Privacy & Cookies Policy
What personal data we collect, why we collect it, how long we keep it, and the rights you have over it under the GDPR and the Data Protection Act 2018. In plain language, not legal padding.
We do not sell your personal data. We never sell, rent or trade it. It is shared only with the limited processors and authorities described in section 04.
Effective from:
Who is the data controller?
The data controller responsible for your personal data is the operator of this Service. A Data Protection Officer has not been appointed, because the Service does not meet the thresholds under Article 37 GDPR that make one mandatory. All data protection enquiries go through the contact channels on this website.
What personal data do you collect?
Only what is needed to run the Service: who you are, how to reach you, your plan details, the device you watch on, and records of your streams and support messages. We collect no special category data and none from anyone under 18.
| Category | Data elements | When collected |
|---|---|---|
| Identity | First name, last name | At subscription or trial request |
| Contact | Email address, phone number | At subscription or trial request |
| Account | Username, hashed password, subscription status, plan type, activation date, expiry date | At subscription activation |
| Transaction | Payment reference, amount, date, plan purchased | At time of payment |
| Device | Device type, MAC address on smart TV and set-top players, IP address at login | At activation and at each login |
| Usage | Connection timestamps, stream access logs — content accessed and duration | During active service use |
| Communications | The content of support messages you send us | When you contact support |
| Technical | Browser type, operating system, referring URL, pages visited | When you visit this website |
No special category data. We do not collect anything defined as special category under Article 9 GDPR — nothing revealing racial or ethnic origin, political opinions, religious beliefs, health data or biometric data. We do not knowingly collect personal data from anyone under 18.
Why do you process my data, and on what legal basis?
Every purpose below has a lawful basis under Article 6 GDPR. Most of it is contract performance — we cannot deliver the Service without it. Fraud prevention and service quality rest on legitimate interests, and website analytics on consent where required.
| Purpose | Data used | Lawful basis |
|---|---|---|
| Providing and managing the Service | Identity, contact, account, device | Contract — Art. 6(1)(b) |
| Processing payment, preventing duplicate trials | Identity, contact, transaction | Contract — Art. 6(1)(b) |
| Delivering credentials and activation messages | Identity, contact, account | Contract — Art. 6(1)(b) |
| Providing customer support | Identity, contact, account, communications | Contract — Art. 6(1)(b) |
| Detecting and preventing fraud and abuse | Account, device, usage, transaction | Legitimate interests — Art. 6(1)(f) |
| Improving and monitoring service quality | Usage, technical, device | Legitimate interests — Art. 6(1)(f) |
| Service-related messages such as expiry reminders | Identity, contact, account | Legitimate interests — Art. 6(1)(f) |
| Complying with legal obligations | Identity, contact, transaction | Legal obligation — Art. 6(1)(c) |
| Website analytics | Technical, usage | Consent — Art. 6(1)(a) where required |
Where we rely on legitimate interests, we have assessed that our interests do not override your rights and freedoms, taking into account what subscribers reasonably expect. We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects on you.
Who do you share my data with?
A small number of processors who work on our instructions, and competent authorities where the law requires it. We do not sell, rent or trade personal data to anyone, and we do not share it for advertising.
Service providers
A small number of third parties process data on our behalf as processors — message and email delivery, payment processing, and hosting. All are bound by data processing agreements and may only act on our documented instructions, in line with GDPR.
Legal and regulatory disclosure
We may disclose data to data protection regulators, law enforcement, courts or other public bodies where required by law, court order or binding regulatory direction. We will tell you when we are legally permitted to.
Rights holders
Where we determine after investigation that the Service is being used in a way that constitutes or facilitates copyright infringement or other unlawful activity, we may disclose relevant account data to rights holders or their authorised representatives, to the extent required by law.
Business transfers
In a merger, acquisition or sale of substantially all of the business, customer data may transfer to the acquiring entity. We will notify you of any such transfer and of any change to this policy.
International transfers. We aim to store and process personal data inside the European Economic Area. Where a transfer outside the EEA is necessary — for example a provider whose infrastructure sits elsewhere — we put appropriate safeguards in place, including Standard Contractual Clauses approved by the European Commission.
How long do you keep my data?
Only as long as it is needed for the purpose it was collected for, plus any period the law requires. Transaction records are kept longest at seven years for accounting; stream logs are the shortest at ninety days.
| Data category | Kept for | Why |
|---|---|---|
| Identity and contact | Relationship + 3 years | Limitation period for contract claims |
| Transaction | 7 years from the transaction | Revenue and accounting obligations |
| Account credentials | Active subscription + 12 months | Fraud detection and reactivation |
| Usage and access logs | 90 days | Monitoring, fraud detection, disputes |
| Support communications | 3 years from last contact | Support continuity and disputes |
| Website analytics | 26 months | Service improvement and trend analysis |
When data is no longer needed we securely delete or anonymise it. Anonymised data, from which you cannot be identified, may be kept longer for statistical and analytical purposes.
