1. General Provisions
TVClub Media OÜ (hereinafter "the Company", "we") operates the TVClub service, available at https://tvclub.live and through client applications.
This Privacy Policy describes what personal data we collect, how we process, store and protect it, and what rights you have regarding your data.
By using the Service, you confirm that you have read this Policy and agree to the data processing conditions described herein. This Policy is an integral part of the Terms of Service.
2. Data We Collect
2.1. Data You Provide
- Registration data — username, email address, password (stored in hashed form).
- Registration-related data — information about the email domain and other data you provide or that becomes available to us when verifying compliance with the Service registration rules and security requirements.
- Payment data — information required for payment processing. Full bank card details are not stored on our servers; payments are processed by certified payment providers.
- Support requests — the content of your messages sent to our support team.
2.2. Data Collected Automatically
- Technical data — IP address, User-Agent, browser and operating system information, interface language, country, city and time zone (where available from request headers and infrastructure services).
- Security and anti-abuse signals — information about connection characteristics and other indicators available to us that may suggest the use of VPNs, proxy services, Tor, Private Relay, hosting infrastructure, anonymisation tools, or attempts to circumvent the rules governing registration and access to the Service.
- Usage data — date and time of access, pages and sections of the Service viewed, actions within your account.
- Connection data — information about simultaneous sessions, necessary to enforce subscription plan limits.
2.3. Cookies and Similar Technologies
We use cookies and similar technologies to operate the Service, for analytics and to improve user experience. For details, see our Cookie Policy.
3. Purposes of Data Processing
We process your personal data for the following purposes:
- Service provision — creating and managing your account, providing access to Content, processing subscriptions.
- Payment processing — billing, payment processing, refunds.
- Support — handling enquiries and resolving technical issues.
- Security — preventing fraud, unauthorised access and abuse.
- Abuse prevention — detecting and preventing registration for or use of the Service in violation of the Service rules, including the use of prohibited email addresses, IP-concealment tools, traffic anonymisation tools, and attempts to circumvent technical restrictions.
- Limit enforcement — monitoring simultaneous connections in accordance with subscription plan terms.
- Analytics — analysing Service usage for improvement and development.
- Legal compliance — fulfilling requirements of applicable law.
4. Legal Basis for Processing
Personal data is processed on the following legal grounds:
- Performance of a contract — processing is necessary to provide the Service under the Terms of Service.
- Legitimate interests — ensuring Service security, preventing fraud and abuse, detecting circumvention of registration and access rules, and analytics aimed at improving the Service.
- Consent — where processing is based on your explicit consent (e.g. marketing communications). You may withdraw consent at any time.
- Legal obligation — where processing is required by applicable law.
5. Sharing Data with Third Parties
We do not sell your personal data to third parties. We may share data in the following cases:
- Payment providers — for processing payments and refunds.
- Hosting and infrastructure — servers and cloud services that support the operation of the Service.
- Technical and security services — infrastructure and technical services that help ensure security, stable operation of forms, protection against automated attacks, and abuse detection.
- Analytics services — for analysing Service usage (data may be anonymised).
- Law enforcement — where required by a lawful request or court order.
All third parties receiving access to data are required to protect it in accordance with applicable law.
6. Data Retention
We retain your personal data for as long as necessary to fulfil the purposes described in this Policy and to comply with legal obligations.
- Account data — retained for the lifetime of the account and for a reasonable period after its deletion.
- Payment records — retained in accordance with accounting and tax legislation requirements.
- Technical logs — retained for a limited period necessary for security and diagnostics.
Once retention periods expire, data is deleted or anonymised.
7. Data Protection
We implement technical and organisational measures to protect your data from unauthorised access, loss, alteration and disclosure, including:
- Data encryption in transit (HTTPS/TLS).
- Password hashing.
- Restricted employee access to personal data.
- Regular security audits.
However, no method of data transmission or storage is completely secure. We cannot guarantee absolute protection of data against all possible threats.
8. Your Rights
Depending on applicable law, you may have the following rights regarding your personal data:
- Access — the right to request information about the data we process.
- Rectification — the right to request correction of inaccurate data.
- Erasure — the right to request deletion of your data where there is no lawful basis for further processing.
- Restriction of processing — the right to request restriction of processing in certain cases.
- Data portability — the right to receive your data in a structured, machine-readable format.
- Objection — the right to object to processing based on legitimate interest.
- Withdrawal of consent — the right to withdraw previously given consent to data processing.
To exercise your rights, please contact us at [email protected]. We will process your request within the timeframes established by applicable law.
If you believe your data protection rights have been violated, you have the right to lodge a complaint with the competent data protection supervisory authority in your jurisdiction.
9. Children's Data
The Service is not intended for persons under 18 years of age. We do not knowingly collect personal data from minors. If we become aware that data has been provided by a person under 18 without parental consent, we will take steps to delete it.
10. Changes to This Policy
We reserve the right to amend this Policy. The current version is always available at https://tvclub.live.
We will notify Users of material changes by posting information on the Service website and/or by sending a message to the email address provided during registration.
Continued use of the Service after changes take effect constitutes your acceptance of the updated Policy.