MyISP POPIA Compliance Policy

At MyISP, we respect the privacy of our customers and are committed to protecting your personal information. This privacy policy outlines how we collect, use, share, and protect personal data provided to us in accordance with South Africa's POPI Act.

Information We Collect

We collect personal data needed to deliver our internet services, manage your account, and communicate with you including:

• Contact details (name, address, phone number, email)
• ID number and billing information
• Service location details
• Internet usage data (IP addresses, traffic logs, sites visited)
• Communications with our support team

How We Use Personal Information

The personal data we collect allows us to:

• Set up, deliver, and support our internet services
• Process payments and provide billing statements
• Respond to service calls and questions
• Monitor network health, troubleshoot issues
• Improve service offerings
• Comply with regulatory obligations

We only process your personal information as needed for the purposes stated when collected or per explicit consent if required by law.

Data Sharing and Disclosure

We do not sell or rent personal data to third parties. We only share it with service partners relevant to service delivery and operations including payment processors, equipment maintenance providers, installers, and data centres.

We may be obligated to disclose data when required under law or to protect our legal rights. In such cases, we only share data obligatory to regulatory compliance.

Individual Rights and Requests

As a data subject under POPI, you have the right to access your personal information to view, correct, delete or modify the data as appropriate. You may opt-out of continued data processing and storage unless it prevents us from fulfilling legal obligations.

You may submit data subject access requests or manage consents by emailing privacy@myisp.co.za or phoning 087 123 4567. Please allow up to 30 days for processing as per regulatory statutes.

Data Security and Retention

We follow industry best practices around access controls, backups, encryption, audits, and use monitoring to safeguard personal information. Data is only retained as long as required for legal compliance or fulfilling original processing purposes.

Updates

We reserve the right to amend this privacy policy as needed to remain current with evolving regulations, new technologies, and business practices. Please check back frequently for updates.

Data Subject Access Request Procedures

1. Submitting Requests
   • Individuals may submit data subject access requests to MyISP via email to [privacy@myisp.co.za] or letter addressed to the Information Officer.
   • Requests must include the individual's name, contact details, identification, and relationship with MyISP (customer or employee). Details on the specific data being requested and the format required should also be provided.
2. To comply with POPI, MyISP must verify identities of individuals before fulfilling requests.
   • Customers must provide account numbers, proof of address, contact phone and email.
   • Current and former employees must confirm personnel numbers, badge numbers or other verifiable identifiers.
3. Fulfilling Requests

   Once identities are confirmed, the Information Officer will coordinate fulfilment:

   • Gather access log details, account data, contract records or other information at issue.
   • Redact restricted personal details that cannot be legally disclosed.
   • Provide copies in customer's specified format (digital file, emailed data, print out).
4. Timeframe MyISP aims to fulfil all complete and verified data subject access requests within 30 days in accordance with POPI and guidance from the Information Regulator. Updates will be provided in case of delays.
5. Exceptions MyISP reserves the right to deny access in applicable situations such as:
   • Requests entail unlawful data processing or disclosure in violation of POPI or other laws.
   • Prohibited due to conflicts with South African law enforcement proceedings or court ruling.
   • Impossible or imposes unreasonable resource burdens, which will be justified in writing.