01Who we are

This policy covers the Zenox IPTV service at zenoxtv.com, also known as ZenoxTV ("Zenox", "we", "us"). For the personal data described here, Zenox is the data controller, which means we decide how and why it is used.

It applies when you visit our website, start a free trial, buy an IPTV subscription, use our apps and logins, or contact our support team.

02The personal data we collect

Account details

Your name, email address, phone number, password (stored hashed) and, only if you choose to give it, your address. We use your email to send login details, invoices and account messages.

Payments

Invoices, amounts, dates, the payment method used and transaction references. Card and bank details are entered directly with our payment providers. We never see or store your full card number.

Service and technical data

Your IPTV line details (username, plan, expiry date), the IP address and device or app type used to connect, connection times and the number of active connections. We need this to deliver streams, keep your connection stable and stop logins being shared.

Support and messages

Support tickets, emails and any files you send us, so we can help you and keep a record of what was agreed.

Website data

Basic technical data from your browser, such as IP address, browser type and the pages you visit, plus the cookies described below.

03How we use your data and our legal basis

UK GDPR says we must have a lawful reason for each use of your data. Here is what we do and why:

04Who we share your data with

We never sell your personal data and never share it with advertisers. We only share what is needed with service providers who work for us under contract:

• Payment providers, to process your payments securely and prevent fraud.
• Hosting, streaming and email providers, who run our website, client area, streaming servers and account emails.
• Professional advisers, such as accountants, where required.
• Authorities, only when the law requires it and after checking the request is valid.

If you buy through one of our resellers, that reseller also holds the details you give them and is responsible for their own use of it.

05Data stored outside the UK

Some of our providers store or process data outside the UK, for example on servers in the European Economic Area. When that happens we make sure the data is protected to UK standards, using UK adequacy regulations or the approved international data transfer agreements.

06How long we keep your data

We keep personal data only for as long as we need it:

After that, data is deleted or made anonymous.

07Cookies

Our website and client area use essential cookies to keep you logged in, remember your cart and protect forms against misuse. These are needed for the site to work, so they do not need your consent.

We do not use advertising cookies. If we ever add optional analytics or marketing cookies, we will only set them after you agree, and you will be able to change your choice at any time. You can also block or delete cookies in your browser settings, although parts of the site may then stop working.

08Your rights under UK GDPR

You have the right to:

• access the personal data we hold about you and get a copy;
• correct anything that is wrong or incomplete (most details can be changed in your client area);
• ask us to delete your data, where we do not need to keep it for legal reasons;
• restrict or object to how we use it, including for our legitimate interests;
• data portability, to receive your data in a common electronic format;
• withdraw consent for marketing at any time.

To use any of these rights, email [email protected] or open a support ticket. We reply within one month and there is normally no charge.

09How we keep your data safe

• Every page of our website and client area uses an encrypted HTTPS connection.
• Passwords are stored hashed, and email login codes are stored as hashes that expire after 10 minutes.
• Access to customer data is limited to staff who need it to help you.
• Two-factor login is available for your client area for extra protection.

No system is perfectly secure. If we ever become aware of a data breach that puts you at risk, we will tell you and the ICO as the law requires.

10Children

Zenox is for adults aged 18 and over. We do not knowingly collect data from children. If you believe a child has given us their details, contact us and we will delete them.

11Marketing emails

We only send news and offers if you ticked the box to receive them, either when you registered or later in your client area. Every marketing email has an unsubscribe link. Account emails, such as login details, invoices and renewal reminders, are part of the service and are not marketing.

12Changes to this policy

We may update this policy when our service or the law changes. The date at the top of this page shows the latest version, and we will tell you by email or in your client area about any important change.