Anytime - Anywhere - Fully Compliant.

Privacy Policy.

1. Company Identity & Legal Structure

IPTVSubscription.me (hereinafter referred to as "the Company," "we," "us," or "our") is a legally registered and fully compliant Internet Protocol Television (IPTV) subscription service provider operating under the umbrella of its parent holding company, Apex Vision Holding.

IPTVSubscription.me

1.1 Parent & Holding Entity

Apex Vision Holding is a multinational holding corporation incorporated and registered in the following jurisdictions:

— United States of America – Registered as a Delaware Corporation (or equivalent state of formation), compliant with U.S. federal and applicable state business laws.

— Singapore – Incorporated under the Companies Act (Cap. 50) of Singapore, overseen by the Accounting and Corporate Regulatory Authority (ACRA).

— Netherlands (Kingdom of the Netherlands) – Registered under Dutch commercial law with the Kamer van Koophandel (Chamber of Commerce – KVK), subject to EU and EEA regulatory frameworks.

Apex Vision Holding operates as the sole parent entity of IPTVSubscription.me and holds all intellectual property, operational licenses, and commercial rights associated with the brand.

1.2 Operating Brand

IPTVSubscription.me is a consumer-facing brand and digital platform accessible at https://www.IPTVSubscription.me. The platform is designed to allow customers to browse service offerings, initiate contact, and purchase IPTV subscription plans. The service is directed exclusively at customers located in North America (United States and Canada), Europe (EU/EEA member states and the United Kingdom), and the Middle East (including but not limited to the UAE, Saudi Arabia, Kuwait, Qatar, Bahrain, Oman, Jordan, and Egypt).

1.3 Registered Headquarters

IPTVSubscription.me / Apex Vision Holding – European Headquarters

Read IPTVSubscription.me

1.4 Nature of Business

IPTVSubscription.me is a legally operating IPTV subscription reseller and service provider. The Company provides customers access to licensed or authorized streaming content through IPTV technology. All services sold by IPTVSubscription.me are offered in compliance with applicable telecommunications, broadcasting, and consumer protection laws in the jurisdictions where the Company operates. The Company does not engage in piracy, unauthorized redistribution of copyrighted content, or any activities in violation of applicable intellectual property laws.

2. Scope & Applicability of This Policy

This Privacy Policy ("Policy") governs the collection, use, storage, sharing, and protection of personal data by IPTVSubscription.me and its parent entity, Apex Vision Holding, in connection with:

— Your access to and use of the website https://www.IPTVSubscription.me;

— Any purchase or inquiry made through our website, email, or WhatsApp channels;

— Any communications you initiate with our customer support or sales teams;

— Any data collected automatically through cookies, analytics tools, and similar technologies.

This Policy applies to all users of the website regardless of the device or browser used, and regardless of whether the user has completed a purchase. By accessing our website or submitting any form of personal information, you acknowledge that you have read, understood, and agreed to the terms of this Policy.

This Policy is specifically designed to comply with the following legal frameworks, as applicable:

— General Data Protection Regulation (GDPR) – Regulation (EU) 2016/679

— UK General Data Protection Regulation (UK GDPR) – as retained by the Data Protection Act 2018

— California Consumer Privacy Act (CCPA) and its amendment, the California Privacy Rights Act (CPRA)

— Personal Data Protection Act (PDPA) of Singapore

— CAN-SPAM Act (United States)

— ePrivacy Directive (EU Directive 2002/58/EC, as amended)

— Applicable data protection and privacy laws of the Middle East jurisdictions in which we operate, including but not limited to the UAE Federal Decree-Law No. 45 of 2021 on Personal Data Protection.

3. Information We Collect

3.1 Information You Provide Directly

When you interact with our website, contact us via WhatsApp or email, or purchase a subscription, we may collect the following categories of personal data:

— Identity Data: Full name, username, or similar identifiers.

— Contact Data: Email address, telephone or WhatsApp number, and billing/mailing address.

