We collect only what we need to deliver your subscription and support you. We never sell your data. You have full GDPR rights, and you can contact us at contact@iptvireland.irish or complain to the Irish Data Protection Commission at any time.
1Who We Are (Data Controller)
IPTV Ireland is the data controller responsible for the personal data described in this policy. Our full company details are set out in section 11.
This policy explains what personal data we collect, why we collect it, how long we keep it and what rights you have under the General Data Protection Regulation (EU) 2016/679 («GDPR») and the Irish Data Protection Act 2018.
2What Data We Collect
- Account and order data
- Name, email address, and where you provide it, a phone number. Collected when you place an order or contact support.
- Payment data
- Transaction reference, amount, currency and payment status. We never see or store your full card number. Card details are handled entirely by our payment processor.
- Technical data
- IP address, browser type, device type, operating system, referring page and timestamps. Collected automatically by our servers and analytics.
- Service usage data
- Connection times, number of simultaneous connections and the application used. Processed to operate the service and detect credential sharing.
- Support correspondence
- The content of emails and WhatsApp messages you send us, retained so we can handle your query and any follow-up.
3Why We Process Your Data (Legal Bases)
| Purpose | Legal basis |
|---|---|
| Delivering your subscription and providing access credentials | Performance of a contract (Art. 6(1)(b)) |
| Processing payments and issuing receipts | Performance of a contract (Art. 6(1)(b)) |
| Providing customer support | Performance of a contract (Art. 6(1)(b)) |
| Keeping accounting and tax records | Legal obligation (Art. 6(1)(c)) |
| Preventing fraud and credential sharing | Legitimate interests (Art. 6(1)(f)) |
| Analytics and improving the website | Consent (Art. 6(1)(a)) |
| Marketing emails to existing customers | Consent (Art. 6(1)(a)), withdrawable at any time |
4Who We Share Data With
We do not sell, rent or trade your personal data. We share it only with processors who help us run the service, and only to the extent necessary:
- Payment processors – to take payment and handle refunds and chargebacks.
- Hosting and CDN providers – to host the website and deliver streams.
- Analytics providers – Google Analytics 4, only where you have consented to analytics cookies.
- Communication tools – our email provider and WhatsApp Business, to handle support.
- Professional advisers and authorities – where we are legally required to disclose.
Every processor is bound by a written data processing agreement under Article 28 GDPR.
5International Transfers
Some of our processors are located outside the European Economic Area. Where personal data is transferred outside the EEA, we rely on an adequacy decision of the European Commission, or on Standard Contractual Clauses together with supplementary technical measures such as encryption in transit and at rest.
You may request a copy of the safeguards applied by contacting us.
6How Long We Keep Data
| Data | Retention period |
|---|---|
| Account and subscription data | Duration of the subscription plus 12 months |
| Invoices and accounting records | 6 years (Irish tax law) |
| Support correspondence | 24 months from the last message |
| Server and connection logs | 90 days |
| Analytics data | 14 months |
When a retention period expires, data is deleted or irreversibly anonymised.
7Your Rights Under the GDPR
You have the right to:
- Access – obtain a copy of the personal data we hold about you (Art. 15).
- Rectification – have inaccurate data corrected (Art. 16).
- Erasure – have your data deleted where no legal ground for keeping it remains (Art. 17).
- Restriction – limit how we process your data (Art. 18).
- Portability – receive your data in a structured, machine-readable format (Art. 20).
- Object – object to processing based on legitimate interests, and to direct marketing at any time (Art. 21).
- Withdraw consent – at any time, without affecting processing carried out before withdrawal.
To exercise any right, email contact@iptvireland.irish. We respond within one month, as required by Article 12(3) GDPR. There is no charge unless a request is manifestly unfounded or excessive.
8Right to Lodge a Complaint
9Security
We apply technical and organisational measures appropriate to the risk, including TLS encryption on all connections, encrypted storage of credentials, access control on a need-to-know basis, and regular review of our processors. No system is perfectly secure, but we will notify you and the DPC of any personal data breach that meets the thresholds in Articles 33 and 34 GDPR.
10Cookies
Our use of cookies and similar technologies, and how to change your choices, is described in full in our Cookie Policy.
11Contact and Company Details
For any privacy question or to exercise your rights:
We have not appointed a Data Protection Officer, as we do not meet the criteria in Article 37 GDPR. Privacy queries are handled directly by our management using the contact details above.