Privacy Policy

1. Introduction & Scope

UK4K IPTV (“we”, “us”, “our”) is committed to protecting the privacy of our users (“you”, “your”) in full compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This Privacy Policy explains how we collect, use, store, and safeguard your personal data when you visit our website (uk4kiptv.shop) or use our IPTV middleware platform (the “Service”).

As a SaaS-style middleware provider, we do not host, store, or broadcast media content. Our data processing is limited to account administration, technical service delivery, and customer support communications. Please read this policy carefully to understand our practices regarding your personal data.

2. Data Controller

For the purposes of UK GDPR, the data controller responsible for your personal data is UK4K IPTV. You can contact our Data Protection team at any time via email: [email protected].

3. Information We Collect

We collect only the minimal personal data necessary to deliver a premium, stable streaming middleware experience. We do not engage in excessive data harvesting or sell any personal data to third parties.

3.1 Personal Data You Provide Directly

• Account Registration: email address, chosen username, and password (hashed and salted).
• Billing Information: name, billing address, and payment card details are processed entirely by our PCI-DSS-compliant payment gateways; we never store full card numbers on our own servers.
• Support Communications: any information you choose to share when contacting us via WhatsApp or email, including chat logs for quality assurance.

3.2 Technical Data Collected Automatically

• Connection Logs: IP address, device type, operating system, app version, and connection timestamps – used solely to maintain service quality, enforce single‑line usage policies, and troubleshoot technical issues.
• Usage Diagnostics: anonymised bandwidth metrics and stream uptime statistics. We do not log which specific channels or programmes you watch. Our logging is strictly technical, not content‑based.

4. How We Use Your Information

We process personal data under the following lawful bases (Article 6, UK GDPR):

• Contractual Necessity: to create and manage your account, provide the Service, process payments, and enforce our Terms and Conditions.
• Legitimate Interests: to monitor and improve server performance, protect against fraud, secure our platform, and respond to customer support enquiries.
• Legal Obligation: to comply with UK law, court orders, or valid requests from regulatory authorities.
• Consent: for optional marketing communications. We never send marketing without explicit opt-in consent, and you can withdraw at any time.

In all cases, data usage is strictly limited to the purpose for which it was collected, and we never repurpose your data for unrelated commercial activities.

5. Data Sharing & Disclosure

We do not sell, rent, or trade your personal data. Data is shared only with:

• Payment Processors: Stripe, PayPal, and similar PCI-compliant gateways for payment handling.
• Hosting & Infrastructure Providers: UK-based data centres that power our load-balanced servers.
• Legal Authorities: when required by law, or to protect our rights and prevent fraud.

All third-party processors are bound by strict data processing agreements (DPAs) that ensure compliance with UK GDPR and prohibit independent use of your data.

6. International Data Transfers

Our servers are located within the United Kingdom. In limited cases, support ticket metadata may be processed via EU‑based or UK‑adequacy‑certified sub-processors. We ensure all transfers outside the UK are governed by Standard Contractual Clauses (SCCs) or equivalent approved mechanisms.

7. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes outlined above:

• Account Data: retained while your account is active, plus a 90‑day grace period after cancellation to assist with any post‑service queries.
• Payment Records: kept for 6 years as required by UK tax law (HMRC).
• Technical Logs: automatically purged on a rolling 30‑day basis.
• Support Conversations: archived for 12 months to improve service quality, then anonymised or deleted.

8. Data Security

We implement robust technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include end‑to‑end encryption for account passwords, TLS 1.3 for all data in transit, firewalls, intrusion detection systems, and strict access controls limited to essential personnel. Despite our rigorous efforts, no internet transmission is entirely secure; we encourage you to use strong, unique passwords.

9. Your Data Rights (UK GDPR)

As a data subject under UK law, you have the following rights:

• Right to Access: request a copy of the personal data we hold about you.
• Right to Rectification: correct any inaccurate or incomplete data.
• Right to Erasure: request deletion of your data where there is no overriding lawful reason for retention.
• Right to Restrict Processing: limit how we use your data in certain circumstances.
• Right to Data Portability: receive your data in a structured, machine‑readable format.
• Right to Object: object to processing based on legitimate interests, including profiling (though we conduct no automated profiling).

To exercise any of these rights, email [email protected] with “Data Subject Request” as the subject. We will respond within one calendar month as required. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) if you believe your data rights have been breached.

10. Cookies & Tracking Technologies

Our public website uses only essential, first‑party session cookies for security and functionality (such as login persistence and load balancer affinity). These cookies do not track you across third‑party sites and do not require consent under the UK PECR. We do not deploy any advertising, analytics, or social media tracking pixels. If this policy changes, we will implement a compliant consent management banner.

11. Communication Channels (WhatsApp & Email)

Our customer support is predominantly delivered via email and the WhatsApp messaging platform. When you contact us through WhatsApp, your phone number and chat content are processed by Meta Platforms in accordance with their own privacy policy. We encourage you to review WhatsApp’s privacy practices. We store only the essential conversation logs within our secure help desk system to maintain support continuity.

12. Children’s Privacy

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that a person under 18 has provided us with personal data, we will take immediate steps to delete such information. Parents or guardians who have concerns should contact us at [email protected].

13. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy periodically to reflect changes in legal requirements or our data practices. Material changes will be communicated via email or a prominent notice on our website prior to implementation. The “Last updated” date at the top of this page will always indicate the most recent revision.

14. Contact & Complaints