— Transaction Data: Details about the subscription plan purchased, payment amounts, payment dates, and transaction references.

— Payment Data: We do not store raw payment card data. All payment processing is handled by PCI-DSS-compliant third-party payment processors. We may retain limited transaction identifiers for accounting and legal compliance purposes.

— Communications Data: Records of your correspondence with us, including emails, WhatsApp messages, and any attachments you voluntarily share.

— Account Credentials: Where applicable, usernames and hashed passwords required to access your subscription or customer portal.

3.2 Information Collected Automatically

When you visit our website, we automatically collect certain technical data, including:

— Device & Browser Data: IP address, browser type and version, operating system, device type, and screen resolution.

— Usage Data: Pages visited, time spent on pages, links clicked, referral source, and navigation path.

— Geolocation Data: Approximate geographic location derived from your IP address (country and city level only).

— Cookie & Tracking Data: Information collected through cookies, web beacons, pixels, and similar technologies (see Section 6).

3.3 Information from Third Parties

We may receive limited information about you from third-party sources, including:

— Payment processors (for fraud prevention and transaction validation);

— Analytics providers (aggregated and anonymized behavioral data);

— Public directories or business registries, if applicable in a B2B context.

3.4 Special Categories of Data

We do not intentionally collect, process, or store any special categories of personal data as defined under Article 9 of the GDPR, including but not limited to data revealing racial or ethnic origin, political opinions, religious beliefs, biometric data, health data, or sexual orientation.

4. Legal Basis for Processing (GDPR)

For users located in the European Economic Area (EEA), the United Kingdom, and other GDPR-equivalent jurisdictions, we process your personal data only when we have a valid legal basis to do so under Article 6 of the GDPR. The applicable legal bases are as follows:

4.1 Performance of a Contract (Art. 6(1)(b))

Processing is necessary to perform the subscription contract you have entered into with us — including account creation, service provisioning, billing, and customer support.

4.2 Legal Obligation (Art. 6(1)(c))

Processing is necessary to comply with our legal and regulatory obligations, including tax law, anti-money laundering regulations, accounting requirements, and applicable telecommunications laws in the jurisdictions where we operate.

4.3 Legitimate Interests (Art. 6(1)(f))

Processing is necessary for our legitimate interests or those of a third party, provided those interests are not overridden by your rights and interests. This includes: fraud prevention, website security, improving our services, internal analytics, and direct marketing to existing customers where permitted.

4.4 Consent (Art. 6(1)(a))

Where we rely on consent as a legal basis — for example, for the use of non-essential cookies or for email marketing to new prospects — we will explicitly request your consent and provide a mechanism to withdraw it at any time without detriment.

5. How We Use Your Information

We use the personal data we collect for the following specific and lawful purposes:

— Service Delivery: To process your subscription order, activate your IPTV access, and manage your account.

— Customer Communication: To respond to your inquiries via email or WhatsApp, provide technical support, and send service-related notifications.

— Billing & Payment: To process payments, issue invoices, manage renewals, and handle refund requests in accordance with our refund policy.

— Legal Compliance: To fulfill our obligations under applicable laws, including tax reporting, anti-fraud obligations, and regulatory reporting requirements in the US, Netherlands, and Singapore.

— Fraud Prevention & Security: To detect, prevent, and investigate fraudulent transactions, unauthorized access, or violations of our Terms of Service.

— Website Improvement: To analyze usage patterns, diagnose technical issues, and improve the functionality and user experience of our website.

— Marketing (with consent or legitimate interest): To send promotional communications about our subscription plans, special offers, or service updates to existing customers. You may opt out at any time.

— Legal Proceedings: To establish, exercise, or defend legal claims in connection with our business operations.

6. Cookies & Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance functionality, analyze traffic, and provide a personalized experience.

6.1 Types of Cookies We Use

— Strictly Necessary Cookies: Essential for the website to operate. These cannot be disabled. They include session management, security tokens, and load balancing cookies.

