Privacy Policy - Simplicity IT

Effective Date: October 3rd, 2025

At Simplicity IT Inc. (“Simplicity IT,” “we,” “our,” or “us”), your privacy and trust are our top priorities.

Whether you engage with us through our website, Microsoft Marketplace offerings, or paid campaigns, we are committed to safeguarding your personal and business information while ensuring compliance with global data protection laws.

1. Information We Collect

We may collect:

Contact information (name, email, phone, company).
Business details (Microsoft tenant ID, subscription preferences).
Payment & billing information (processed securely via Microsoft Marketplace or trusted payment providers).
Usage & security data (logs, telemetry, or activity data for SOC/Sentinel services).
Compliance data (HIPAA, SOX, FINRA, GDPR), only where required by contract.

We do not sell your personal information.

2. Why We Collect Your Data

We use your data to:

Deliver and support IT, cloud, and cybersecurity solutions.
Ensure compliance with applicable laws and standards.
Improve product security, performance, and user experience.
Communicate with you regarding updates, renewals, or campaigns you’ve opted into.
Provide billing and subscription management.

3. Marketplace & Service Compliance

Our Microsoft Marketplace solutions follow Microsoft’s Data Protection Addendum (DPA) and usage policies.
Deliverables are licensed for internal business use; resale, redistribution, or unauthorized use is not permitted.
By purchasing via Microsoft Marketplace, you agree to both Microsoft’s and Simplicity IT’s terms.

4. Payments, Cancellations & Refunds

Payments are processed through Microsoft or agreed contracts.
Cancellations must be submitted in writing; refunds (if applicable) follow Marketplace or contract terms.
Subscription-based services (e.g., Managed SOC) may have minimum billing cycles.

5. Your Privacy Rights

For EU/UK (GDPR): You may request access, correction, deletion, restriction, portability, or objection to data processing.
For California (CCPA/CPRA): You may request to know, delete, or opt out of sharing personal data. We do not sell personal data.
For Healthcare & Financial Clients: We align with HIPAA, SOX, and FINRA and will process data per industry requirements.

6. Data Protection & Security

We use strict security measures:

Encryption of data in transit and at rest.
Access controls & MFA for all systems.
24/7 monitoring for threats and incidents.
Compliance frameworks: ISO 27001, NIST CSF, HIPAA, GDPR.

If required by law (e.g., GDPR 72-hour rule), we will notify you promptly in case of a data breach.

7. Data Transfers & Retention

Data may be processed in the U.S. or other Microsoft data center regions.
EU/UK data transfers rely on Standard Contractual Clauses (SCCs) and Microsoft’s EU Data Boundary commitments.
Retention depends on legal/contractual requirements (typically 3–7 years).