Privacy Policy — Guru IPTV

1. Who We Are

Guru IPTV is the data controller for your information. For privacy questions, contact us at [email protected] or via WhatsApp: +44 7883 412700.

2. What Data We Collect

• Account Information: Full name, email address, WhatsApp number, Telegram username — provided when you register, subscribe, or contact our support team.
• Payment Information: Processed securely by Stripe and PayPal — we never store your credit or debit card details on our servers. All payment data is encrypted and PCI-DSS compliant.
• Technical Data: IP address, device type, browser information, operating system version — collected automatically for security monitoring, fraud prevention, and service optimisation.
• Service Usage Data: Login timestamps, channel viewing preferences, server connection logs — used to enhance streaming quality, identify issues, and personalise your experience.
• Device Identifiers: MAC address for MAG Box, Formuler, Dreamlink, and other IPTV devices — stored to activate your subscription, link it to your account, and manage multi-device access.
• Communication Records: WhatsApp, Telegram, and email correspondence history — retained to provide consistent customer support, track issue resolution, and improve our service.
• Preferences: Channel favourites, language preferences, and viewing habits — used to tailor content recommendations and improve your user experience.

3. How We Use Your Data

• To activate, manage, and renew your Guru IPTV subscription
• To provide 24/7 customer support via WhatsApp, Telegram, and email
• To process payments securely and send digital invoices and receipts
• To prevent fraud, detect unauthorised access, and protect against abuse
• To send service updates, maintenance notifications, and account alerts
• To improve streaming quality, server performance, and content delivery
• To manage your account credits, referrals, and subscription renewals
• To analyse usage patterns and optimise channel selection
• To send promotional offers, exclusive deals, and news (only with your explicit consent)

4. Legal Basis for Processing (UK GDPR)

We process your personal data under the following lawful bases:

• Contractual Necessity: To fulfill our obligations under your subscription agreement, provide the IPTV service, and manage your account.
• Legitimate Interest: To maintain service quality, prevent fraud, communicate essential updates, improve our platform, and enhance user experience.
• Consent: For marketing communications, promotional offers, and news updates (you may opt out at any time by replying "STOP" or contacting us directly).
• Legal Obligation: To comply with UK tax, accounting, and regulatory requirements under HMRC and UK law.

5. Cookies and Tracking

We use essential cookies only — necessary for login, checkout, account management, and core service functionality. We do not use tracking, analytics, or advertising cookies. Your browsing activity is never shared with third parties for advertising purposes. You can manage cookie preferences in your browser settings at any time. Disabling cookies may affect certain functionality of our website.

6. Who We Share Data With

We never sell, rent, or trade your personal data. Limited data is shared only with trusted partners who enable our service:

• Stripe & PayPal — Payment processing (PCI-DSS Level 1 certified). We do not store your card details on our systems. All payment data is encrypted and processed in compliance with UK GDPR.
• Email Service Provider — For sending receipts, service updates, and support communications. All providers are GDPR compliant and located in the UK/EU.
• Hosting Provider — Secure UK and EU data centres that store your data with 24/7 monitoring, encryption, and robust access controls.
• CDN Provider — Content delivery network to ensure fast and reliable streaming worldwide.

7. Data Retention

• Account Data: Kept while your subscription is active, plus 12 months after cancellation to facilitate reactivation and maintain account history.
• Payment Records: Retained for 6 years to comply with UK tax and accounting requirements under HMRC regulations.
• Usage Logs: Anonymised and retained for up to 30 days for troubleshooting, quality monitoring, and performance analysis.
• Communication History: Retained for 12 months to provide consistent customer support, track issue resolution, and resolve disputes.
• Device Information: Retained for the duration of your subscription to manage device access and prevent unauthorised use.

8. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

• Access: Request a copy of your personal data we hold (Subject Access Request)
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data ("right to be forgotten")
• Objection: Object to processing based on legitimate interest
• Portability: Request your data in a machine-readable format
• Restriction: Request temporary restriction of processing
• Withdraw Consent: Withdraw consent for marketing communications at any time
• Complaint: Lodge a complaint with the Information Commissioner's Office (ICO)

To exercise any of these rights, email us at [email protected] with your request. We will respond within 30 days as required by UK GDPR. There is no charge for exercising your rights.

9. Data Security

We take data security extremely seriously. All data transmitted between your device and our servers is encrypted using SSL/TLS with 256-bit encryption. Our servers are hosted in secure UK and EU data centres with 24/7 monitoring, firewalls, intrusion detection systems, and regular security audits. Access to personal data is strictly restricted to authorised personnel only, and all staff receive regular data protection training. We implement industry-standard security measures to protect against unauthorised access, alteration, disclosure, or destruction of your personal data.

10. Children's Privacy

Our service is not directed at children under the age of 18. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected data from a minor, please contact us immediately and we will delete it promptly. We encourage parents and guardians to monitor their children's online activity.

11. International Data Transfers

Your data is stored securely on servers located in the United Kingdom and the European Union. We do not transfer your personal data outside the UK or EU. All our processing partners are GDPR compliant and located within the UK or EU, ensuring your data remains subject to UK/EU data protection laws.

12. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. The most current version will always be available at guruiptvott.com/privacy-policy/. Please check the "Last Updated" date at the top of this page for the latest version. We will notify you of significant changes via email or WhatsApp. Continued use of our service after changes constitutes acceptance of the updated policy.

13. Contact Us