— Analytical / Performance Cookies: Used to understand how visitors interact with our website (e.g., Google Analytics). These cookies collect anonymized or aggregated data.

— Functional Cookies: Allow the website to remember your preferences (e.g., language, currency, region).

— Marketing / Targeting Cookies: Used to deliver relevant advertisements and track campaign effectiveness. These are only activated with your prior consent.

6.2 Managing Cookies

You may manage or disable cookies through your browser settings or our Cookie Consent Manager presented upon first visit to our website. Please note that disabling certain cookies may affect the functionality of the website. For more information, visit www.allaboutcookies.org.

6.3 Do Not Track

Our website does not currently respond to "Do Not Track" browser signals. However, you retain the right to limit tracking as described above.

7. Data Sharing & Third-Party Disclosure

We do not sell, rent, or trade your personal data to any third party for commercial purposes. We may share your data only in the following limited and lawful circumstances:

7.1 Service Providers & Processors

We engage carefully vetted third-party service providers who process data on our behalf under strict data processing agreements (DPAs). These include:

— Payment Processors (e.g., Stripe, PayPal, or equivalent) – for secure transaction handling.

— Cloud Hosting Providers – for website hosting and data storage within secure, GDPR-compliant infrastructure.

— Email Service Providers – for transactional and marketing email delivery.

— Analytics Providers (e.g., Google Analytics) – for aggregated website performance data.

— Customer Support Tools – including WhatsApp Business API, for managing customer communications.

7.2 Legal & Regulatory Authorities

We may disclose personal data to government authorities, law enforcement agencies, or regulatory bodies when required by law, court order, or legitimate governmental request in the United States, Netherlands, Singapore, or other applicable jurisdictions.

7.3 Corporate Transactions

In the event of a merger, acquisition, asset sale, or restructuring of Apex Vision Holding or IPTVSubscription.me, personal data may be transferred as part of the transaction, subject to equivalent data protection obligations being placed on the successor entity.

7.4 Protection of Rights

We may disclose data where necessary to protect the rights, property, or safety of IPTVSubscription.me, Apex Vision Holding, our customers, or others — including for fraud prevention and credit risk reduction.

8. International Data Transfers

Given the multinational structure of Apex Vision Holding — with registered entities in the United States, Singapore, and the Netherlands — and given that our customer base spans North America, Europe, and the Middle East, personal data may be transferred across international borders.

We ensure that all cross-border transfers comply with applicable data protection law, including:

— Standard Contractual Clauses (SCCs) – approved by the European Commission, incorporated into all data processing agreements with non-EEA processors.

— Adequacy Decisions – transfers to countries recognized by the European Commission as providing adequate data protection (e.g., the United Kingdom).

— Singapore PDPA Obligations – data transferred to or from Singapore is subject to the Personal Data Protection Act and its prescribed transfer mechanisms.

— US Privacy Framework – where applicable, transfers involving US-based entities comply with relevant US federal and state privacy frameworks.

Our primary data infrastructure is hosted within the European Economic Area (EEA), with the Netherlands serving as the primary jurisdiction for data residency.

9. Data Retention

We retain your personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by law. Our general retention periods are as follows:

— Active Customer Accounts: For the duration of the subscription and for up to 5 years after account closure, for tax, accounting, and legal purposes.

— Transaction & Billing Records: A minimum of 7 years in compliance with EU VAT regulations, Dutch tax law (Belastingdienst), and US IRS record-keeping requirements.

— Customer Communications (Email / WhatsApp): Up to 3 years from the date of last contact, unless a longer period is required for legal proceedings.

— Website Analytics Data: In anonymized or aggregated form, retained for up to 26 months (aligned with Google Analytics default retention).

— Cookie Consent Records: Up to 3 years to demonstrate compliance.

— Marketing Opt-Out Records: Indefinitely, to ensure we honor suppression requests.

Upon expiration of the applicable retention period, data is securely deleted or anonymized in accordance with our internal data disposal procedures.

