Privacy Policy.

1. Introduction & Scope

This Privacy Policy applies to all individuals and entities who access our website (afrinet.co.za), register as reseller partners, utilize our API or WHMCS modules, or whose information is processed in connection with provisioning wholesale connectivity (Fibre, LTE, 5G), domain names, and cloud web hosting services.

Afrinet processes personal information in accordance with the Protection of Personal Information Act No. 4 of 2013 ("POPIA"), the Electronic Communications and Transactions Act No. 25 of 2002 ("ECTA"), and Regulation of Interception of Communications and Provision of Communication-Related Information Act ("RICA").

2. Information We Collect

Depending on your interaction with Afrinet, we collect and process the following categories of personal information:

• Reseller Account & Identification Data: Full name, company/trading name, registration number, VAT number, ID/passport number of designated representatives, email address, phone number, and physical billing address.
• Financial & Payment Details: Bank account verification details, payment transaction history, and account balances for processing wholesale service invoicing. (We do not store complete credit card details; payments are handled via PCI-DSS compliant payment gateways).
• Telecommunications & RICA Information: Where required by South African law for SIM provisioning, LTE/5G activations, or Fibre installations, we collect identity verification documents, proof of residential/business address, and geographic coordinate data.
• Domain Registration (WHOIS) Information: Registrant name, organization, administrative and technical contact details, email addresses, and DNS configurations required by domain registries (such as ZACR for .co.za and ICANN accredited registries).
• Hosting & Server Metadata: IP addresses, server logs, access timestamps, API usage metrics, and resource utilization records necessary for security monitoring and operational stability.

3. Legal Grounds and Purpose of Processing

We process your personal information strictly for legitimate commercial and regulatory purposes, including:

• Providing, operating, and provisioning wholesale telecommunications, hosting, and domain infrastructure.
• Verifying reseller partner eligibility and processing onboarding applications.
• Managing monthly wholesale billing, accounts receivable, and automated suspension workflows.
• Complying with statutory obligations under South African telecommunications laws, RICA, tax legislation, and company laws.
• Maintaining network security, detecting fraud, preventing unauthorized API calls, and mitigating DDoS attacks.
• Providing first-line technical support to registered reseller partners.

4. Reseller vs. End-Customer Data (Operator Role)

In the context of the Afrinet Reseller Platform:

• Reseller Data: Afrinet acts as the Responsible Party (Data Controller) regarding our direct contractual relationship with approved Reseller Partners.
• End-Customer Data: When a Reseller enters end-customer details into our portal or API for service provisioning (such as Fibre line addresses or SIM allocations), the Reseller acts as the Responsible Party and Afrinet acts as an Operator (Data Processor) processing data solely on the Reseller's instruction to deliver the requested connectivity or domain service.
• Resellers warrant that they have secured all necessary consents and lawful bases from their end customers in compliance with POPIA prior to submitting their details for provisioning.

5. Disclosure of Information to Third Parties

Afrinet does not sell, rent, or trade your personal information. We disclose data solely to the following trusted third parties under strict confidentiality and security agreements:

• Infrastructure Carrier Partners: Licensed network operators (including Openserve, MetroFibre, Vumatel, MTN, Vodacom, and Telkom) to complete line installations, fiber feasibility assessments, and SIM provisioning.
• Domain Registries & Registrars: The .ZA Central Registry (ZACR) and accredited registrar partners for registering, transferring, and renewing top-level domain names.
• Cloud Data Centers & Financial Gateways: Secure Tier-3/Tier-4 South African hosting facilities and verified banking/payment processors.
• Regulatory & Law Enforcement Authorities: When compelled by subpoena, court order, or applicable South African legislation.

6. Data Security & Storage

We implement robust technical and organizational security controls to safeguard personal information against loss, unauthorized access, destruction, or alteration. These measures include:

• 256-bit SSL/TLS encryption across all web traffic, reseller portal sessions, and API endpoints.
• Role-based access controls and multi-factor authentication for administrative infrastructure.
• Continuous vulnerability monitoring, automated intrusion prevention, and firewall protection.
• Data hosted in secure South African data centers located in Johannesburg and Cape Town.

7. Data Retention

We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, or as required by South African statutory laws (including the Companies Act, Value Added Tax Act, and RICA), which typically mandate retention of commercial records for up to 5 to 7 years following account closure.

8. Your Rights Under POPIA

As a data subject under South African law, you have the following rights:

• Right to Access: Request confirmation of whether we hold personal information about you and obtain a copy of such data.
• Right to Rectification: Request correction or updating of inaccurate, incomplete, or outdated information.
• Right to Erasure / Deletion: Request the deletion of personal information where we no longer have a lawful ground or statutory duty to retain it.
• Right to Object: Object on reasonable grounds to the processing of personal information.
• Right to Lodge a Complaint: You have the right to submit a complaint to the South African Information Regulator if you believe your rights have been infringed.

9. Cookies & Web Analytics

Our website utilizes essential session cookies to maintain user logins, secure form submissions, and ensure smooth portal navigation. We do not use intrusive third-party cross-site tracking scripts. You can configure your browser to reject cookies, though certain portal features may function with reduced capabilities.

10. Contacting Our Information Officer

If you have any questions regarding this Privacy Policy, wish to exercise your data subject rights, or require further information regarding our data protection standards, please contact our compliance desk: