Privacy policy

Who we are

SimpliDevice is operated by Simplinet ("we", "us"), a company registered in England and Wales. We are the data controller for the information described in this policy. You can reach us through the contact page.

What we collect and why

Website visitors

We collect the information you give us through the contact form — your name, email address, company, approximate fleet size and message — so that we can reply to you. We do not run advertising trackers on this website.

Account holders

When you create a workspace we collect your name, email address and password (stored only as a one-way hash), your workspace name, and billing details handled by our payment processor. We use these to provide the service, to secure your account (including two-factor authentication where you enable it), to send service emails such as verification, password reset and invitations, and to bill you for paid plans.

Devices managed through the service

The service stores information about the devices enrolled in your workspace — device names, models, operating systems, compliance state, installed and required applications, policy settings and activity — and about the people those devices are assigned to. In this respect you, our customer, are the data controller and we process this data on your instructions as a data processor, solely to provide the service.

Lawful basis

We process personal data to perform our contract with you, to pursue our legitimate interests in operating and securing the service, and to comply with legal obligations. Where we rely on consent — for example for optional marketing email — you can withdraw it at any time.

Where data is stored and how it is protected

The service runs on managed cloud infrastructure. Data is encrypted in transit and at rest; sensitive values such as authentication secrets and stored credentials are additionally encrypted at the application level. Each customer's workspace is isolated from every other at the database level. Backups are taken daily.

Who we share data with

We share data only with the suppliers we need to run the service — cloud hosting, email delivery and payment processing — each under a contract that restricts them to acting on our instructions. We do not sell personal data. We may disclose data where the law requires it.

How long we keep it

Account and workspace data is kept for as long as your account is active and for a short period afterwards to allow recovery, after which it is deleted. Contact-form messages are kept for as long as needed to deal with your enquiry. Audit logs are kept for as long as your workspace exists, because they exist to record who did what.

Your rights

Under UK data protection law you have the right to access the personal data we hold about you, to have it corrected or deleted, to restrict or object to its processing, and to data portability. To exercise any of these, contact us. You also have the right to complain to the Information Commissioner's Office (ico.org.uk).

Cookies

This website sets no cookies. The application sets a single strictly necessary cookie to keep you signed in, and uses your browser's local storage to remember preferences such as which workspace you last viewed.

Changes

We'll post any changes to this policy on this page and update the date above. Material changes affecting account holders will also be announced by email.