10. Your Rights & Choices

Depending on your jurisdiction of residence, you may have the following rights with respect to your personal data:

10.1 Rights Under GDPR (EU/EEA & UK Users)

— Right of Access (Art. 15): You have the right to obtain a copy of the personal data we hold about you.

— Right to Rectification (Art. 16): You may request correction of inaccurate or incomplete data.

— Right to Erasure / "Right to Be Forgotten" (Art. 17): You may request deletion of your data where there is no compelling reason for continued processing.

— Right to Restriction of Processing (Art. 18): You may request that we limit the processing of your data in certain circumstances.

— Right to Data Portability (Art. 20): You may receive your data in a structured, machine-readable format and transfer it to another controller.

— Right to Object (Art. 21): You may object to processing based on legitimate interests or for direct marketing purposes.

— Right to Withdraw Consent (Art. 7(3)): Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

— Right to Lodge a Complaint: You have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or the supervisory authority in your EU member state of residence.

10.2 Rights Under CCPA / CPRA (California Residents)

— Right to know what personal information is collected, used, shared, or sold.

— Right to delete personal information held by us.

— Right to opt out of the sale or sharing of personal information (we do not sell personal data).

— Right to non-discrimination for exercising your CCPA rights.

— Right to correct inaccurate personal information (CPRA).

— Right to limit the use of sensitive personal information (CPRA).

10.3 Rights Under Singapore PDPA

— Right of access to personal data held about you.

— Right to correct personal data that is inaccurate or incomplete.

— Right to withdraw consent, subject to legal or contractual restrictions.

10.4 How to Exercise Your Rights

To exercise any of the above rights, please contact us via email at Watch@IPTVSubscription.me with the subject line "Data Subject Request." We will respond within 30 days of receipt of a verifiable request (or within the statutory timeframe required by applicable law). We may need to verify your identity before processing certain requests.

11. Children's Privacy

Our website and services are intended exclusively for individuals who are 18 years of age or older. We do not knowingly collect, process, or store personal data from children under the age of 18 (or the applicable age of digital consent in the relevant jurisdiction, such as 16 years in certain EU member states under GDPR Article 8).

If we become aware that we have inadvertently collected personal data from a minor without verifiable parental consent, we will take immediate steps to delete such data from our records. If you believe a minor has provided us with personal data, please contact us immediately at Watch@IPTVSubscription.me.

12. Security Measures

We implement appropriate and proportionate technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure, destruction, or accidental loss. These measures include:

— Encryption in Transit: All data transmitted between your browser and our website is encrypted using TLS (Transport Layer Security) protocols (HTTPS).

— Encryption at Rest: Sensitive data stored in our systems is encrypted at rest using industry-standard encryption algorithms.

— Access Controls: Access to personal data is restricted on a strict need-to-know basis and governed by role-based access control (RBAC) policies.

— Secure Payment Processing: All payment transactions are processed by PCI-DSS Level 1 compliant payment processors. We do not store full card numbers on our systems.

— Regular Security Audits: We conduct periodic internal security assessments and engage third-party security professionals for vulnerability assessments.

— Incident Response Plan: We maintain a documented data breach response procedure. In the event of a personal data breach, we will notify affected individuals and relevant supervisory authorities within the timeframes required by applicable law (72 hours under GDPR, where applicable).

— Staff Training: All personnel with access to personal data receive regular training on data protection obligations and information security best practices.

While we implement best-practice security measures, no method of transmission over the internet or electronic storage is 100% secure. We therefore cannot guarantee absolute security of your data.

13. Third-Party Links & Services

Our website may contain links to third-party websites, payment gateways, or external services. This Privacy Policy does not apply to those third-party services. We encourage you to review the privacy policies of any third-party services you access through our website, as we have no control over their data collection practices and are not responsible for their privacy practices.

Our use of WhatsApp Business (operated by Meta Platforms, Inc.) for customer communication is subject to WhatsApp's own privacy policy and terms of service. We recommend reviewing Meta's data practices at https://www.whatsapp.com/legal/privacy-policy.