GDPR Compliance

IPTVSelect is committed to protecting your personal data and respecting your privacy rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page provides detailed information about how we collect, use, store, and safeguard your personal information when you use our IPTV subscription service and website.

Data Controller

IPTVSelect is the data controller for the personal data collected through our website and IPTV service. As the data controller, we are responsible for determining how and why your personal data is processed. You can contact us regarding any data protection matters via our contact page at iptvselect.com/contact or through our WhatsApp support line.

What Personal Data We Collect

We collect and process the following categories of personal data:

  • Identity and contact data: Your full name, email address, phone number, and billing address provided during account registration or when contacting our support team
  • Account credentials: Your username, password (stored in encrypted form), and account identifiers such as Xtream Codes and M3U URLs
  • Payment data: Payment card information, billing history, and transaction records. Payment data is processed and stored by our PCI-compliant payment processors; we do not store full card numbers on our own systems
  • Technical data: IP address, device type and model, operating system version, browser type and version, screen resolution, and internet connection speed
  • Usage data: Pages visited on our website, channels watched, streaming duration and quality metrics, EPG interactions, and feature usage patterns
  • Communication data: Records of your interactions with our support team, including WhatsApp conversations, email correspondence, and contact form submissions
  • Cookie data: Essential cookies for website functionality and analytics cookies (with your consent) from Google Analytics and similar services

    • How We Use Your Personal Data

    We process your personal data for the following purposes, each supported by a lawful basis under UK GDPR:

  • Service delivery (contractual necessity): To create and manage your account, authenticate your access to streams, process your subscription payments, and deliver live TV and VOD content to your devices
  • Customer support (legitimate interests): To respond to your enquiries, troubleshoot technical issues, process refund requests, and provide ongoing account management assistance
  • Service improvement (legitimate interests): To analyse streaming performance, identify and fix technical issues, optimise server distribution, and improve our channel lineup and features based on viewing trends
  • Security and fraud prevention (legitimate interests): To detect and prevent unauthorised access, account sharing abuse, fraudulent transactions, and violation of our terms of service
  • Legal compliance (legal obligation): To comply with UK laws and regulations, respond to lawful requests from UK authorities, and maintain records as required by law
  • Marketing (consent): To send promotional communications about offers, new channels, and service updates only where you have provided explicit consent

    • Your Rights Under UK GDPR

    Under UK data protection law, you have the following rights regarding your personal data:

  • Right of access: You may request a copy of the personal data we hold about you, free of charge, within one month of your verified request
  • Right to rectification: You may request correction of any inaccurate or incomplete personal data we hold about you
  • Right to erasure (“right to be forgotten”): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent
  • Right to restrict processing: You may request that we limit the processing of your data in certain circumstances, such as while a correction request is being verified
  • Right to data portability: You may request receipt of your data in a structured, commonly used, machine-readable format and have it transferred to another controller
  • Right to object: You may object to processing based on legitimate interests, including direct marketing, at any time
  • Rights related to automated decision-making: You have the right not to be subject to decisions based solely on automated processing that produce legal effects concerning you

    • Data Retention Periods

    We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected. Specifically: account data is retained for the duration of your active subscription plus 12 months after cancellation or termination; payment records are retained for 6 years to comply with HMRC and UK financial regulations; website analytics data is retained for 26 months; and support communication records are retained for 24 months after the last contact. After these periods, data is securely deleted or anonymised for analytical purposes.

    Third-Party Processors

    We engage trusted third-party service providers who process personal data on our behalf. These include payment processors (for subscription billing), email service providers (for account and support communications), analytics providers (Google Analytics), and cloud infrastructure providers (for streaming servers). All processors are contractually bound to comply with UK GDPR, are subject to data processing agreements that prohibit them from using your data for any purpose other than those we specify, and are required to implement appropriate technical and security measures.

    International Data Transfers

    Your personal data is primarily stored and processed within the United Kingdom and the European Economic Area. Where we transfer data to countries outside the UK, we ensure appropriate safeguards are in place, including UK-approved Standard Contractual Clauses or adequacy decisions issued by the UK Secretary of State. You may request a copy of the relevant safeguards by contacting our support team.

    Data Security Measures

    We implement comprehensive technical and organisational security measures to protect your personal data, including: TLS/SSL encryption for all data in transit between your device and our servers; encryption at rest for stored personal data; access controls restricting data access to authorised personnel on a need-to-know basis; regular security audits and vulnerability assessments; and incident response procedures to handle any data breach in accordance with UK GDPR requirements, including notification to the ICO within 72 hours where required.

    Contacting Us and the ICO

    To exercise any of your data protection rights or if you have questions about this GDPR Compliance statement, please contact us via our website contact page at iptvselect.com/contact or through our WhatsApp support line at +44 7782 259896. We will respond to your request within one month. If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK’s independent data protection authority. You can contact the ICO at ico.org.uk or by calling their helpline at 0303 123 1113.

    Last updated: July 2026