Privacy Notice
Last updated: 15 May 2026.
The short version
We collect only what we need to bill you and run the service. We do not log your source IP address, DNS queries, the sites you visit, or the content of your traffic. We are a UK company; if law enforcement compels us to produce data, we can only produce data we hold.
Who we are
SIMPLYSIM SOLUTIONS LTD, a company registered in England & Wales, company number 16302568. We are the data controller for the personal data we hold about you. ICO registration number ZB960469. Trading as SimplyRoam VPN.
What we collect
| Data | Why | Retention | Lawful basis |
|---|---|---|---|
| Email and bcrypt password hash | Account login | Until you delete your account, plus 30 days | Contract |
| Stripe customer, subscription, invoice records | Billing and tax compliance | 6 years (HMRC requirement) | Legal obligation |
| Country chosen at connect (no source or destination IPs) | Support and abuse triage | 30 days | Legitimate interests |
| Aggregate per-server bandwidth (no per-user identifiers) | Capacity planning | 180 days | Legitimate interests |
What we never collect
- Your source IP address when you connect to the VPN.
- The IPs, domains, or URLs you visit through the tunnel.
- DNS queries you make through the tunnel.
- Per-user bandwidth at the tunnel layer.
- Traffic content. Ever.
Where your data lives
Account and billing data lives in our MariaDB instance hosted in the UK. Stripe processes payment data under its own privacy policy and the standard EU / UK transfer mechanisms. VPN tunnels terminate on partner infrastructure (currently VPNResellers) in the country you choose to connect from.
UK Investigatory Powers Act 2016
We are a UK telecommunications operator and in principle subject to Technical Capability Notices under the Investigatory Powers Act 2016. As of the date at the top of this notice, we have not received such a notice. If we ever receive one, we will be legally prohibited from disclosing it. If this paragraph disappears from this page, draw your own conclusions.
Your rights
Under UK GDPR you can request access to, correction of, or deletion of the personal data we hold about you. Use our contact form to exercise any of these. You can also complain to the Information Commissioner’s Office at ico.org.uk.
Cookies
We use only essential cookies (a session cookie that keeps you signed in). No analytics cookies, no advertising cookies, no third-party trackers on the marketing site or in the account portal.
Changes to this notice
We email all account holders at least 30 days before any material change to this notice takes effect.
SIMPLYSIM SOLUTIONS LTD · Registered in England & Wales, company number 16302568 · ICO registration ZB960469 · Contact: simplyroam.co.uk/contact