What we collect
- Your name and email address, so we can send your order and your code.
- For recharges, the Box ID, MAC address or username of the device being topped up — we cannot apply credit without it.
- For hardware, a delivery address and phone number, which the courier requires.
- Order history: what you bought, when, in what currency, and the order reference.
- Basic technical data such as your browser type and the pages you visit.
What we never collect
We do not see or store your card number, expiry date or security code. Card details are entered directly with our payment processor, who is PCI-DSS compliant. We receive only a confirmation that payment succeeded and the last four digits for your receipt.
Why we are allowed to hold it
We process your name, email, address and device identifier because it is necessary to perform the contract you entered into. We keep order records because tax and consumer law require us to. Where we use analytics or send marketing, we rely on your consent and you can withdraw it at any time.
Who we share it with
- The streaming provider whose service you bought, limited to the device identifier needed to apply your credit.
- Our payment processor, to take payment and handle refunds and chargebacks.
- Couriers, for hardware deliveries only.
- Our email and hosting providers, who process data on our instructions.
We do not sell your data
We do not sell, rent or trade personal information, and we do not share it for cross-context behavioural advertising.
International transfers
We serve customers across several countries, so your information may be processed outside the country you live in — including by providers located elsewhere. Where that happens we rely on recognised safeguards such as standard contractual clauses, and we require every processor to protect your information to the standard set out here.
How long we keep it
Order records are kept for seven years, which is the longest retention period required by the tax authorities in the markets we sell to. Support correspondence is kept for two years. Anything not needed for those purposes is deleted when it is no longer required.
Your rights
Wherever you live, you can ask us for a copy of the information we hold about you, ask us to correct it, or ask us to delete it where we are not required to keep it. Depending on your country you may also have the right to object to processing, to restrict it, to receive your data in a portable format, or to opt out of its sale or sharing. We do not discriminate against anyone for exercising a privacy right.
Email [email protected] and we will respond within 30 days. If you are not satisfied you can complain to your national regulator — the OAIC in Australia, the Privacy Commissioner in New Zealand, the ICO in the United Kingdom, your provincial or federal Privacy Commissioner in Canada, the PDPC in Singapore, or your state Attorney General in the United States.
Cookies and storage
We use your browser’s local storage to remember the currency you chose and whether you dismissed the offer banner. That information stays on your device, is not sent to us, and is not used to track you. We do not run advertising cookies.
Children
This site is not intended for children and we do not knowingly collect information from anyone under 16. If you believe a child has given us information, contact us and we will delete it.
Questions about this policy
Email [email protected] — Mon–Sat, 9am–8pm AEST. We answer policy questions in writing so you have a record of the answer.
iptvboxshop · iptvboxshop.com