Privacy Policy & Data Protection

Official Legal Notice • UK GDPR & DPA 2018

This Privacy Policy governs the manner in which MEDIA HARMONY PUBLISHING LP collects, maintains, protects, and discloses information gathered from subscribers and visitors to Best IPTV UK (bestiptvuk.vg).

1. Data Controller & Corporate Identity

For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, the designated Data Controller responsible for your personal information is:

2. Principle of Data Minimisation

We adhere strictly to the principle of data minimisation. We collect and process only the baseline technical information strictly necessary to provision, configure, and maintain your prepaid streaming pass:

• Contact Identifiers: Your WhatsApp contact handle or phone number provided during onboarding, used exclusively to dispatch activation credentials and provide real-time technical troubleshooting.
• Subscription Metadata: The specific pass tier selected (3, 6, 12, or 24 months), number of licensed concurrent screens (1 to 4), and activation timestamp.
• Application Technical Profiles: Application software profile (e.g. TiviMate, IPTV Smarters, Smart IPTV, or hardware MAC address for dedicated STB emulators) required solely to generate compatible M3U8 or Xtream Codes endpoints.
• Transaction Verification: Payment processor transaction reference IDs and payment receipt confirmations. Important: We do NOT collect, process, or store raw debit/credit card numbers or banking passwords on our infrastructure. All payments are processed through secure, PCI-DSS compliant third-party gateways.

3. Strict Zero-Logging Policy for Viewing Activity

We believe your digital television consumption is entirely private. We maintain a strict Zero-Browsing Logs Policy:

• We do NOT record, log, monitor, or track the specific channels, programmes, sports events, or video-on-demand content you watch.
• We do NOT maintain historical timestamp records of which titles are streamed by individual customer accounts.
• Ephemeral server telemetry (such as node bandwidth loads and connection packet health) is processed solely in volatile system memory to balance regional streaming nodes and prevent buffering during peak Premier League match windows.

4. Legal Bases for Data Processing

Under Article 6 of the UK GDPR, we process your personal data under the following legal frameworks:

• Performance of a Contract: Processing necessary to activate your requested subscription pass, supply server connection credentials, and provide technical support.
• Legitimate Interests: Necessary to maintain network integrity, prevent denial-of-service (DDoS) abuse, enforce concurrent connection quotas, and detect fraudulent chargeback attempts.
• Legal Obligation: Maintaining statutory accounting, VAT, and business transaction records in compliance with UK tax regulations.

5. Cookies & Tracking Technologies

Our website utilizes zero third-party marketing or cross-site tracking cookies. We employ only essential, lightweight technical tokens stored locally on your device to remember user UI preferences (such as selected device dropdown states) and ensure secure HTTPS browsing sessions.

6. Data Retention & Erasure

Technical activation records and subscription metadata are preserved only for the duration of your active prepaid pass plus a 90-day grace period to facilitate simple renewal. If a pass is not renewed, technical device records are purged automatically. Transaction accounting records are retained for the statutory 6-year period required by UK HMRC regulations, after which they are irreversibly destroyed.

7. Your Statutory Rights under UK GDPR

As a data subject resident in the United Kingdom, you hold comprehensive rights regarding your personal information:

• Right of Access: Request confirmation of whether your data is processed and obtain a copy via a Subject Access Request (SAR).
• Right to Rectification: Request correction of inaccurate or incomplete contact details.
• Right to Erasure: Request permanent deletion of your customer records where retention is no longer legally required.
• Right to Object & Restrict: Restrict or object to specific processing activities.
• Right to Lodge a Complaint: You have the legal right to submit a complaint at any time to the UK supervisory authority, the Information Commissioner's Office (ICO), at ico.org.uk.