Privacy Policy

Introduction

This privacy policy explains what personal data we collect, how we use it and the measures we take to protect it. We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and other applicable data-protection laws.

Data we collect

• Order and identification data: first name, last name, email address and WhatsApp number entered at checkout, and the plan you ordered.
• Payment data: information processed by our payment provider when you pay through the secure payment link (we do not receive or store full card details).
• Service and connection data: IP address, device identifiers and technical data needed to provide and secure the service.
• Support data: information you send us when you contact support (messages, screenshots, technical details).
• Cookies and similar technologies: cookies needed for the website to work, and — with your consent where required — analytics and advertising measurement tools.

Purposes and legal bases

We use your personal data to:

• process your order, send your payment link and login details, and provide support (performance of a contract);
• process payments and prevent fraud (performance of a contract and legitimate interest);
• improve our website and service (legitimate interest or consent, depending on the tool);
• communicate with you about your subscription, maintenance and your requests (performance of a contract);
• comply with legal obligations such as accounting and responding to lawful requests (legal obligation).

Consent

Where consent is required — for example for non-essential cookies or marketing — we ask for it before processing. You can withdraw your consent at any time, as easily as you gave it, by changing your preferences or contacting us.

Your rights

You have the right to access your data, to rectify inaccurate data, to request erasure, to receive your data in a portable format, to object to certain processing (including direct marketing) and to withdraw consent at any time. To exercise these rights, contact us using the details below. We may ask you to verify your identity, and we will reply within one month. You also have the right to lodge a complaint with your local data-protection authority.

Retention

We keep your data for the duration of your subscription and as long as necessary to meet our legal obligations and to establish or defend legal claims. Transaction records are kept in line with accounting obligations (up to 10 years). Technical logs and connection data are kept for a maximum of 12 months.

Recipients and transfers

Your data is processed by authorised staff only. We use service providers — such as our hosting provider, email delivery provider, payment provider and messaging services — that act on our instructions and are bound by confidentiality. We never sell your data. Where data is transferred outside the European Economic Area, we make sure appropriate safeguards are in place.

Security

We use technical and organisational measures to protect your data against loss, alteration and unauthorised access, including HTTPS/TLS encryption, access controls and regular software updates.

Contact

For any question about this privacy policy or your data, contact us via the Help & Support page or by email at contact@irontv.io.