Draft. This template must be completed and reviewed by a lawyer before publishing.
Last updated: [date]
1. Who we are
The data controller is [Full legal name of the company], registration number [tax ID / company number], address: [registered address] (“Simple Telecom”, “we”).
For any data protection questions, email us at [data protection contact email].
2. What data we process
Customer data: name, job title, company name, email, phone, billing and contract details, and our correspondence.
Website visitor data: IP address, browser and device type, pages visited and time of visit, and data submitted through request forms.
Message recipient data: phone number or email address, message content and technical delivery statuses. We process this data on behalf of the customer who sends the messages.
3. Why we use data
To enter into and perform our contract: set up the service, deliver messages, issue invoices and provide support.
To keep the service secure: prevent fraud, spam and unauthorised access.
To respond to requests and, with your consent, tell you about new platform features.
To meet legal obligations, including data retention and responding to requests from public authorities.
4. Legal bases
We process data on the basis of a contract, your consent, our legitimate interest or a legal obligation under [applicable law].
5. Who we share data with
Telecom carriers and messaging platforms (such as mobile operators, WhatsApp, Viber and Telegram) — only to the extent needed to deliver a message.
Service providers who help us operate — hosting, payments and support. They process data on our instructions and must keep it secure.
Public authorities — only where the law requires it.
We do not sell personal data.
6. International transfers
Data is stored on servers in [country / region of storage]. When a message is delivered to another country, recipient data is passed to carriers in that country in line with legal requirements.
7. How long we keep data
Customer data — for the term of the contract and [period] after it ends. Message content and statuses — [period]. Request form data — [period]if no contract is signed.
8. Your rights
You can request access to your data, correction, deletion or restriction of processing, withdraw consent and object to processing. To do so, email [data protection contact email] — we will reply within [response period].
You also have the right to complain to the supervisory authority: [name of the data protection authority].
9. Cookies
The website uses essential cookies to function and, with your consent, analytics cookies [list analytics services]. You can manage cookies in your browser settings.
10. How we protect data
Encryption in transit and at rest, role-based access, activity logging and regular security reviews.
11. Changes to this policy
We may update this policy. The current version is always published on this page, with the date of the last update shown at the top.