One Mobile Networks (Pty) Ltd (Registration: 2015/274251/07) ("we", "us", "our") is committed to protecting your personal information in accordance with the Protection of Personal Information Act 4 of 2013 (POPIA) and the Electronic Communications and Transactions Act 25 of 2002. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our services or interact with our website.
1. Information We Collect
We may collect the following categories of personal information:
1.1 Information You Provide
- Contact details: name, email address, telephone number, physical address
- Company or business information: company name, registration number, trading address
- Identity verification documents where required for regulatory compliance
- Payment and billing information for service provisioning
- Communications and correspondence with our support or sales teams
1.2 Information Collected Automatically
- Call detail records (CDR): calling and called numbers, duration, timestamps, and routing data for VoIP, Hosted PBX, Wholesale Voice, and Call Centre services
- Call recordings where you have consented or where legally permitted for quality assurance, training, or dispute resolution
- SMS delivery and content logs for SMS services
- Technical data: IP addresses, device identifiers, browser type, and usage patterns when you access our websites or portals
- Cookies and similar technologies as described in Section 7
1.3 Information from Third Parties
- Credit or fraud checks from credit bureaux where you have consented
- Carrier or interconnect partner data necessary for service delivery
2. Purpose of Processing
We process your personal information for the following purposes:
- Providing and maintaining our telecoms services (VoIP, Hosted PBX, Wholesale Voice, SMS, Call Centre Solutions including Vicidial, and Cloud Infrastructure)
- Billing, invoicing, and payment processing
- Customer support, troubleshooting, and service improvement
- Compliance with legal and regulatory obligations, including ICASA and POPIA
- Fraud prevention and network security
- Quality assurance, training, and dispute resolution (where call recording applies)
- Marketing communications where you have opted in (you may opt out at any time)
- Website functionality and user experience improvement
3. Legal Basis for Processing
We process your personal information on one or more of the following legal bases under POPIA:
- Consent: Where you have given clear consent for specific processing
- Contract: Processing necessary for the performance of a contract with you
- Legal obligation: Processing required to comply with applicable law (e.g. ICASA, RICA, tax regulations)
- Legitimate interests: Processing necessary for our legitimate business interests, such as fraud prevention, network security, and service improvement, where these do not override your rights
4. Data Retention
We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Retention periods include:
- Account and contact information: for the duration of the business relationship and a reasonable period thereafter for legal and audit purposes
- Call detail records: as required by ICASA and the Electronic Communications Act (typically up to 3 years)
- Call recordings: as specified in your service agreement or until consent is withdrawn, subject to legal retention requirements
- Billing and payment records: as required by tax and company law (typically 5 years)
- Marketing preferences: until you withdraw consent or object
- Website and technical logs: as necessary for security and troubleshooting (typically up to 12 months)
After the retention period, we securely delete or anonymise your personal information.
5. Third-Party Sharing
We may share your personal information with the following categories of recipients, only where necessary and in accordance with POPIA:
- Carriers and interconnect partners: For voice and SMS routing and termination
- Payment processors: For secure payment handling
- Cloud and infrastructure providers: For hosting our services in ISO-certified datacentres
- Regulatory authorities: Where required by law (e.g. ICASA, law enforcement)
- Professional advisers: Lawyers, auditors, or insurers where necessary
We do not sell your personal information. We require all third parties to process your information in accordance with applicable data protection laws and under appropriate agreements.
6. Your Rights as a Data Subject
Under POPIA, you have the following rights regarding your personal information:
- Right of access: You may request confirmation of whether we hold your personal information and a copy of that information
- Right to correction: You may request correction of inaccurate or incomplete information
- Right to deletion: You may request deletion of your personal information where we have no lawful basis to retain it
- Right to object: You may object to processing based on legitimate interests or for direct marketing
- Right to withdraw consent: Where processing is based on consent, you may withdraw consent at any time
- Right to lodge a complaint: You may lodge a complaint with the Information Regulator of South Africa
To exercise any of these rights, please contact our Information Officer using the details in Section 10. We will respond within a reasonable period as required by POPIA.
7. Cookies and Similar Technologies
Our websites may use cookies and similar technologies to:
- Enable essential website functionality (e.g. session management, security)
- Remember your preferences and settings
- Analyse website usage and improve our services
You may configure your browser to refuse or delete cookies; however, some features may not function correctly. We do not use cookies for advertising or tracking beyond our own sites.
8. Security Measures
We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction, including:
- Encryption of data in transit (TLS/SSL) and at rest where applicable
- Access controls and authentication for systems handling personal information
- Secure datacentre facilities with physical and logical security controls
- Regular security assessments and monitoring
- Staff training on data protection and confidentiality
Despite these measures, no method of transmission over the Internet is completely secure. We encourage you to use strong passwords and protect your account credentials.
9. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements. We will notify you of material changes by posting the updated policy on our website and updating the effective date. For significant changes, we may also notify you by email or through your account portal. Your continued use of our services after such changes constitutes acceptance of the updated policy.
10. Contact and Information Officer
For any questions about this Privacy Policy, to exercise your data subject rights, or to report a concern, please contact our Information Officer:
One Mobile Networks (Pty) Ltd
Information Officer: info@omnetworks.co.za
Address: 377 Rivonia Blvd, Rivonia, 2194
Phone: 087 822 2434
Website: www.omnetworks.co.za
Company Registration: 2015/274251/07
ICASA ECNS Licence: 0796/CECNS/MAR/2017
You may also lodge a complaint with the Information Regulator of South Africa: www.justice.gov.za/inforeg