Legal

Privacy & Cookies Policy

Your privacy matters to us. This page explains in plain terms what personal data we collect, why we collect it, how we use it, and the rights you hold under the General Data Protection Regulation (GDPR) and the Data Protection Act 2018.

Effective date: July 2026

01Who We Are — Data Controller

Strong 8K IPTV Ireland (8kiptvireland.irish) is the data controller responsible for the personal data described in this policy. All data protection enquiries should be sent through the contact channels on this website or by email to [email protected].

We do not sell your personal data

We never sell, rent or trade personal data to third parties. Data is shared only with the limited processors and authorities described in the Sharing section below.

02Personal Data We Collect

We collect only what is necessary for the purposes described in this policy:

CategoryWhat it includesWhen collected
Identity dataFirst name or preferred nameWhen you subscribe or request a trial
Contact dataWhatsApp number and/or email addressWhen you subscribe or contact support
Subscription dataPlan purchased, activation and expiry dates, issued CredentialsOn activation of a Trial or Subscription
Transaction dataPayment reference, amount, date and plan boughtAt time of payment
Service dataDevice type, MAC address (for MAG/Smart STB setups), player app used and regionOn device activation and sign-in, where applicable
Usage dataConnection timestamps, stream access logs and duration (content accessed)While using the service
CommunicationsMessages you send us on WhatsApp, email or the contact formWhen you contact support
Technical dataBrowser type, operating system, referring URL and page visits on this websiteWhen you visit this website
No special-category data

We do not collect any special-category data as defined in Article 9 GDPR — nothing revealing racial or ethnic origin, political opinions, religious beliefs, health data or biometric data. Please avoid including such details in messages to support.

03How We Use Your Personal Data

Each processing purpose rests on a lawful basis under Article 6 GDPR:

PurposeData usedLawful basis
Providing and managing the serviceIdentity, contact, subscription, service dataPerformance of contract — Art. 6(1)(b)
Processing payments and delivering CredentialsIdentity, contact, transaction dataPerformance of contract — Art. 6(1)(b)
Customer supportIdentity, contact, communicationsPerformance of contract — Art. 6(1)(b)
Detecting and preventing fraud and abuseSubscription, usage, transaction dataLegitimate interests — Art. 6(1)(f)
Improving reliability and service qualityUsage, technical, service dataLegitimate interests — Art. 6(1)(f)
Service messages (e.g. expiry reminders)Identity, contact, subscription dataLegitimate interests — Art. 6(1)(f)
Complying with legal obligationsIdentity, transaction dataLegal obligation — Art. 6(1)(c)
Website analytics (where used)Technical, usage dataConsent — Art. 6(1)(a), where required

Where we rely on legitimate interests, we have balanced those interests against your rights and freedoms and concluded they do not override the reasonable expectations of our customers. We carry out no automated decision-making or profiling that produces legal or similarly significant effects on you.

04Sharing Your Personal Data

Service providers. We work with a small number of third-party processors on our behalf — hosting and infrastructure providers, content-delivery and security services (such as Cloudflare), and messaging platforms (such as WhatsApp, through which orders and support run). Processors are bound by data processing terms and may process personal data only on our documented instructions, in line with GDPR requirements.

Legal and regulatory disclosure. We may disclose personal data to competent authorities — including data protection regulators, law enforcement agencies, courts and other public bodies — where required to do so by applicable law, court order or binding regulatory direction. We notify you of such disclosures where we are legally permitted to.

Business transfers. In the event of a merger, acquisition or sale of all or substantially all of our business assets, customer personal data may be transferred to the acquiring party. We will notify you of any such transfer and of any resulting change to this policy.

International transfers. We aim to store and process personal data within the European Economic Area (EEA). Where a transfer outside the EEA is necessary — for example where a service provider's infrastructure sits outside the EEA — we ensure appropriate safeguards are in place, such as the European Commission's Standard Contractual Clauses.

05Data Retention

We keep personal data only for as long as necessary for the purpose it was collected, plus any applicable legal and regulatory retention obligations:

DataRetention periodRationale
Identity and contact dataDuration of the relationship + 3 yearsLimitation period for contract claims
Transaction data7 years from the transactionRevenue and accounting obligations
CredentialsActive subscription + 12 monthsFraud detection and easy re-activation
Usage and access logs90 daysMonitoring, fraud detection and disputes
Support communications3 years from last contactSupport continuity and dispute resolution
Website analytics dataUp to 26 monthsService improvement and trend analysis

When data is no longer required, we securely delete or anonymise it. Anonymised data — from which you can no longer be identified — may be retained for longer for statistical and analytical purposes.

