Privacy Policy
In short: We collect minimal data to deliver your IPTV subscription. We never sell your data. You have full rights under UK GDPR. Contact [email protected] with any questions.
1. Who We Are
SkyCastBox operates skycastbox.com and provides IPTV subscription services to customers in the United Kingdom. For the purposes of UK GDPR and the Data Protection Act 2018, SkyCastBox is the data controller responsible for your personal data.
2. Data We Collect
Data you provide
| Data | When collected |
|---|---|
| Name, email, phone number | When you contact us, request a trial, or purchase |
| M3U / Xtream Codes credentials | Generated when we set up your subscription |
| Payment reference & amount | When you pay (we never store full card numbers) |
| Device & app info | When we help with setup (e.g. Firestick, Smarters Pro) |
| Support messages | When you contact us via WhatsApp or email |
Data collected automatically
| Data | Purpose |
|---|---|
| IP address, browser, OS | Security & troubleshooting |
| Pages visited, time on site | Website analytics (Google Analytics) |
| Cookies | Site functionality & analytics |
Data we do NOT collect
Full payment card numbers, viewing history, biometric data, or social media data.
3. How We Use Your Data
- Service delivery — activate and maintain your IPTV subscription
- Customer support — respond to queries and assist with device setup
- Payment processing — process payments and issue receipts
- Communications — send order confirmations, renewals, and service updates
- Website improvement — analyse traffic to improve user experience
- Security — prevent fraud and unauthorised access
- Legal compliance — meet UK legal obligations
We never sell, rent, or trade your personal data to third parties.
4. Legal Basis for Processing
| Basis | Applies to |
|---|---|
| Contract | Fulfilling your subscription, setup, payment processing |
| Legitimate interests | Analytics, fraud prevention, service improvement |
| Consent | Marketing emails, non-essential cookies |
| Legal obligation | Tax records, law enforcement requests |
5. WhatsApp Communications
WhatsApp is our primary support channel. When you message us:
- Your phone number and display name are visible to our team
- Messages are encrypted end-to-end by WhatsApp
- We retain conversation history for support and dispute resolution
- WhatsApp is operated by Meta and subject to their privacy policy
Security notice: We will never ask for full card details via WhatsApp. If someone does, do not respond and report the number.
6. Cookies
| Type | Purpose | Duration |
|---|---|---|
| Essential | Site functionality, security | Session – 12 months |
| Analytics | Traffic analysis (Google Analytics) | Up to 26 months |
| Preferences | Your settings & cookie consent | Up to 12 months |
We do not use advertising or retargeting cookies. You can manage cookies via your browser settings.
7. Third-Party Services
| Service | Purpose |
|---|---|
| Cloudflare | Security, CDN, SSL |
| Hostinger | Web hosting |
| Google Analytics | Website analytics |
| WhatsApp (Meta) | Customer support |
| Payment processor | Payment processing |
We do not share data with any other third parties unless required by law.
8. Data Retention
- Account data — duration of subscription + 12 months after cancellation
- Payment records — 6 years (UK tax law)
- Support conversations — 24 months after last interaction
- Analytics data — 26 months
After these periods, data is securely deleted or anonymised.
9. Your Rights (UK GDPR)
You have the right to:
- Access — request a copy of your data
- Rectification — correct inaccurate data
- Erasure — request deletion of your data
- Restrict processing — limit how we use your data
- Data portability — receive your data in a standard format
- Object — object to processing based on legitimate interests
- Withdraw consent — at any time where consent is the basis
Email [email protected] to exercise any right. We respond within 30 days.
Complaints: You can lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk or call 0303 123 1113.
10. Data Security
We protect your data with SSL/TLS encryption, Cloudflare WAF and DDoS protection, end-to-end encrypted WhatsApp, access controls, and regular security updates. No system is 100% secure, but we take all reasonable steps to protect your information.
11. Children
Our services are not for individuals under 18. We do not knowingly collect data from children. If you believe a child has provided us data, contact [email protected] and we will delete it.
12. International Transfers
Data is primarily stored in the UK/EEA. Where third parties transfer data outside the UK (e.g. Cloudflare, Google), we ensure Standard Contractual Clauses and appropriate safeguards are in place.
13. Changes to This Policy
We may update this policy periodically. Material changes will be posted on this page with an updated date, and active subscribers will be notified via WhatsApp.