Who is responsible
The operator of IPTV Movies (see our Legal Notice) is responsible for the personal data described here. For any privacy question or request, contact [email protected].
What we collect
We do not use analytics or advertising trackers, and we do not sell your personal data.
- Orders: your name, email address, country, phone number if you give one, any order notes you add (for example a device MAC address or your existing username when renewing), the plans you choose, coupon, prices and the status history of your order.
- Support tickets: your name, email address, subject, category and messages, any images you attach, and the emails exchanged with our support mailbox about your ticket. Images are re-encoded when uploaded, which removes hidden data such as location metadata.
- Ticket access: a random identifier stored in a cookie lets your browser see your tickets. When you verify your email on another device, we send a one-time code or link and store only a scrambled (hashed) version of it.
- Title requests: the title details you enter and your email address.
- Security records: IP address, browser type and time of actions such as orders, ticket submissions and sign-ins, used to protect the site against abuse and to keep an audit trail.
- Basket: the plans in your basket are stored only in your own browser until you order.
Why we use it
Where data protection laws such as the GDPR apply, the legal basis for each use is shown in brackets above.
- To process your order, send payment instructions, activate your subscription and send your access details (necessary to perform our contract with you).
- To answer your support requests and title requests, by email and in your ticket (contract, and our legitimate interest in helping our customers).
- To keep the website and service secure, prevent fraud and abuse and limit repeated requests (legitimate interest).
- To keep order and payment records that the law requires us to keep (legal obligation).
Who processes it for us
If you contact us on Telegram, Telegram also processes your messages under its own privacy policy. These providers may only use your data to provide their service to us.
- Hostinger: hosting of the website and its server.
- Neon: our database, hosted on Amazon Web Services in Frankfurt, Germany (EU).
- Zoho Mail: our email service, used to send and receive order and support emails.
- Cloudflare: network and security services in front of the website, which handle every request to it.
- The payment provider named in your payment instructions processes your payment; we do not receive or store your card details.
International transfers
Some of these providers, such as Zoho and Cloudflare, may process data outside your country, including in the United States. Where the law requires it, transfers rely on the safeguards these providers offer for international data transfers, such as standard contractual clauses.
How long we keep it
- Email verification codes and links expire after 15 minutes and can be used once.
- The ticket access cookie lasts one year; staff sign-in sessions last 30 days.
- Orders, tickets and their emails are kept while they are useful to deliver and support your subscription, and order records for as long as accounting and tax law requires. We then delete or anonymise them.
Your rights
Depending on the law that applies to you, you can ask to access the personal data we hold about you, correct it, delete it, restrict or object to its use, or receive a copy in a portable format. You can make a request at any time by email to [email protected]. We may ask you to confirm you control the email address concerned before we act on a request.
You also have the right to complain to the data protection authority of the country where you live or work.
Security
Connections to the website are encrypted (HTTPS). Staff passwords are stored with a strong one-way hash, verification codes and access tokens are stored only in hashed form, staff access is limited by role, and important actions are logged. No system is perfectly secure: if you think your data is at risk, contact us immediately.
Children
Our services are intended for adults and we do not knowingly collect data from children.
Changes
We will update this policy when the way we use personal data changes. The date of the latest update is shown at the top of this page.