Privacy Policy

Last updated: June 2026

1. Introduction

This Privacy Policy describes how the company identified on the Billing page ("Company", "we", "us", "our") collects, uses, and protects your personal data when you use the Simply Proxies service ("Service").

We are committed to protecting your privacy and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Data Controller

The data controller responsible for your personal data is Hunt-Benito Ltd. (registered in Scotland, United Kingdom No. SC728400) with VAT No. GB435392292.

3. What Data We Collect

3.1 Data you provide directly

Data	Purpose	Legal Basis
Email address	Account identification, email verification, support	Contract performance (Art. 6(1)(b) UK GDPR)
Password (hashed)	Account security	Contract performance (Art. 6(1)(b) UK GDPR)
Proxy credential labels	Organising your credentials	Contract performance (Art. 6(1)(b) UK GDPR)

3.2 Data generated by service use

Data	Purpose	Legal Basis
Credit balance and history	Service delivery, billing records	Contract performance (Art. 6(1)(b) UK GDPR)
Proxy credential pairs	Service delivery	Contract performance (Art. 6(1)(b) UK GDPR)
Traffic volume per credential	Usage tracking, credit deduction	Contract performance (Art. 6(1)(b) UK GDPR)

3.3 Data collected automatically

Data	Purpose	Legal Basis
Session cookies	Maintain login state across page loads	Legitimate interest (Art. 6(1)(f) UK GDPR)
Server logs (IP, timestamps)	Security, fraud prevention	Legitimate interest (Art. 6(1)(f) UK GDPR)
Anti-bot challenge (Cloudflare Turnstile)	Confirming a human created the account, preventing automated abuse	Legitimate interest (Art. 6(1)(f) UK GDPR)

3.4 Data processed by third parties

Data	Processor	Purpose
Payment card details	Stripe (PCI Level 1)	Payment processing
Payment transactions	Stripe	Billing and invoicing
Anti-bot challenge token	Cloudflare Turnstile	Confirming a human at account activation (bot/abuse prevention)

We never see, store, or have access to your card details. All payment data is handled directly by Stripe.

4. How We Use Your Data

We use your personal data to:

Provide and maintain the Service
Process payments and manage your credit balance
Send service-related emails (verification, security alerts)
Prevent fraud and abuse
Comply with legal obligations

5. Data Sharing

We do not sell, rent, or trade your personal data.

We share data only with:

Stripe — for payment processing (see Stripe's Privacy Policy)
Cloudflare — for the anti-bot challenge at account activation (see Cloudflare's Privacy Policy)
Law enforcement — when required by law or to protect our rights

6. Data Retention

Data Type	Retention Period
Account data (email, hashed password)	Until account deletion + 30 days
Credit, billing and redemption history	7 years (HMRC requirement for tax records)
Proxy credentials	Until account deletion
Usage history (aggregated daily volume)	24 months
Server / connection logs (raw metadata)	14 days
Session cookies	24 hours (browser-side)
Email verification tokens	Until verified or re-sent

7. Your Rights Under UK GDPR

You have the following rights:

Right	Description
Access	Request a copy of the personal data we hold about you
Rectification	Request correction of inaccurate data
Erasure	Request deletion of your data (subject to legal retention requirements)
Data portability	Receive your data in a structured, machine-readable format
Restriction	Request that we limit how we process your data
Objection	Object to processing based on legitimate interests
Withdraw consent	Withdraw consent where processing is based on consent

To exercise any of these rights, contact us using the details on the Billing page.

8. Data Security

We implement appropriate technical and organisational measures to protect your data:

Passwords: Hashed with industry-standard cryptographic algorithms. Never stored in plain text.
Sessions: Server-side sessions with limited expiry, cryptographically random tokens.
Payments: Handled entirely by Stripe (PCI Level 1 compliant). Card data never touches our servers.
Transport: All connections encrypted via TLS (HTTPS).

9. Cookies

The Service uses a single essential cookie:

sp_session — Maintains your login session. Expires after 24 hours. Essential for the Service to function and cannot be disabled.

We do not use tracking cookies, analytics cookies, or advertising cookies.

Cloudflare Turnstile, used only on the account-activation page to confirm you are human, may set a temporary, privacy-preserving token. It does not track you across websites and is not used for advertising.

10. International Data Transfers

Your data is stored and processed on servers located in the United Kingdom. In the event that data is processed outside the UK, we ensure appropriate safeguards are in place as required by UK GDPR Chapter V.

11. Children's Privacy

The Service is not intended for use by individuals under the age of 18. We do not knowingly collect personal data from children.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

Posting the updated policy with a new "Last updated" date
Sending an email notification for significant changes

13. Contact and Complaints

For privacy-related inquiries or to exercise your data rights:

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Website: ico.org.uk
Phone: 0303 123 1113