• Account data: username, email, password (hashed), account type.
• Content & activity: videos you upload/import, comments, likes, subscriptions, watch and search history, playlists.
• Payment data: handled by our payment processor (e.g. Stripe); we receive limited transaction metadata, never full card numbers.
• Technical data: IP address, device/browser type, and cookies/similar technologies for security, sessions and basic analytics.

To provide and secure the Service (performance of a contract), personalise recommendations and remember your preferences (legitimate interests / consent where required), process payments (contract), comply with legal obligations, and prevent fraud and abuse (legitimate interests). Where we rely on consent (e.g. non-essential cookies), you can withdraw it at any time.

We do not sell your personal data. We share it only with: service providers/processors acting on our behalf (hosting, storage, payments, error monitoring) under contract; other users, to the extent your profile/content is public; and authorities where required by law or to protect rights and safety. Embedded third-party content (e.g. YouTube) is delivered by those providers under their own privacy policies.

We operate globally, so your data may be processed in countries other than your own, including the UK, EU and US. Where required, we use appropriate safeguards (e.g. Standard Contractual Clauses / UK IDTA) for cross-border transfers.

We keep personal data only as long as needed for the purposes above or as required by law (e.g. tax/accounting for payment records). When you delete content or your account, we delete or anonymise associated data, subject to lawful retention and backups.

Depending on where you live, you may have the right to access, correct, delete, restrict or object to processing, port your data, and withdraw consent. EU/UK (GDPR): all of the above, plus the right to complain to your data-protection authority (e.g. the UK ICO). California (CCPA/CPRA): the right to know, delete, correct, and opt out of "sale"/"sharing" (we do not sell); we will not discriminate for exercising these rights. To exercise any right, contact us below.

We use essential cookies for security and sessions, and (with consent where required) limited analytics. You can manage non-essential cookies via the on-site consent banner or your browser settings.

The Service is not directed to children under 13 (or the minimum age in your country). We do not knowingly collect data from children below that age; if you believe we have, contact us and we will delete it.

We use technical and organisational measures (encryption in transit, hashed passwords, access controls, session revocation) to protect your data. No system is perfectly secure, but we work to protect your information and will notify you and regulators of breaches where required.

We may update this policy and will post the new version with an updated date. Privacy questions or requests: privacy@hectictv.co.uk.