06Cookies & Tracking Technologies

This website uses cookies and similar technologies. A cookie is a small text file placed on your device by a website. Cookies allow a site to recognise your device, remember preferences and analyse how the site is used.

CookiePurposeDuration · Category
Session cookieKeeps your session working while you browseSession · Strictly necessary
Cookie consentRemembers your accept/decline choice12 months · Strictly necessary
_ga (Google Analytics)Distinguishes unique visitors2 years · Analytics
_gid (Google Analytics)Shorter-term visitor measurement24 hours · Analytics
_gat (Google Analytics)Limits request rate to analytics servers1 minute · Analytics

Strictly necessary cookies are required for the website to function correctly. They store no personally identifiable information and cannot be disabled through our cookie settings, as the site depends on them.

Analytics cookies (where enabled) help us understand how visitors interact with the website — which pages are visited, how long visits last and how visitors navigate — so we can improve it. The information collected is aggregated and does not identify you personally.

Managing cookies. You can manage or delete cookies through your browser settings. Most browsers let you refuse cookies, accept all, or receive a warning before a cookie is stored — look under Settings → Privacy in Chrome, Firefox, Safari or Edge. Blocking strictly necessary cookies may stop parts of the site working.

07Your Rights Under GDPR

As a data subject whose personal data we process, you hold the following rights under the GDPR and the Data Protection Act 2018. You can exercise any of them through the contact methods on this website:

Right of access

Get a copy of the personal data we hold about you, with information on how and why we process it.

Right of rectification

Ask us to correct inaccurate or complete incomplete personal data without undue delay.

Right of erasure

Request deletion of your personal data in certain circumstances, subject to legal and legitimate retention obligations.

Right to restrict processing

Ask us to limit how we process your personal data in certain circumstances.

Right to data portability

Where processing is by consent or contract and automated, receive your data in a structured, machine-readable format.

Right to object

Object to processing based on legitimate interests unless we can demonstrate compelling overriding grounds.

Right to withdraw consent

Where we rely on consent, withdraw it at any time — without affecting processing carried out before withdrawal.

Right to lodge a complaint

Complain to the Data Protection Commission (DPC) at dataprotection.ie if you believe your rights have been infringed.

How we handle requests

We respond to verified requests within one month. For complex cases this may be extended by up to a further two months, and we'll tell you if so. We may need to verify your identity before processing a request, and we never charge for reasonable requests.

08Data Security

We apply appropriate technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration and destruction, including:

  • Access controls limiting who can view personal data
  • Encryption of data in transit (HTTPS/TLS across the site and delivery systems)
  • Secure, access-controlled storage for records
  • Regular review of our security practices

Payments. We never collect or store full card details through this website. Ordering runs through WhatsApp and payments are completed via the payment channels agreed there — your full payment details are handled by the relevant payment provider, not stored by us.

While every reasonable measure is taken, no method of transmission over the internet or electronic storage is completely secure. If you believe your data or Credentials may have been compromised, contact us immediately through the support channels on this website.

Breach notification

In the event of a personal data breach likely to result in a risk to your rights and freedoms, we will notify the Data Protection Commission within 72 hours of becoming aware of the breach, where required, and will inform affected individuals without undue delay where the risk is high.

09Third-Party Links & Services

This website links to third-party websites, app stores and services — for example app-store listings on our Downloads page. This policy applies only to our website and services; it does not cover third-party sites or services.

When you follow a link to a third-party website, that website's own privacy policy applies to any personal data you provide there. We are not responsible for their privacy practices and recommend reviewing their policies before providing personal information. Third-party IPTV player applications are developed, operated and controlled by their developers — their handling of any data is governed by their own privacy policies and terms.

10Children's Privacy

The Service is intended for adults aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe a person under 18 has provided personal data to us, please contact us and we will promptly delete the information and close any associated access. By subscribing, you confirm you are at least 18 years of age.

11Changes To This Policy

We may update this Privacy & Cookies Policy from time to time to reflect changes in our data processing practices, applicable law, the services we provide, or our security and operational requirements.

When we make material changes, we will update the effective date at the top of this page and, where appropriate, notify active subscribers through our usual communication channels. Continued use of the website or Service after a revised policy is published means the updated version applies. We recommend reviewing this page periodically.

12Contact Us

Questions about this policy, or want to exercise your data protection rights? Message us on WhatsApp, use the contact page, or email [email protected]. We aim to answer general privacy enquiries within 2 business days and formal GDPR rights requests within one calendar month.

Questions About Your Privacy?

Message us on WhatsApp or by email — we respond within 2 business days.

This page is provided for general information and is not legal advice. Data protection queries: [email protected] · Data Protection Commission: dataprotection.ie