Privacy Policy

1. Who We Are

Strong 8K is a brand providing internet entertainment streaming (IPTV) services. We operate online and do not have a physical store. You can reach us through the channels listed at the bottom of this page.

2. Data We Collect

We limit data collection to what is necessary to deliver the service:

• Account data: Name, email address, phone number, country code, preferred language.
• Payment data: Fully processed by a secure payment gateway (Tap) — we do not store your card data on our servers. We only receive the order reference, amount, and status.
• Service data: IPTV username, MAC address (for certain devices), bouquet selection, activation/expiry dates.
• Technical data: IP address, browser and OS type, pages you visit on the site (server logs).
• Cookies: Session cookie (`s8k_sess`), language preference (`s8k_lang`), unauthenticated visitor tracking for site greeting purposes (`s8k_gv`). No third-party advertising cookies.
• Communication data: Messages submitted via the contact form, WhatsApp conversations you initiate.

3. Why We Collect This Data

• Service delivery: creating your account, activating your subscription, sending access credentials.
• Payment processing: via the Tap gateway with transaction confirmation and receipts.
• Technical support: responding to inquiries, resolving service issues, applying the Continuity Guarantee.
• Security & fraud prevention: protecting your account and detecting unauthorized use attempts.
• Service improvement: aggregated, anonymized usage analysis to improve performance.
• Legal compliance: retaining transaction records for required periods per regulatory requirements.

4. Sharing With Third Parties

We share minimal data with essential service providers under data-processing agreements:

• Certified payment gateway: Receives your name, email, phone, and payment amount to process the transaction (PCI-DSS compliant).
• Email provider: For sending payment receipts, account credentials, verification messages, and notifications.
• Infrastructure providers: Server hosting and networks (bound by international security standards).
• Legal authorities: If legally required by a formal court order — we cooperate to the minimum extent required.

We do not sell or rent your data to any third party for marketing purposes.

5. Data Retention

• Account data: until you request deletion, with financial transaction records kept for 7 years (international accounting requirement).
• Server logs: 90 days before automatic rotation.
• Session cookies: expire upon logout or session timeout.
• Language & visitor cookies: up to one year.

6. Your Rights

Per international data protection practices, you have the following rights:

• Access: Request a copy of the data we hold about you.
• Rectification: Correct any inaccurate data directly in your account or by contacting us.
• Deletion: Request deletion of your account (financial records are retained as noted above).
• Portability: Receive your data in a machine-readable, portable format.
• Object: Stop processing of your data for purposes beyond service delivery.
• Withdraw consent: At any time, with prospective effect.

To exercise any of these rights, contact us through the channels at the bottom of this page.

7. Security

• HTTPS (TLS) encryption on every page.
• Passwords hashed with bcrypt (never stored in plaintext).
• No card data stored — handled by Tap, which is PCI-DSS compliant.
• CSRF protection on all forms, CSP headers, full input sanitization.
• Regular security audits and proactive updates.

8. International Data Transfers

By the nature of the internet, your data may be processed on servers located in different jurisdictions. We select infrastructure providers that adhere to recognized international data protection standards.

9. Children

Our service is intended for adults (18+). We do not knowingly collect data from minors. If a guardian learns that a minor registered with false information, please contact us for immediate account deletion.

10. Policy Updates

We may update this policy to reflect service evolution or legal requirements. Material updates will be communicated to active users via email. Continued use after an update constitutes acceptance.