Legal

Privacy policy

What information we hold about you, why we hold it, how long we keep it and what you can ask us to do with it.

Who we are

Supa Legacy IPTV operates the website at supalegacyiptv.store and supplies IPTV subscriptions to viewers in the United Kingdom. For the purposes of UK data protection law we are the data controller for the personal information described in this policy.

The short version

We collect very little. There is no account system on this website and no payment processing here. Most of what we hold exists because you sent us a WhatsApp message, plus the details you type into the order form when you place an order.

What information we collect

Information you give us on WhatsApp

When you message us, we receive your WhatsApp display name, your telephone number as WhatsApp presents it, and the content of your messages. If you send a photograph of your screen for troubleshooting, we receive that too.

WhatsApp is operated by Meta, not by us, and your use of it is governed by their own terms and privacy policy. Message content in WhatsApp is end-to-end encrypted between your device and ours.

Information you type into the order form

When you order, the pop-up asks for your name, email address and telephone number, along with the plan, the number of connections and the device you intend to use. Close the pop-up without completing the order and those details are discarded; nothing is kept and nothing is sent.

When you press Complete order, two things happen. The details are placed into the WhatsApp message you then choose to send (or handed to the payment provider, if one is in use), and a copy of the order is recorded so that we can fulfil it: the date, your name, email address and telephone number, the plan, the price, the number of connections and how the order is being paid for.

That record is held in a private spreadsheet in our business Google account, and is not published, sold or shared for advertising. Google acts as our processor for it, which means your details are stored on Google's systems under our instructions. This website itself has no database and no server of its own.

Once you send the WhatsApp message, we also hold what it contains, for the reasons set out below.

Subscription information

If you subscribe, we hold the details necessary to provide and support the service: which plan you took, its start and end dates, the number of connections, the device you told us you would use, and the subscription credentials issued to you.

Payment information

We do not collect or store card numbers, bank account numbers or other payment credentials on this website. Payments are arranged directly when you order, and any payment provider involved handles those details under its own privacy policy. We retain only a record that payment was made and for which subscription.

Website analytics

If analytics are enabled on this website, they are used to understand which pages are read and how people move between them, in aggregate. Analytics data is not used to identify individual visitors and is not linked to your subscription. Where an analytics provider is used, that provider processes the data under its own terms.

Technical information

Like any website, ours is served through infrastructure that keeps standard technical logs, which may include IP addresses, browser type and the pages requested. These are used for security and to keep the site working, and they are retained for a limited period.

What we do not collect

  • We do not ask for a postal address or a date of birth.
  • We do not ask for, and never see, your card number, expiry date or security code.
  • We do not operate an email mailing list from this website.
  • We do not sell, rent or trade personal information to anybody, for any purpose.
  • We do not use advertising trackers or behavioural advertising pixels on this website.
  • We do not create profiles of you for marketing purposes.

Why we process your information, and on what basis

PurposeInformation usedLawful basis
Setting up and running your subscriptionName, email address, phone number, plan, connections, price and devicePerformance of a contract
Answering your questions and providing supportYour messages and any photographs you sendPerformance of a contract, and legitimate interests in supporting customers
Keeping records of orders and paymentsSubscription and payment recordsLegal obligation, and legitimate interests in keeping accurate records
Keeping the website secure and workingTechnical logsLegitimate interests in operating a secure service
Understanding how the website is usedAggregate analytics, where enabledConsent, where required, or legitimate interests

How long we keep it

The order details you send, and the WhatsApp conversation containing them, are retained while your subscription is active and for a reasonable period afterwards, so that we can help if you return with a question about a setup we performed. Records relating to orders and payments are kept for as long as required for accounting and tax purposes. Technical logs are retained for a short period. When information is no longer needed for any of these purposes, it is deleted.

Who we share it with

We share personal information only where necessary to run the service:

  • WhatsApp / Meta, as the operator of the messaging platform we use.
  • Payment providers, where a payment is processed through one.
  • Hosting and infrastructure providers for this website.
  • Where legally required, in response to a valid legal obligation.

We do not share your information with advertisers or data brokers.

International transfers

Some of the providers above operate outside the United Kingdom. Where personal information is transferred internationally, we rely on the transfer mechanisms available under UK data protection law, such as adequacy decisions or standard contractual clauses.

Your rights

Under UK GDPR and the Data Protection Act 2018 you have the right to:

  • Be informed about how your information is used — this policy.
  • Access a copy of the personal information we hold about you.
  • Rectification — have inaccurate information corrected.
  • Erasure — ask us to delete your information, where no legal obligation requires us to keep it.
  • Restrict processing in certain circumstances.
  • Data portability — receive your information in a portable format.
  • Object to processing based on legitimate interests.
  • Withdraw consent at any time where processing is based on consent.

To exercise any of these, message us on WhatsApp. We will respond within one month, as the law requires. There is no charge for making a request.

Complaints

If you are unhappy with how we have handled your information, please tell us first so we have the opportunity to put it right. You also have the right to complain to the Information Commissioner's Office, the UK supervisory authority for data protection, at ico.org.uk.

Children

This website and our service are intended for adults. We do not knowingly collect information from children. If you believe a child has provided us with personal information, message us and we will delete it.

Changes to this policy

We may update this policy from time to time. The date at the top of this page shows when it was last changed. Material changes will be reflected here rather than notified individually, since we do not hold an email list.

How to contact us about this policy

WhatsApp is our only contact channel. Message +1 672 896 2871 and tell us what you need. We do not operate an email address, a telephone line or a contact form, so this is the route for every enquiry including those about your data and your rights.

Question about this policy?

Ask on WhatsApp and we will answer in plain English.