Smartiflix IPTV Privacy Policy and GDPR Compliance

Effective Date: November 20, 2025

This Privacy Policy explains how Smartiflix.store (referred to as “we,” “us,” or “our”) processes the personal data of users residing in the European Economic Area (EEA), the UK, and Switzerland, in compliance with the General Data Protection Regulation (GDPR) (EU) 2016/679.

Smartiflix.store acts as the Data Controller for the personal data collected through your use of our IPTV subscription and content services.

1. Legal Basis for Processing Your Data

We only process your personal data when we have a legal basis to do so. For the delivery of the Smartiflix.store IPTV service, the common grounds are:

1. Contractual Necessity: Processing is necessary to fulfill the subscription contract we have with you (e.g., managing your account access, processing payments, delivering the stream links).

2. Legitimate Interests: Processing data necessary for our business operations, provided your rights are not infringed (e.g., maintaining platform security, fraud prevention, service improvements).

3. Legal Obligation: Processing necessary to comply with legal requirements (e.g., tax records, DMCA compliance documentation).

4. Consent: We will rely on your explicit consent for non-essential processing, such as sending marketing emails. You have the right to withdraw this consent at any time.

2. Personal Data We Collect (Data Minimization)

In line with the principle of Data Minimization, Smartiflix.store collects only the necessary data required to deliver our IPTV service:

3. Your Rights as a Data Subject

Under GDPR, you have the following rights regarding the personal data we hold about you. Smartiflix.store commits to honoring these rights.

• Right of Access: You can request a copy of the personal data we hold about you.

• Right to Rectification: You have the right to correct inaccurate or incomplete data we hold about you.

• Right to Erasure (‘Right to be Forgotten’): You can request that we delete your personal data where there is no legal reason for us to continue processing it.

• Right to Restriction of Processing: You can request that we temporarily stop processing your personal data under certain conditions.

• Right to Data Portability: You have the right to request your personal data in a structured, commonly used, machine-readable format (such as CSV or JSON).

• Right to Object: You have the right to object to processing based on legitimate interests or for direct marketing purposes.

To exercise any of these rights, please contact our Data Protection Contact using the details provided below.

4. Data Security, Retention, and Third-Party Processors

A. Security Measures

We implement “appropriate technical and organisational measures” to ensure the integrity and confidentiality of your data, including:

• Encryption: Using SSL/TLS encryption for data transmitted between your device and our servers.

• Access Control: Limiting access to internal systems holding personal data to authorized personnel only.

• Data Breach Protocol: We maintain a protocol to detect, contain, and report any data breach to supervisory authorities and affected users within 72 hours, where required by law.

B. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements. Generally, customer data is kept for the duration of the subscription plus a maximum of five years thereafter for tax and regulatory reasons.

C. Data Processors

We use third-party processors (e.g., payment gateways, cloud hosting providers). We ensure that all such processors are compliant with GDPR and have appropriate Data Processing Agreements (DPAs) in place.

5. Contact Information

If you have any questions about this Privacy Policy, your data rights, or wish to make a Data Subject Request, please contact our Data Protection Contact at:

Data Protection Contact for Smartiflix.store: