Privacy Policy

1. Who we are

Fluxview is an IPTV middleware service operating from the United Kingdom. We are the data controller for personal data collected through this website and the support flow. This policy explains what we collect, why we collect it, how long we keep it, and what your rights are under UK GDPR and the Data Protection Act 2018.

2. What we collect

At trial signup: first name and WhatsApp number. Optionally, the device you plan to use (Firestick, Smart TV, Android, etc.).

At paid checkout: all of the above plus billing details. Card numbers, CVV and full PAN are NEVER seen or stored by Fluxview — Stripe handles card processing end-to-end on their own PCI-DSS-compliant infrastructure and returns only a tokenised reference to us. We see the last 4 digits of the card and the cardholder's billing country, no more.

While you use the service: server logs (IP address, timestamp, request URL, user agent, response status). These are kept for 14 days for security and abuse-prevention purposes, then automatically deleted.

When you contact support: the full WhatsApp conversation, retained for as long as you are an active subscriber plus 12 months for warranty and refund purposes.

3. Why we collect it

To deliver the service (M3U credentials, EPG, account expiry tracking), to process payments, to provide support, to detect and prevent fraud and credential sharing, to comply with UK tax and consumer-protection law. We do NOT use personal data for advertising, profiling, or behavioural targeting. Our legal basis for processing is performance of contract (Article 6(1)(b) UK GDPR) and our legitimate interest in operating a safe service (6(1)(f)).

4. Who we share data with

Stripe Payments Europe Ltd (card processing, registered in Ireland), the Hostinger hosting platform (server logs and database), Meta WhatsApp Business (support conversations), Google Analytics 4 (aggregated traffic statistics — IP anonymisation is on). No data is sold, rented, or shared with advertising networks. No data is transferred outside the UK/EEA except where covered by Standard Contractual Clauses (Stripe, Google).

5. Cookies and tracking

The site uses a minimal set of first-party cookies: a session cookie for the cart, a localStorage entry for the cookie-banner dismissal, and the Google Analytics 4 client ID (anonymised). No third-party advertising cookies, no remarketing pixels, no social-network trackers. You can clear these cookies at any time via your browser settings without losing any subscription functionality.

6. How long we keep data

Active subscriber data: for as long as you are a subscriber. Inactive subscriber data: 24 months from last subscription expiry, then deleted. Billing records: 7 years (UK statutory minimum for VAT). WhatsApp conversations: subscription period + 12 months. Server access logs: 14 days.

7. Your rights

Under UK GDPR you have the right to: access your personal data, correct inaccuracies, request erasure, restrict or object to processing, port your data to another provider, and lodge a complaint with the Information Commissioner's Office (ICO) — ico.org.uk. To exercise any of these rights, WhatsApp our support team — see the contact page. We respond within 30 calendar days as required by law.

8. Children

Fluxview is intended for adults aged 18+ only. We do not knowingly collect data from anyone under 18. If you become aware that a minor has signed up, please contact us and we will delete the account and all associated data within 7 days.

9. Security

All traffic to and from this site is encrypted via TLS 1.3. Card data is never touched by our infrastructure — Stripe handles the full payment flow. Server access is restricted to a small number of named administrators with 2FA and IP allowlisting. We do not maintain a separate "data warehouse" — personal data lives only in the operational database backing this site.

10. Changes to this policy

Material changes are announced via WhatsApp to active subscribers. The "Last updated" date at the bottom of this page tracks the latest revision. Continued use of the service after a change constitutes acceptance.