Privacy Policy
Last updated: 20 July 2026
1. Who is responsible for your information
EnergyOn South Africa Pty Ltd ("EnergyOn", "we") is the responsible party under the Protection of Personal Information Act, 2013 ("POPIA") for personal information processed through the EnergyOn Sim websites and application. Contact our Information Officer at hello [at] energyon [dot] co [dot] za or +27 (0)10 596 1234.
2. What we collect
- Account information — your name, work email address, password (stored hashed), company/workspace name, role, and optional phone number.
- Billing information — plan, billing interval, invoices, and payment references. Card details are captured directly on our payment provider's secure pages; we store payment tokens only, never card numbers.
- Customer project data — the content you upload to run analyses: demand profiles, tariffs, site details and, where you include it, personal information about your customers. For that content you are the responsible party and we act as your operator/processor, handling it only on your instructions to provide the Service.
- Usage and technical data — log data (IP address, request identifiers, timestamps), device/browser information and in-app events used for security, quota metering and product improvement.
- Communications — messages you send via our contact form, live chat (provided by tawk.to), email, and Professional-Demo requests.
3. Why we process it (purposes and lawful basis)
- To create and administer your account and workspace, and deliver the Service (performance of a contract).
- To verify your email address, secure the platform, prevent abuse and enforce plan limits (legitimate interests / contract).
- To bill subscriptions, issue invoices and comply with tax and accounting law (contract / legal obligation).
- To respond to enquiries, demo requests and support (contract / consent).
- To send service notices (verification, billing, trial and account emails). Marketing communications, if any, are sent only with an opt-out and in accordance with POPIA and applicable law.
4. Who we share it with
We do not sell personal information. We share it only with service providers who process it on our behalf under appropriate safeguards:
- Hosting and infrastructure providers (application, database and file storage);
- Email delivery providers (verification, billing and account emails);
- Our payment gateway (card tokenisation and payment processing);
- Live-chat provider (tawk.to) when you use the chat widget;
- Professional advisers and authorities where required by law.
Some providers may store information outside South Africa; where that happens we ensure the recipient is subject to a law, binding corporate rules or a contract providing an adequate level of protection as required by section 72 of POPIA.
5. Security
We apply appropriate, generally accepted technical and organisational measures: encrypted transport (HTTPS), hashed passwords, httpOnly session cookies, role-based access, tenant isolation, audit logging, and the principle of least privilege. No system is perfectly secure; notify us immediately of any suspected compromise. Where a data breach occurs that is notifiable under POPIA, we will notify the Information Regulator and affected data subjects as required.
6. Retention
We keep account and workspace data for as long as your account is active. After account closure we retain data only as long as needed for lawful purposes (for example financial records retained per tax law), after which it is deleted or de-identified in the ordinary course of operations. You may request export or deletion at any time (section 7).
7. Your rights under POPIA
- Request access to the personal information we hold about you;
- Request correction or deletion of inaccurate, outdated or unlawfully held information;
- Object to processing based on legitimate interests, and opt out of direct marketing;
- Withdraw consent where processing relies on consent;
- Complain to the Information Regulator (South Africa): inforegulator.org.za · complaints.IR [at] inforegulator [dot] org [dot] za.
To exercise any right, email hello [at] energyon [dot] co [dot] za. See also our PAIA / POPIA page for formal access requests.
8. Cookies
The application uses strictly necessary cookies only: an httpOnly session cookie and a CSRF token that keep you signed in securely. The marketing site sets no tracking cookies of its own; the optional live-chat widget (tawk.to) sets its own cookies when loaded, governed by its provider's policy.
9. Children
The Service is a business tool and is not directed at children under 18. We do not knowingly process children's personal information.
10. Changes to this policy
We may update this policy from time to time. Material changes will be announced via the Service or email before they take effect; the "Last updated" date above always reflects the current version.
11. Contact
EnergyOn South Africa Pty Ltd · Information Officer · hello [at] energyon [dot] co [dot] za · +27 (0)10 596 1234