Privacy Policy

1. Scope of this notice

This notice explains what Malta IPTV does with personal data belonging to visitors, trial users and subscribers. It applies to this website, to the checkout, and to the support channels reachable from either. Because we sell into Malta and the wider EU, the General Data Protection Regulation (EU 2016/679) sets the standard we work to, and this notice is written to answer the questions that regulation expects us to answer: what we hold, why we are allowed to hold it, how long it stays, and what you can make us do about it.

2. What we hold, and on what basis

We keep the smallest set of data that lets the service work. Nothing here is gathered speculatively or resold.

• Contact details — the email address, and where you supply one the phone or messaging handle, that you enter at checkout or in a support form. Needed to deliver your subscription and to answer you. Basis: performance of the contract.
• Subscription record — the plan you chose, the number of connections, activation and expiry dates, and the credentials issued to you. Basis: performance of the contract.
• Payment confirmation — the fact and amount of a payment, plus the reference our processor returns. Card numbers and wallet keys are entered on the processor's own systems and never reach ours. Basis: performance of the contract and our legal record-keeping duties.
• Technical data — IP address, device type and player, and connection events. Used to activate a line, to diagnose a fault you report, and to detect credential sharing that breaches the Terms. Basis: our legitimate interest in a service that works and is not abused.
• Correspondence — the tickets and messages you send us, kept so a later conversation makes sense in light of an earlier one. Basis: legitimate interest.

3. What we do not do

We do not build advertising profiles, we do not sell or rent personal data to anyone, and we do not log the individual programmes or channels you choose to watch in order to market to you. We do not run third-party advertising trackers on this site. If we ever needed to process your data for a purpose outside the ones listed above, we would ask you first rather than quietly widen this notice.

4. How long it stays

An active subscription record is kept for as long as the subscription runs, and for a further period after it ends so that renewals, refund claims and disputes can be dealt with against a real record rather than a guess. Payment references are kept for the period our accounting and tax obligations require. Support correspondence is kept while it remains useful to you and to us. Trial records are short-lived by design. Data that no longer serves any of these purposes is deleted or anonymised rather than archived indefinitely.

5. Who else handles your data

Running this service means relying on a small number of specialist providers, each acting on our instructions under a written agreement: a payment processor, an email delivery provider, hosting and database infrastructure, and the streaming platform that serves your line. They receive only what their task requires. Where a provider operates outside the European Economic Area, the transfer is covered by the safeguards the GDPR permits for that purpose.

6. Security

Traffic to this site and to the checkout is encrypted in transit. Account credentials are stored hashed, not in readable form. Access to customer records is limited to the people who need it to do their job, and administrative access is separated from the public service. No system is beyond reach, so we would rather state plainly what we do than promise perfection: if a breach ever affected your data in a way that posed a real risk to you, we would tell you and notify the supervisory authority within the time the GDPR allows.

7. Cookies and measurement

This site sets only what it needs to function — remembering a session, a language choice, a step in a form. There are no advertising cookies and no cross-site tracking pixels. Any aggregate measurement we use tells us how many people reached a page, not who they were. Your browser lets you refuse or clear cookies at any time; the informational pages will keep working if you do, though a form part-way through may lose its place.

8. Your rights, and how to use them

Under the GDPR you may ask us for a copy of the personal data we hold about you, have inaccurate details corrected, ask for deletion where nothing obliges us to keep the record, ask us to restrict how we use it while a dispute is resolved, receive it in a portable format, and object to processing we carry out on the basis of legitimate interest.

Write to our support address and say which right you are exercising. We will confirm receipt and respond within one month; if a request is genuinely complex we may extend that and will tell you why. There is no charge. We may ask you to confirm the email address the subscription was bought with, because handing an account history to the wrong person would itself be a breach.

9. If you are not satisfied

Come to us first — most concerns are a misunderstanding we can clear up quickly. If our answer does not resolve it, you have the right to complain to a data protection supervisory authority. In Malta that is the Office of the Information and Data Protection Commissioner (IDPC), which publishes its complaint procedure at idpc.org.mt. If you live elsewhere in the EU, you may complain to the authority for your own country instead.

10. Age

This service is sold to adults. We do not knowingly create accounts for children, and we do not seek data from them. If you believe a child's details have reached us, tell us and we will remove the record.

11. Changes, and how to reach us

When this notice changes, the revised version appears on this page with a new date at the top. A change that materially affects how we handle data already collected will be flagged to subscribers by email rather than left to be discovered. Questions about anything above go to our support address.