Privacy Policy

1. Who We Are

Kemo IPTV is the data controller for your personal information. If you have any questions about how we handle your data, you can reach our privacy team at:

2. What Data We Collect

To provide you with our IPTV services and ensure a smooth experience, we may collect the following categories of personal data:

• Account Information: Full name, email address, phone number (including WhatsApp), and country of residence.
• Payment Data: All payment transactions are processed securely via Stripe, PayPal, or other PCI-compliant gateways. We never store your full card details on our servers.
• Technical Data: IP address, browser type, device information, and operating system – collected to optimise your viewing experience and maintain server security.
• Usage Data: Subscription activation timestamps, login activity, connection logs, and service quality metrics to ensure reliable streaming.
• Communication Data: Any correspondence you send us via email, WhatsApp, or support tickets.

3. How We Use Your Data

Your personal data is used for the following legitimate purposes:

• Service Delivery: To activate, manage, and renew your IPTV subscription.
• Customer Support: To provide 24/7 technical assistance and respond to your queries.
• Payment Processing: To handle transactions, issue invoices, and send payment confirmations.
• Security & Fraud Prevention: To protect our servers, detect unauthorised access, and prevent abuse.
• Service Updates: To send you important announcements about your subscription, maintenance, or new features (you may opt out of non-essential updates at any time).
• Improvement & Analytics: To analyse usage patterns and enhance our service quality.

4. Legal Basis for Processing

Under the UK GDPR, we process your personal data on the following legal grounds:

• Contractual Necessity: To fulfil our agreement with you when you purchase a subscription.
• Legitimate Interests: To maintain security, prevent fraud, and improve our services – always balanced against your privacy rights.
• Consent: For marketing communications, where we will ask for your explicit consent before sending promotional materials.
• Legal Obligation: To comply with tax, anti-money laundering, and other regulatory requirements.

5. Cookies & Tracking

We use only essential cookies to facilitate login, session management, and checkout functionality. These cookies are strictly necessary for the operation of our website and do not require your consent under UK GDPR regulations.

We do not use tracking cookies, advertising cookies, or third-party analytics that would require your explicit opt-in. Your browsing behaviour is not profiled or shared with advertisers.

6. Who We Share Data With

We never sell, rent, or trade your personal data to third parties for marketing purposes. We may share your data only with the following trusted service providers, all of whom are fully GDPR-compliant:

• Payment Processors: Stripe, PayPal, and other PCI-DSS compliant gateways to handle transactions securely.
• Email Service Providers: To send you order confirmations, receipts, and important service updates.
• Hosting & Server Providers: To deliver our IPTV streams and maintain our infrastructure.
• Support Platforms: To manage customer enquiries and ticket requests.

All third-party processors are bound by strict data protection agreements and are prohibited from using your data for any purpose other than the services they provide to us.

7. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, and reporting requirements:

• Account Data: Retained during your active subscription period and for 12 months after cancellation, in case of renewal or reactivation.
• Payment Records: Retained for 6 years to comply with UK tax and accounting regulations.
• Support Tickets & Correspondence: Retained for 3 years to maintain service history.
• Technical Logs: Retained for 90 days for security and troubleshooting purposes.

After the retention period expires, your data will be securely deleted or anonymised.

8. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Correct any inaccurate or incomplete data.
• Right to Erasure: Request deletion of your data (subject to legal obligations).
• Right to Object: Object to processing based on legitimate interests.
• Right to Data Portability: Request a machine-readable copy of your data.
• Right to Withdraw Consent: Withdraw consent for marketing communications at any time.
• Right to Lodge a Complaint: File a complaint with the UK Information Commissioner's Office (ICO) if you believe your rights have been violated.

To exercise any of these rights, please contact us at contact@kemoiptvott.com. We will respond to your request within 30 days as required by law.

9. Data Security

We take data security seriously and implement industry-standard measures to protect your information:

• Encryption: All data transmitted between your browser and our servers is secured with SSL/TLS encryption.
• Secure Servers: Our infrastructure is hosted on UK and EU-based servers with robust firewalls and intrusion detection systems.
• Access Controls: Access to personal data is restricted to authorised personnel only, on a need-to-know basis.
• Regular Audits: We conduct periodic security reviews to identify and address vulnerabilities.
• Data Minimisation: We collect only the data necessary to provide our services.

10. Children's Privacy

Our services are not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If you are a parent or guardian and believe your child has provided us with personal data, please contact us immediately, and we will take steps to remove that information.

11. International Data Transfers

While we primarily operate within the UK and EU, some of our service providers may process data in countries outside the UK/EEA. In such cases, we ensure that:

• Transfers are made to countries with an adequate level of protection as determined by the UK GDPR.
• Standard Contractual Clauses (SCCs) are in place with our third-party processors.
• All data transfers comply with UK data protection laws.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. We will always indicate the "Last Updated" date at the top of this page. We encourage you to review this policy periodically.

If we make significant changes, we will notify you via email or through a prominent notice on our website.

13. Contact Us