Legal
Privacy Policy
What we collect, why we collect it, and what you can ask us to do with it. Last updated .
The short version
We collect the minimum needed to sell you a subscription and keep it working: an email address, a payment reference, and technical logs. We do not sell your data, we do not share it for advertising, and we do not build a profile of what you watch for marketing purposes.
What we collect
| Data | Why | Kept for |
|---|---|---|
| Email address | To send credentials, respond to support, and confirm payments | Life of the account, then 12 months |
| Interac e-Transfer reference and order number | To match your payment to your account, and for accounting obligations | 7 years (tax record retention) |
| IP address and connection logs | To operate the service, enforce stream limits, and investigate abuse | 90 days |
| Support correspondence | To resolve your issue and to have a record if you dispute something | 24 months |
What we do not collect
We do not store payment card numbers, because we do not accept cards — Interac e-Transfer means your banking details stay with your bank. We do not run third-party advertising or analytics trackers on this site. The connection test on our homepage runs entirely in your browser: its results are displayed to you and are not transmitted to us or stored.
Cookies
This site sets no tracking or advertising cookies. Cloudflare, which sits in front of the site, may set a strictly necessary cookie for security and bot mitigation. It is not used for advertising and cannot be used to identify you personally.
Who we share it with
Only where necessary to run the service:
- Our hosting and network providers, who process traffic on our behalf.
- Our financial institution, for payment reconciliation.
- Law enforcement or a regulator, where we are legally required to respond to a valid, properly issued request.
We do not sell personal information, and we do not disclose it to advertisers or data brokers.
Where it is stored
Our infrastructure is hosted in North America and traffic is served through Cloudflare's global network. Personal information may therefore be processed outside Canada, which means it can be subject to lawful access requests in the country where it is held. We keep what crosses borders to the minimum needed to run the service.
Your rights
Under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), and provincial equivalents where they apply, you can:
- Ask what personal information we hold about you.
- Ask us to correct anything inaccurate.
- Ask us to delete your account data, subject to records we are legally required to retain.
- Withdraw consent, understanding that we cannot operate the subscription without the data listed above.
- Complain to the Office of the Privacy Commissioner of Canada if you are not satisfied with how we handled your request.
Email help@supportiptv.ca and we will respond within 30 days, as PIPEDA requires.
Security
Traffic is encrypted in transit with TLS. Administrative access to our servers requires key-based authentication, and password-based remote login is disabled. Access to customer data is limited to staff who need it to do their job.
No system is perfectly secure. If a breach occurs that creates a real risk of significant harm to you, we will notify you and the Privacy Commissioner as PIPEDA requires.
Children
The service is not directed at children, and we do not knowingly collect personal information from anyone under 16.
Changes
If we change this policy we will update the date above. Material changes affecting how we use existing data will be communicated by email.
Contact
Privacy questions or requests: help@supportiptv.ca.