Privacy policy

This policy explains what personal data British IPTV collects, why, and how you can use your rights under the UK GDPR and the Data Protection Act 2018. Last updated: [to confirm: date].

1. Who is responsible

The controller is [to confirm: legal or trading name], company number [to confirm: company number], at [to confirm: registered or geographic address]. Contact for privacy questions: [to confirm: privacy contact email].

2. What we have, and what we do not

We hold the order data needed to deliver and support your plan: your email address, the plan you bought and its dates, and the messages you send to support [to confirm: also name, WhatsApp number or billing details if held]. As a reseller, British IPTV has no access to what any customer watches on the providers' servers, and this shop does not see which channels or titles you open in a third-party app. The AromaOtt app used with Premium is run by the same owner and has its own privacy policy at aromaott.com/privacy [to confirm: what AromaOtt records about sign-ins and viewing, for how long, and how that is summarised here].

3. Why we use it, and on what basis

Data	Why	Basis
Email, plan, dates	To deliver your log-in details and support the plan	Contract
Messages to support	To answer you and keep a record	Contract; legitimate interests
Payment and tax records	To take payment and meet accounting rules	Contract; legal obligation
Site and cookie data	To run the site and, with consent, measure it	Legitimate interests; consent

[to confirm: the legal bases above, after the owner has confirmed what is actually collected.]

4. Who receives it

• The providers whose service we resell receive what they need to create and run your account [to confirm: exactly what is passed to providers, for example an account name].
• Our payment provider handles payment [to confirm: payment provider and what it holds].
• WhatsApp services carry your messages.
• The AromaOtt app, used with Premium, is run by the same owner [to confirm: what account data is shared with it].
• Advertising and measurement services receive data only if you accept their cookies, as the Cookie policy explains [to confirm: which services, if any].
• Hosting and security services process site data.

We do not sell personal data.

5. Transfers outside the UK

Some of these services are run from outside the UK [to confirm: countries involved and the safeguards used].

6. How long we keep it

[to confirm: retention periods for order data, support messages and payment records.]

7. Your rights

You can ask to see your data, correct it, have it deleted, restrict or object to its use, and receive a copy in a portable form, where the law allows. Ask us using the contact above. If you are not satisfied, you can complain to the Information Commissioner's Office at ico.org.uk.

8. Cookies

See the Cookie policy.