Payment processors and banks — to process debit orders and payments;
  • Service platforms we use to run our business — such as billing, CRM, support desk and document-signing systems, acting as operators on our behalf under written terms;
  • Regulators and law enforcement — where disclosure is required by legislation or a valid legal process.

Some of our service platforms may store data outside South Africa. Where personal information is transferred across borders, we ensure the recipient is subject to laws or binding agreements providing an adequate level of protection, as required by section 72 of POPIA.

6. How long we keep it

We retain personal information for as long as needed to provide your services, and thereafter as required by law — including tax, RICA and other statutory retention periods. When information is no longer required, we delete or de-identify it.

7. How we protect it

We apply reasonable and appropriate technical and organisational measures to secure personal information against loss, unauthorised access and unlawful processing — including access controls, encryption in transit, network security controls and staff confidentiality obligations. In the event of a data breach affecting your personal information, we will notify the Information Regulator and affected data subjects as required by section 22 of POPIA.

8. Cookies and website analytics

Our website uses cookies that are necessary for it to function, and may use analytics cookies to understand how visitors use the site. Analytics data is aggregated and is not used to identify you personally. You can control or delete cookies through your browser settings; disabling cookies may affect parts of the website.

9. Your rights under POPIA

You have the right to:

  • Request confirmation of whether we hold personal information about you, and request access to it;
  • Request correction or deletion of personal information that is inaccurate, out of date, incomplete, or unlawfully obtained;
  • Object, on reasonable grounds, to processing of your personal information;
  • Withdraw consent where processing is based on consent;
  • Lodge a complaint with the Information Regulator.

To exercise any of these rights, contact our Information Officer via our contact page. We will respond within a reasonable time and may need to verify your identity before acting on a request.

10. The Information Regulator

If you believe we have processed your personal information unlawfully, you may lodge a complaint with the Information Regulator (South Africa): JD House, 27 Stiemens Street, Braamfontein, Johannesburg; email POPIAComplaints@inforegulator.org.za; website inforegulator.org.za.

11. Changes to this policy

We may update this Privacy Policy from time to time. The current version will always be available on this page, with the “last updated” date shown at the top. Material changes will be communicated to active clients.

This policy should be read together with our Terms & Conditions and our POPIA & Privacy Commitment.