Privacy Policy

1. Our approach in one paragraph

We operate on the principle that the safest data is data we never collected. We ask for the minimum required to deliver the service and to support you, we retain it for the minimum useful period, and we have never sold, rented or otherwise disclosed customer information to a third party for commercial purposes.

This policy is written to comply with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation, including Quebec's Law 25.

2. What we collect

Information you give us:

• Email address. Required. It is how we deliver your credentials and how we reply to support requests.
• Province or territory. Optional, requested at trial signup. Used to set your programme guide to the correct time zone and regional sports feed.
• Device type. Optional. Used to send you the right setup guide.
• Name. Optional on contact forms only. Never required to purchase.
• Device MAC address. Only if you use a MAG or Formuler receiver, where the portal must be locked to the device.
• Anything you write to support. Held for as long as the conversation is useful.

Information we generate:

• Concurrent connection count. Held transiently, to enforce your plan's simultaneous stream limit.
• Server load and error diagnostics. Aggregated operational data used to detect faults.
• Connection IP address. Held for a maximum of twenty-four hours for fault diagnosis and abuse prevention, then deleted.

Information we do not collect: your legal name, your home address, your telephone number, your date of birth, government identifiers, or payment card numbers.

3. Viewing data

This is the question people care about most, so we will be unambiguous.

• We do not build viewing profiles or behavioural advertising segments.
• We do not retain per-channel viewing history beyond twenty-four hours.
• We do not share viewing data with content owners, advertisers, data brokers or anyone else.
• The only reason we hold any stream-level data at all is to enforce connection limits and to diagnose faults, and it is deleted automatically.

4. Why we collect it

Each item has a single purpose.

• Email: to deliver credentials, to notify you of planned maintenance, and to reply to you.
• Payment confirmation: to activate your subscription and to process refunds.
• Province: to configure your guide correctly.
• Connection counts: to enforce the plan you bought.
• Transient IP data: to diagnose faults and to detect credential sharing.

We do not use your information for any purpose beyond these without asking you first.

5. How long we keep it

• Email address and subscription record: for the duration of your subscription plus twenty-four months, so that we can honour support and refund enquiries and meet record-keeping obligations.
• Support correspondence: twenty-four months.
• Connection IP data: twenty-four hours.
• Aggregated, non-identifying operational metrics: indefinitely.
• Payment records: as required by Canadian tax law, currently six years, held by Stripe rather than by us.

You may request earlier deletion at any time, subject to any legal retention obligation.

6. Who we share it with

We share personal information with three categories of party and no others.

• Stripe, our sole payment processor, to take card payments. Your card details are entered on Stripe's hosted payment page and go to Stripe directly. We never see or receive a full card number. Stripe processes this data as an independent controller under its own privacy policy.
• Email delivery providers, to send your credentials and support replies.
• Infrastructure providers, who host our servers and are contractually bound to confidentiality.

We disclose information to law enforcement or a regulator only where we are legally compelled to do so by a valid Canadian court order, warrant or equivalent legal process. Where we are permitted to notify you of such a request, we will.

We have never sold customer information and we will not.

7. Where your data is stored

Account and support records are stored on servers located in Canada. Some infrastructure and email delivery providers operate in the United States and the European Union, which means limited data may be processed outside Canada.

Where information is processed outside Canada, it may be accessible to the courts and law enforcement of that jurisdiction. We select providers that offer contractual protections comparable to Canadian standards, but we cannot exclude that possibility, and PIPEDA requires us to tell you so.

8. Cookies and analytics

This website uses functional cookies only, for things such as remembering your plan selection between pages. We do not use advertising cookies, we do not run third-party advertising pixels, and we do not participate in cross-site tracking networks.

We collect aggregate, non-identifying statistics about which pages are viewed, in order to work out which of our guides are useful. This data cannot be linked back to an individual subscriber.

You can block or delete cookies through your browser settings. The site will continue to function, though plan selections may not persist between pages.

9. Your rights

Under PIPEDA and provincial privacy legislation you have the following rights, and we will honour all of them regardless of where in Canada you live.

• Access. Request a copy of the personal information we hold about you.
• Correction. Ask us to correct anything inaccurate.
• Deletion. Ask us to delete your information, subject to legal retention obligations.
• Portability. Receive your information in a structured, machine-readable format.
• Withdrawal of consent. Withdraw consent to processing, understanding that this may mean we can no longer provide the service.
• Complaint. Complain to us, and if unsatisfied, to the Office of the Privacy Commissioner of Canada or your provincial privacy regulator.

To exercise any of these, email support@iptvhub.ca from the address on your account. We respond within thirty days, and usually within two business days.

10. Security

All traffic between your browser and this site is encrypted in transit. Account credentials are stored in hashed form. Access to customer records is limited to staff who need it for support, and is logged.

No system is perfectly secure. If we become aware of a breach creating a real risk of significant harm, we will notify affected individuals and the Office of the Privacy Commissioner of Canada as required under PIPEDA, and we will tell you what happened rather than issuing a vague statement.

11. Children

The service is not directed at children and we do not knowingly collect information from anyone under the age of majority in their province. If you believe a minor has provided us with personal information, contact us and we will delete it.

12. Changes to this policy

We will notify active subscribers by email of any material change at least fourteen days before it takes effect, and we will update the effective date at the top of this page. Previous versions are available on request.