What cookies does this website use?
A cookie is a small text file a website places on your device so it can recognise it, remember preferences and measure use. Strictly necessary cookies keep the site working. Analytics cookies are only set after you consent, and you can change or clear all of them in your browser.
| Cookie | Purpose | Duration | Type |
|---|---|---|---|
| Session cookie | Keeps your session state while browsing | Session | Strictly necessary |
| Cookie consent record | Remembers your accept or decline choice | 12 months | Strictly necessary |
| _ga | Distinguishes unique website visitors | 2 years | Analytics |
| _gid | Shorter-term visitor measurement | 24 hours | Analytics |
| _gat | Controls the request rate to analytics servers | 1 minute | Analytics |
Strictly necessary cookies
These are required for the website to work. They store no personally identifiable information and cannot be turned off through cookie settings where they are essential to operating the site.
Analytics cookies
We may use analytics to understand how visitors use the site — which pages they open, how long they stay, how they move around. Analytics cookies are only placed after consent where consent is required. The information is aggregated and does not identify you personally.
Managing cookies yourself
| Browser | Path |
|---|---|
| Chrome | Settings → Privacy and security → Cookies and other site data |
| Firefox | Settings → Privacy & Security → Cookies and Site Data |
| Safari | Preferences → Privacy → Manage Website Data |
| Edge | Settings → Cookies and site permissions → Cookies and site data |
What are my rights under GDPR?
You have eight rights over the data we hold about you, exercisable through the contact channels on this website. We respond to verified requests within one month, and there is no fee unless a request is manifestly unfounded or excessive.
- Right of accessGet a copy of the personal data we hold about you, with information on how and why we process it.
- Right of rectificationHave inaccurate or incomplete data corrected without undue delay.
- Right of erasureHave your data deleted in certain circumstances, subject to legal and legitimate retention obligations.
- Right to restrict processingAsk us to limit how we process your data in certain circumstances.
- Right to data portabilityWhere processing is by consent or contract and automated, receive your data in a structured, machine-readable format.
- Right to objectObject to processing based on legitimate interests, unless we can show compelling overriding grounds.
- Right to withdraw consentWhere we rely on consent, withdraw it at any time. This does not affect processing carried out before you withdrew.
- Right to lodge a complaintComplain to the Data Protection Commission if you believe your rights have not been respected.
How requests are handled. We respond to verified requests within one month. In complex cases that may be extended by a further two months where GDPR permits. We may verify your identity first. You can complain to the Data Protection Commission at any time — dataprotection.ie.
How is my data protected?
Access controls, encryption in transit, secure storage and regular review of procedures. Passwords are stored hashed and are never readable in plain text, and we do not store full payment card details — card payment processing sits with external providers under their own security standards.
- Access controls limiting who can reach personal data
- Encryption of data in transmission where appropriate
- Secure storage practices for data at rest
- Regular review of security procedures
No method of transmission over the internet or electronic storage is completely secure, and we do not claim otherwise. If you believe your account or your data may have been compromised, contact us through the support channels straight away.
Breach notification. Where a personal data breach is likely to result in a risk to your rights and freedoms, we will notify the supervisory authority within 72 hours of becoming aware of it, where the law requires. Where the risk is high, we will notify affected individuals without undue delay.
Third-party links, under-18s and changes to this policy
This policy covers this website and our Service only. Player apps and any site we link to are operated by other people under their own policies. The Service is for adults over 18, and we update this policy when our practices or the law change.
Third-party links and apps
This website may link to third-party websites, app stores and external services. Their own privacy policies apply to anything you give them, and we are not responsible for their practices, security or content. Any IPTV player application referenced on this site is a third-party app we do not develop, operate or control — its handling of your data is governed by its own policy. See the setup guides for which app applies to your device.
Children's privacy
The Service is intended for adults aged 18 and over, and we do not knowingly collect personal data from anyone younger. If you believe someone under 18 has given us personal data, contact us and we will take appropriate steps to delete it. By subscribing you confirm you are at least 18 — this also appears in our Terms of Service.
Changes to this policy
We may update this policy to reflect changes in our data processing practices, applicable law, the services we provide, or security and operational requirements. When a change is material we update the effective date at the top and, where appropriate, notify active users. Continuing to use the website or the Service after an update means you accept the revised policy. The latest version is always on this page.
Questions about your privacy?
Message us to ask about this policy, to exercise a data protection right, or to raise a concern. General privacy enquiries are answered within 5 business days, formal GDPR requests within one calendar month.
Read this alongside our Terms of Service and Refund Policy. You may lodge a complaint with the Data Protection Commission at any time. This page is general information, not legal advice.