Privacy Policy

1. Who We Are

XtremeIPTV HD ("we," "us," "our") operates the website xtremeiptvhd.com and provides premium IPTV streaming subscription services. For the purposes of UK GDPR and the Data Protection Act 2018, XtremeIPTV HD acts as the data controller for personal information collected through this website and our services.

We are committed to protecting your personal data and processing it in a lawful, fair, and transparent manner in accordance with applicable data protection legislation.

2. Data We Collect

2.1 Information You Provide Directly

• Account Information: Email address and password when creating an account
• Payment Information: Billing details processed securely through our payment providers (we do not store full card numbers)
• Support Communications: Messages, emails, or live chat messages you send to our support team
• Reseller Information: Business name and contact details for reseller accounts

2.2 Information Collected Automatically

• Usage Data: Pages visited, time spent on site, clicks, and navigation paths
• Device Information: Browser type, operating system, screen resolution, and device identifiers
• IP Address: Used for security, fraud prevention, and approximate geographic location
• Connection Logs: Stream connection timestamps and IP addresses for security and account management
• Cookies & Tracking Technologies: As described in our Cookie Policy

2.3 Information We Do Not Collect

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, biometric data, or financial account information beyond what is necessary to process your payment.

3. How We Use Your Data

We use the personal data we collect for the following purposes:

• Service Delivery: To provision, manage, and deliver your IPTV subscription, including generating and sending your M3U credentials
• Payment Processing: To process subscription payments and manage billing
• Account Management: To create and maintain your account, manage renewals, and communicate service updates
• Customer Support: To respond to your enquiries, troubleshoot technical issues, and provide assistance
• Security & Fraud Prevention: To detect, investigate, and prevent fraudulent transactions, unauthorised access, and other security threats
• Service Improvement: To analyse usage patterns and improve our website, features, and content offering
• Legal Compliance: To comply with applicable laws, regulations, and legal proceedings
• Marketing Communications: With your explicit consent, to send promotional offers and service updates (you may unsubscribe at any time)

4. Legal Basis for Processing (GDPR)

Under the UK General Data Protection Regulation (UK GDPR), we process your personal data on the following legal bases:

• Contract Performance (Article 6(1)(b)): Processing necessary to fulfil your subscription agreement with us
• Legitimate Interests (Article 6(1)(f)): For fraud prevention, security monitoring, and service improvement, where these interests are not overridden by your data protection rights
• Legal Obligation (Article 6(1)(c)): Where we are required to process data to comply with applicable law
• Consent (Article 6(1)(a)): For marketing communications and non-essential cookies, where you have given explicit consent

5. Data Sharing & Third Parties

We do not sell, rent, or trade your personal data to third parties for their marketing purposes. We may share your data in the following limited circumstances:

• Payment Processors: Your payment details are shared with authorised payment processors (e.g., Stripe, PayPal) solely to process transactions. These processors are bound by their own privacy policies and data protection obligations.
• Hosting & Infrastructure Providers: Our servers and CDN infrastructure providers may process data as part of service delivery, under strict data processing agreements.
• Analytics Providers: Anonymised and aggregated usage data may be shared with analytics services to help us understand website performance.
• Legal Requirements: We may disclose your data if required to do so by law, court order, or governmental authority, or to protect the rights, property, or safety of XtremeIPTV HD or others.

6. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including for legal, accounting, or reporting obligations. Our standard retention periods are:

• Account Data: Retained for the duration of your subscription plus 2 years thereafter
• Payment Records: Retained for 7 years to comply with UK financial regulations
• Support Communications: Retained for 2 years from the date of last communication
• Connection Logs: Retained for 90 days for security and fraud prevention purposes
• Marketing Consent Records: Retained until you withdraw consent

When data is no longer required, we securely delete or anonymise it in accordance with industry best practices.

7. Your Rights Under GDPR

Under UK GDPR, you have the following rights in relation to your personal data:

• Right of Access: Request a copy of the personal data we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data in certain circumstances
• Right to Restrict Processing: Request that we limit how we process your data in certain circumstances
• Right to Data Portability: Receive your personal data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests or for direct marketing purposes
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent

To exercise any of these rights, please contact us at our support channels. We will respond to all valid requests within 30 days. If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

8. Cookies

We use cookies and similar tracking technologies on our website. For full details of the cookies we use, their purposes, and how to manage your preferences, please refer to our Cookie Policy.

9. Data Security

We implement appropriate technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Our security measures include:

• SSL/TLS encryption for all data transmitted between your browser and our servers
• Encrypted storage of passwords using industry-standard hashing algorithms
• Regular security audits and vulnerability assessments
• Strict access controls limiting data access to authorised personnel only
• HSTS (HTTP Strict Transport Security) enforced across all pages

While we take all reasonable steps to protect your data, no method of electronic transmission or storage is 100% secure. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, we will notify you and the relevant authorities as required by law.

10. International Data Transfers

As a global IPTV service, some of your data may be processed on servers located outside the United Kingdom or European Economic Area (EEA). Where this occurs, we ensure that adequate safeguards are in place in accordance with UK GDPR requirements, such as Standard Contractual Clauses (SCCs) or adequacy decisions recognised by the UK government.

11. Children's Privacy

XtremeIPTV HD services are intended for users aged 18 and over. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that we have inadvertently collected personal data from a minor, we will take immediate steps to delete that information. If you believe we have collected data from a minor, please contact us immediately.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the "Last Updated" date at the top of this page and, where appropriate, notify active subscribers via email.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.

13. Contact & Data Controller

XtremeIPTV HD is the data controller responsible for your personal data. If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Website: xtremeiptvhd.com
• Response Time: We aim to respond within 72 hours for all data-related requests