Privacy Policy

1. Who We Are (Responsible Party)

The Cell C Guy is an authorised Cell C franchisee operating under South African law. We are the Responsible Party as defined in POPIA — meaning we determine the purpose and means of processing your personal information.

2. What Personal Information We Collect

We collect only what is strictly required for RICA SIM registration and to process your payment:

• Full name, email address, mobile number
• Nationality
• Passport number, passport expiry date (or SA ID number)
• South African address (hotel/guesthouse or residential)
• Uploaded passport photo page (image/PDF)
• Uploaded proof of SA address (hotel letter or booking confirmation)
• Payment reference details (processed by PayFast — we do not store card data)
• POPIA consent record (date, time, and purpose consented to)

3. Why We Collect It (Purpose Specification)

Your personal information is collected for the following specific, lawful purposes only:

We will not use your information for direct marketing, profiling, or any purpose other than those listed above without obtaining separate explicit consent.

4. How We Process and Protect Your Information

We take the security of your personal information seriously and apply the following safeguards in line with Section 19 of POPIA:

• Encryption in transit: All data submitted through our checkout is transmitted over HTTPS (TLS 256-bit encryption)
• No server-side storage of documents: Uploaded documents are transmitted directly via encrypted email to our secure inbox and are not stored on our web server
• No browser storage: Files are processed in memory only and are not written to localStorage, sessionStorage, or cookies
• Payment security: Card details are handled exclusively by PayFast (PCI-DSS compliant). We never see or store your card number
• Access control: Access to your personal information is restricted to authorised staff only on a need-to-know basis
• Email security: Internal RICA notifications are sent via Outlook with TLS encryption through EmailJS

5. How Long We Retain Your Information (Retention)

After the applicable retention period, your personal information will be securely deleted or anonymised.

6. Who We Share Your Information With

We do not sell your personal information. We share it only where necessary:

• Cell C (Pty) Ltd — for RICA SIM activation and registration on their network (legally required)
• PayFast (Network) — to process your payment securely (PCI-DSS compliant operator)
• EmailJS — as our email transmission operator (processes data only on our instruction, bound by their data processing agreement)
• Law enforcement / regulators — only if required by a lawful court order or statutory obligation

We do not transfer your personal information outside of South Africa except where the receiving country has equivalent data protection standards (EmailJS is EU/GDPR-compliant).

7. Your Rights as a Data Subject

Under POPIA, you have the following rights. To exercise any of these, contact us at [email protected]:

8. The Information Regulator

If you believe your POPIA rights have been violated, you may contact the Information Regulator of South Africa:

9. Cookies

Our checkout page does not use tracking cookies, advertising pixels, or analytics scripts. The only scripts loaded are Google Fonts (for typography) and EmailJS (for secure email transmission). Neither script sets persistent tracking cookies.

10. Updates to This Policy

We may update this Privacy Policy to reflect changes in law or our practices. The "Last updated" date at the top of this page will always reflect the most recent version. Continued use of our services after an update constitutes acceptance of the revised policy.

11. Contact Us