Privacy Policy

We collect only the information necessary to provide and improve our streaming service. We do not sell, rent, or trade your personal data to third parties.

What We DON'T Collect: We do not collect sensitive personal data such as racial/ethnic origin, political opinions, religious beliefs, health data, biometric data, or precise geolocation. We do not monitor or record the specific content you watch through our service.

We use your personal data only for legitimate, specified purposes:

• Service Delivery: To activate your account, provide streaming access, and maintain service functionality.
• Account Management: To send login credentials, subscription reminders, and account updates.
• Customer Support: To respond to your inquiries, troubleshoot issues, and provide technical assistance via WhatsApp or email.
• Service Improvement: To analyze usage patterns (in aggregate), fix bugs, and develop new features.
• Security & Fraud Prevention: To detect unauthorized access, prevent abuse, and protect our platform.
• Legal Compliance: To comply with applicable laws, regulations, and legal requests.

We do not use your personal data for:

• Selling or renting to third-party marketers
• Profiling for targeted advertising
• Making automated decisions that significantly affect you
• Monitoring your viewing habits for content recommendation beyond basic aggregation

For users in the European Economic Area (EEA), United Kingdom, and other jurisdictions with similar data protection laws, we process your personal data based on the following legal grounds:

• Contractual Necessity: Processing is necessary to perform the contract between you and Kevin Stream (e.g., providing streaming access, managing your subscription).
• Legitimate Interests: Processing is necessary for our legitimate interests in providing a secure, functional service, preventing fraud, and improving user experience, provided these interests are not overridden by your rights.
• Consent: For certain optional features (e.g., marketing emails, analytics cookies), we process data based on your explicit consent, which you may withdraw at any time.
• Legal Obligation: Processing is necessary to comply with applicable laws, such as tax regulations or legal requests.

We do not sell your personal data. We may share limited information with trusted third parties only as necessary to provide our service:

• Payment Processors: Secure payment gateways (e.g., Stripe, PayPal) process transactions. They are PCI-DSS compliant and do not share your full payment details with us.
• Infrastructure Providers: Cloud hosting and CDN services (e.g., AWS, Cloudflare) host our technical infrastructure under strict data processing agreements.
• Analytics Services: Anonymous, aggregated analytics tools (e.g., Google Analytics with IP anonymization) help us understand website usage.
• Support Tools: WhatsApp Business API facilitates customer support communications. Meta processes messages according to their privacy policy.
• Legal Authorities: We may disclose information if required by law, court order, or government request, but only to the extent legally required.

All third parties are contractually obligated to:

• Process data only for specified purposes
• Implement appropriate security measures
• Not use your data for their own marketing purposes
• Comply with applicable data protection laws

We retain your personal data only as long as necessary:

• Account Data: Retained while your account is active, plus 12 months after closure for legal/compliance purposes.
• Transaction Records: Retained for 7 years to comply with tax and financial regulations.
• Support Communications: Retained for 24 months to maintain support history and improve service.
• Analytics Data: Aggregated, anonymized data may be retained indefinitely for trend analysis.
• Cookies: Session cookies expire when you close your browser; persistent cookies expire after 12 months unless renewed.

You may request deletion of your personal data at any time (see "Your Rights" below). We will comply with valid requests within 30 days, except where retention is required by law.

Depending on your location, you have the following rights regarding your personal data:

How to Exercise Your Rights: Contact our Data Protection Officer at privacy@keviniptv.me. We will respond within 30 days. For EU/UK residents, you also have the right to lodge a complaint with your local data protection authority.

Our website uses cookies and similar technologies to enhance your experience:

• Essential Cookies: Required for website functionality (e.g., login sessions, security). Cannot be disabled.
• Analytics Cookies: Help us understand how visitors use our site (e.g., Google Analytics with IP anonymization). Optional; you can disable via browser settings.
• Preference Cookies: Remember your language, region, or display preferences. Optional.
• Marketing Cookies: We do not use third-party marketing or advertising cookies.

For more information about cookies, visit www.allaboutcookies.org.

Kevin Stream is not directed to children under the age of 16 (or 13 in the United States). We do not knowingly collect personal data from children. If you are a parent or guardian and believe your child has provided us with personal data, please contact us immediately at privacy@keviniptv.me. We will take steps to delete such information from our records.

Parents are responsible for supervising their children's use of streaming services and ensuring compliance with applicable age restrictions in their jurisdiction.

Kevin Stream is based in Ireland, but we serve customers worldwide. Your personal data may be transferred to and processed in countries outside your own, including the United States, where data protection laws may differ.

When we transfer data internationally, we ensure appropriate safeguards are in place:

• For transfers from the EEA/UK: We rely on the European Commission's Standard Contractual Clauses (SCCs) or other approved transfer mechanisms.
• For transfers to the US: We ensure recipients participate in the EU-US Data Privacy Framework or implement equivalent safeguards.
• All transfers: We conduct due diligence on recipients and require contractual commitments to protect your data.

You may request a copy of our international transfer safeguards by contacting privacy@keviniptv.me.

We implement technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction:

• Encryption: Data in transit (TLS/SSL) and sensitive data at rest (AES-256).
• Access Controls: Role-based access, multi-factor authentication for staff, principle of least privilege.
• Regular Audits: Security assessments, vulnerability scanning, and penetration testing.
• Staff Training: Regular privacy and security training for all employees.
• Incident Response: Documented procedures to detect, respond to, and notify you of data breaches within 72 hours where required.

While we strive to protect your data, no method of transmission or storage is 100% secure. We encourage you to use strong, unique passwords and enable two-factor authentication where available.

We may update this Privacy Policy periodically to reflect changes in our practices, technology, or legal requirements. When we make material changes:

• We will update the "Last Updated" date at the top of this page.
• For significant changes, we may notify you via email or a prominent notice on our website.
• Your continued use of Kevin Stream after changes take effect constitutes acceptance of the updated policy.

We encourage you to review this policy periodically. You can always find the current version at https://keviniptv.me/privacy-policy/.

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

For EU/UK residents: You have the right to lodge a complaint with your local data protection authority. Find your authority at edpb.europa.eu.