Who is responsible
IPTV Movies is operated by an individual based in Morocco (see our Legal Notice), who is responsible for the personal data described here. For any privacy question or request, contact [email protected].
Our customers are mainly in Europe, the United States, Canada and other international markets. Depending on where you live, data protection laws such as the EU or UK GDPR and Morocco's Law 09-08 on personal data may apply to how we handle your data.
What we collect
We do not use analytics or advertising trackers, and we do not sell your personal data.
- Orders: your name, email address, country, phone number if you give one, any order notes you add (for example a device MAC address or your existing username when renewing), the plans you choose, coupon, prices and the status history of your order.
- Support tickets: your name, email address, subject, category and messages, any images you attach, and the emails exchanged with our support mailbox about your ticket. Images are re-encoded when uploaded, which removes hidden data such as location metadata.
- Ticket access: a random identifier stored in a cookie lets your browser see your tickets. When you verify your email on another device, we send a one-time code or link and store only a scrambled (hashed) version of it.
- Title requests: the title details you enter and your email address.
- Security records: IP address, browser type and time of actions such as orders, ticket submissions and sign-ins, used to protect the site against abuse and to keep an audit trail.
- Basket: the plans in your basket are stored only in your own browser until you order.
Why we use it
Where data protection laws such as the GDPR apply, the legal basis for each use is shown in brackets above.
- To process your order, send payment instructions, activate your subscription and send your access details (necessary to perform our contract with you).
- To answer your support requests and title requests, by email and in your ticket (contract, and our legitimate interest in helping our customers).
- To keep the website and service secure, prevent fraud and abuse and limit repeated requests (legitimate interest).
- To keep order and payment records that the law requires us to keep (legal obligation).
Who processes it for us
If you contact us on Telegram, Telegram also processes your messages under its own privacy policy. These providers may only use your data to provide their service to us.
- Hostinger: hosting of the website and its server.
- Neon: our database, hosted on Amazon Web Services in Frankfurt, Germany (EU).
- Zoho Mail: our email service, used to send and receive order and support emails.
- Cloudflare: network and security services in front of the website, which handle every request to it.
- The payment provider named in your payment instructions processes your payment; we do not receive or store your card details.
International transfers
IPTV Movies is operated from Morocco, so your data is accessed from there to handle your orders and support requests. Our database itself is hosted in the EU (Frankfurt, Germany).
Some of these providers, such as Zoho and Cloudflare, may process data outside your country, including in the United States. Where the law requires it, transfers rely on the safeguards these providers offer for international data transfers, such as standard contractual clauses.
How long we keep it
This is how long your data is kept today. We will update this section when we set fixed retention periods for each kind of record. If you ask us to delete your data, we delete or anonymise what we can and tell you what we have to keep and why.
- Email verification codes and links expire after 15 minutes and can be used only once. Staff password reset links expire after 30 minutes.
- The ticket access cookie lasts one year; staff sign-in sessions last 30 days.
- Orders and your customer details, support tickets with their messages and images, title requests, and our log of the emails we send you are kept in our database. There is currently no automatic deletion: they stay until we delete them, for example when you ask us to, except records the law requires us to keep.
- Emails you exchange with our support address also stay in our Zoho mailbox until they are deleted.
- Security records (IP address, browser and time of actions) are kept in an audit trail that is designed not to be altered, and the counters that limit repeated attempts keep the last IP address or email address used.
Your rights
Depending on the law that applies to you, you can ask to access the personal data we hold about you, correct it, delete it, restrict or object to its use, or receive a copy in a portable format. You can make a request at any time by email to [email protected]. We may ask you to confirm you control the email address concerned before we act on a request.
You also have the right to complain to the data protection authority of the country where you live or work.
Security
Connections to the website are encrypted (HTTPS). Staff passwords are stored with a strong one-way hash, verification codes and access tokens are stored only in hashed form, staff access is limited by role, and important actions are logged. No system is perfectly secure: if you think your data is at risk, contact us immediately.
Children
Our services are intended for adults and we do not knowingly collect data from children.
Changes
We will update this policy when the way we use personal data changes. The date of the latest update is shown at the top of this page.