Privacy Policy
How VortexStreams protects your personal data – GDPR and CCPA compliant and transparent
1. Data Controller and Privacy Officer
The data controller for data processing under the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), and other privacy laws is:
VortexStreams
Email: [email protected]
WhatsApp: +212 781-003018
Address: 5921 Tobias Ave, Sherman Oaks, CA 91411, USA
We have not appointed a formal Privacy Officer as we are not required to do so. For privacy questions, you can contact us anytime via email or WhatsApp.
2. General Information
Protecting your personal data is important to us. We treat your personal data confidentially and in accordance with applicable privacy laws and this Privacy Policy. Using our website is generally possible without providing personal data. Where personal data is collected on our pages (such as name, address, or email addresses), this is done on a voluntary basis wherever possible. This data will not be passed on to third parties without your explicit consent.
Please note that data transmission over the internet (e.g., when communicating via email or WhatsApp) may have security vulnerabilities. Complete protection of data from third-party access is not possible.
3. Collection and Processing of Personal Data
We collect, process, and use personal data only if you voluntarily provide it to us, for example, as part of an inquiry, order, or when contacting us via WhatsApp. The data collected can be seen from the respective input forms. We use this data for contract processing, processing your inquiries, and for the technical administration of VortexStreams.
The following data is collected when you order VortexStreams:
- Name – for personal address and invoicing
- Email Address – for sending access data, invoices, and important updates about your VortexStreams subscription
- Phone Number – for WhatsApp support and subscription management
- IP Address – for technical support, security, and fraud prevention
- Payment Information – processed through secure payment providers (we do not store credit card data)
- MAC Address – when using MAG Boxes for activation
4. Legal Basis for Processing
Your personal data is processed on the following legal bases:
- Contract Performance (Art. 6(1)(b) GDPR / CCPA Business Purpose) – for providing our IPTV service
- Legitimate Interest (Art. 6(1)(f) GDPR) – for customer service, fraud prevention, and service improvement
- Legal Obligation (Art. 6(1)(c) GDPR) – for compliance with tax and administrative obligations
- Consent (Art. 6(1)(a) GDPR) – for marketing communications (if applicable)
5. Purposes of Data Processing
We use your personal data exclusively for the following purposes:
- Providing our IPTV service with 1,300,000+ live channels and 60,000+ VOD content in 4K/8K quality
- Processing payments via credit card, PayPal, or cryptocurrency
- Customer support via WhatsApp, email, and phone (24/7 support from the USA)
- Informing about important changes, maintenance work, or subscription renewals
- Improving our service and user experience
- Fraud prevention and combating misuse
6. Data Sharing with Third Parties
Your personal data will not be shared with third parties for purposes other than those listed below. We only share your data with third parties if:
- You have given your explicit consent (Art. 6(1)(a) GDPR),
- Sharing is necessary for contract fulfillment (Art. 6(1)(b) GDPR),
- There is a legal obligation (Art. 6(1)(c) GDPR), or
- Sharing is necessary to protect legitimate interests (Art. 6(1)(f) GDPR).
Recipients of your data may include:
- Payment Service Providers (PayPal, cryptocurrency providers) – for secure payment processing. These are data processors that comply with GDPR and CCPA.
- Hosting Partners – for providing our servers and technical infrastructure.
- WhatsApp (Meta) – for customer communication and support.
We never sell your personal data to third parties. All external providers we use have data protection agreements that meet GDPR and CCPA standards.
7. Retention Period
We store your personal data only for as long as is necessary for the purposes for which it was collected or as required by legal retention periods:
- Account Data – for the duration of your active subscription + 12 months after termination (for legal and administrative purposes)
- Communication Data (WhatsApp/Email) – 24 months after last contact
- Payment Data – 7 years (statutory retention period for financial records)
- Technical Logs (IP addresses) – maximum 12 months
8. Your Rights Under GDPR and CCPA
As a data subject, you have the following rights, which you can exercise at any time free of charge:
- Right to Access (Art. 15 GDPR / CCPA) – You can request information about the data stored about you.
- Right to Rectification (Art. 16 GDPR) – You can request the correction of inaccurate data or the completion of incomplete data.
- Right to Deletion (Art. 17 GDPR / CCPA) – You can request the deletion of your data.
- Right to Restriction of Processing (Art. 18 GDPR) – You can request the restriction of processing your data.
- Right to Data Portability (Art. 20 GDPR) – You can request the transfer of your data in a machine-readable format.
- Right to Object (Art. 21 GDPR) – You can object to the processing of your data.
- Right to Withdraw Consent (Art. 7(3) GDPR) – You can withdraw previously given consent at any time with effect for the future.
- CCPA Right to Opt-Out – California residents have the right to opt-out of the sale of their personal information (we do not sell personal information).
To exercise your rights, contact us via WhatsApp or email. We will process your request within 4 weeks, as required by law.
9. SSL/TLS Encryption
This site uses SSL/TLS encryption for security reasons and to protect the transmission of confidential content, such as inquiries you send to us as the site operator. You can recognize an encrypted connection by the fact that the browser address line changes from "http://" to "https://" and by the lock symbol in your browser line. When SSL/TLS encryption is activated, the data you transmit to us cannot be read by third parties.
10. Cookies
Our website uses only functional and analytical cookies to make the website functional and to improve it. We do not use tracking cookies for advertising purposes. You can disable cookies through your browser settings, although this may affect the functionality of the website.
11. Privacy in WhatsApp Communication
We use WhatsApp Business for customer communication. WhatsApp (part of Meta) may process certain data. We have a data processing agreement with Meta and use only WhatsApp Business features. Information about data processing on WhatsApp can be found in WhatsApp's privacy policy.
12. Children's Privacy
Our service is not directed at children under 18 years of age. We do not knowingly collect personal data from children under 18. If you believe we have collected data from a child under 18, please contact us so we can delete this information.
13. Changes to the Privacy Policy
We reserve the right to change this Privacy Policy as needed to comply with changed legal requirements or changes to our service. The most current version is available on this page with the date of the last change. For important changes, we will actively inform you via WhatsApp or email.
14. Right to Lodge a Complaint with a Supervisory Authority
You have the right to lodge a complaint with a data protection supervisory authority about our processing of your personal data. However, we would appreciate it if you would contact us first so that we can find a solution together.
California Privacy Protection Agency (CPPA)
Website: cppa.ca.gov
15. Contact for Privacy Questions
For questions about privacy, exercising your rights, or this Privacy Policy, please contact us:
- Email: [email protected]
- WhatsApp: +212 781-003018
We are happy to help with all questions about VortexStreams and the associated privacy aspects of your VortexStreams experience.