Privacy Policy — Diablo IPTV

1. Who We Are

Diablo IPTV acts as the data controller for the personal data you provide. For any privacy-related inquiries, you can reach us at [email protected] or contact us via WhatsApp at +44 7883 412700.

2. Data We Collect

• Identity & Contact Data: Full name, email address, WhatsApp number, and Telegram username — collected when you register or contact support.
• Financial Data: Payment transactions are securely handled by Stripe and PayPal. We never store your credit/debit card details on our servers.
• Technical Data: IP address, browser type, device model, operating system, and connection logs — gathered automatically for security and performance optimisation.
• Usage Data: Login timestamps, channel and VOD viewing patterns, and server connection history — used to enhance service reliability and personalise your experience.
• Device Identifiers: MAC address for MAG, Formuler, and Dreamlink boxes — stored solely to activate and manage your subscription.
• Communication Data: Records of your interactions with our support team via email, WhatsApp, or Telegram — retained to improve customer service and resolve disputes.

3. How We Use Your Data

• To activate, manage, and renew your Diablo IPTV subscription
• To deliver 24/7 customer support via WhatsApp, Telegram, and email
• To process payments safely and issue digital receipts
• To detect fraud, prevent abuse, and protect against unauthorised access
• To send essential service updates, maintenance alerts, and account notifications
• To optimise streaming quality, server performance, and overall user experience
• To manage your subscription credits and renewal reminders

4. Legal Basis for Processing (UK GDPR)

We process your personal data under the following lawful bases:

• Contract: To fulfil our obligations under your subscription agreement and deliver the IPTV service.
• Legitimate Interest: To maintain service quality, prevent fraud, communicate essential updates, and improve our platform.
• Consent: For marketing communications, promotional offers, and news updates (you may opt out at any time).

5. Cookies and Tracking

We use essential cookies only — these are necessary for login, checkout, and core service functionality. We do not use tracking, analytics, or advertising cookies. Your browsing activity is never shared with third parties for advertising purposes. You can manage cookie preferences in your browser settings at any time.

6. Who We Share Data With

We never sell, rent, or trade your personal data. Limited data is shared only with trusted partners who enable our service:

• Stripe & PayPal — Payment processing (PCI-DSS Level 1 certified). We do not store your card details on our systems.
• Email Service Provider — For sending receipts, service updates, and support communications. All providers are GDPR compliant and located in the UK/EU.
• Hosting Provider — Secure UK and EU data centres that store your data with 24/7 monitoring and encryption.

7. Data Retention

• Account Data: Kept while your subscription is active, plus 12 months after cancellation to facilitate reactivation and history.
• Payment Records: Retained for 6 years to comply with UK tax and accounting requirements under HMRC regulations.
• Usage Logs: Anonymised and retained for up to 30 days for troubleshooting, quality monitoring, and performance analysis.
• Communication History: Retained for 12 months to provide consistent customer support and resolve any disputes.

8. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

• Access: Request a copy of your personal data we hold
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data ("right to be forgotten")
• Objection: Object to processing based on legitimate interest
• Portability: Request your data in a machine-readable format
• Restriction: Request temporary restriction of processing
• Withdraw Consent: Withdraw consent for marketing communications at any time

To exercise any of these rights, email us at [email protected] with your request. We will respond within 30 days as required by UK GDPR. There is no charge for exercising your rights.

9. Data Security

We take data security extremely seriously. All data transmitted between your device and our servers is encrypted using SSL/TLS with 256-bit encryption. Our servers are hosted in secure UK and EU data centres with 24/7 monitoring, firewalls, and intrusion detection systems. Access to personal data is strictly restricted to authorised personnel only, and all staff receive regular data protection training.

10. Children's Privacy

Our service is not directed at children under the age of 18. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected data from a minor, please contact us immediately and we will delete it.

11. International Data Transfers

Your data is stored securely on servers located in the United Kingdom and the European Union. We do not transfer your personal data outside the UK or EU. All our processing partners are GDPR compliant and located within the UK or EU.

12. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. The most current version will always be available at diabloiptvs.store/privacy-policy/. Please check the "Last Updated" date at the top of this page for the latest version. We will notify you of significant changes via email or WhatsApp.

13. Contact Us