Privacy Policy

Smooth Stream ("we", "us", "our") operates the website https://smoothstream.tv and provides IPTV subscription services in the United Kingdom. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or purchase our services.

For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, Smooth Stream is the data controller. If you have any questions about this policy, please contact us via WhatsApp at +44 7518 801331 or by email at privacy@smoothstream.tv.

We may collect the following categories of personal information:

Information you provide directly:
- Name and contact details (email address, phone number)
- Payment information (processed securely by third-party payment providers; we do not store full card details)
- Communications you send us via WhatsApp, email, or contact forms
- Account credentials (username and encrypted password)

Information collected automatically:
- IP address and approximate geographical location (country/region)
- Browser type, version, and operating system
- Pages visited, time spent, and referring URLs
- Device identifiers and session data

Information from third parties:
- We may receive information from payment processors (e.g., transaction confirmations) and analytics providers to improve our service.

We process your personal data for the following purposes and on the following legal bases:

- To provide and manage your subscription (Contract performance) — setting up accounts, activating services, processing renewals
- To process payments (Contract performance) — handling transactions via secure payment processors
- To provide customer support (Contract performance / Legitimate interests) — responding to queries, providing technical assistance
- To send service communications (Contract performance) — sending order confirmations, service updates, renewal reminders
- To improve our service (Legitimate interests) — analysing usage patterns, fixing bugs, enhancing performance
- To comply with legal obligations (Legal obligation) — maintaining records required by law, responding to lawful requests
- To send marketing communications (Consent) — only where you have opted in to receive promotional emails or messages

We do not sell, rent, or trade your personal information to third parties for their marketing purposes. We may share your information with:

- Payment processors (e.g., Stripe, PayPal) — to securely process transactions. These providers are bound by their own privacy policies and PCI-DSS compliance obligations.
- Hosting and infrastructure providers — who store data on our behalf under strict data processing agreements.
- Analytics providers (e.g., Google Analytics) — to understand website usage. Analytics data is aggregated and anonymised where possible.
- Legal and regulatory authorities — where required by law, court order, or governmental authority in the UK.

All third-party processors are required to handle your data in accordance with UK GDPR and are contractually bound to protect it.

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including:

- Account data — retained for the duration of your subscription plus 2 years thereafter for support and legal purposes
- Payment records — retained for 7 years as required by UK tax and accounting law
- Support communications — retained for 3 years to provide consistent support
- Marketing preferences — retained until you withdraw consent or request deletion

When data is no longer required, it is securely deleted or anonymised.

Our website uses cookies and similar tracking technologies to enhance your browsing experience. We use:

- Essential cookies — required for the website to function correctly (e.g., session management, security tokens). These cannot be disabled.
- Analytics cookies — help us understand how visitors interact with our site (e.g., Google Analytics). You may opt out via our cookie banner or by using browser settings.
- Preference cookies — remember your settings and preferences for a personalised experience.

You can manage or disable cookies in your browser settings. Please note that disabling certain cookies may affect the functionality of the website.

As a data subject under UK GDPR, you have the following rights:

- Right of access — You may request a copy of the personal data we hold about you (Subject Access Request / SAR).
- Right to rectification — You may request correction of inaccurate or incomplete data.
- Right to erasure — You may request deletion of your personal data ("right to be forgotten") in certain circumstances.
- Right to restrict processing — You may request that we limit how we use your data in certain situations.
- Right to data portability — You may request your data in a structured, machine-readable format.
- Right to object — You may object to processing based on legitimate interests or for direct marketing purposes.
- Rights related to automated decision-making — You have rights regarding any automated decisions that significantly affect you.

To exercise any of these rights, please contact us at privacy@smoothstream.tv or via WhatsApp. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at www.ico.org.uk.

We implement appropriate technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include:

- SSL/TLS encryption for all data transmitted to and from our website
- Encrypted storage for passwords and sensitive credentials
- Access controls limiting data access to authorised personnel only
- Regular security audits and vulnerability assessments
- Secure data centres with physical access controls

While we take all reasonable precautions, no internet transmission is 100% secure, and we cannot guarantee absolute security.

Some of our service providers may process data outside the UK or European Economic Area (EEA). Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the UK Information Commissioner, or the provider is located in a country with an adequacy decision.

Our service is not directed to children under the age of 13. We do not knowingly collect personal data from children under 13. If you become aware that a child has provided us with personal data without parental consent, please contact us immediately at privacy@smoothstream.tv and we will take steps to remove that information.

Our website may contain links to third-party websites (e.g., WhatsApp, social media platforms). We are not responsible for the privacy practices or content of those sites. We encourage you to read the privacy policies of any external sites you visit.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by updating the "Last Updated" date below and, where appropriate, by email notification. Your continued use of our service after any changes constitutes acceptance of the updated policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact us:

Smooth Stream — Data Controller
WhatsApp: +44 7518 801331
Email: privacy@smoothstream.tv
Website: https://smoothstream.tv

We aim to respond to all privacy-related enquiries within 5 working days.