What we collect, and what we refuse to

01Who we are

Zoryflix is an IPTV subscription service operated by Zoryflix Media. For the purposes of the UK and EU General Data Protection Regulation we are the data controller for the information described below.

This policy covers zoryflix.best and the support conversations you have with us by email or WhatsApp. It does not cover other websites we link to, or the IPTV player apps you install on your own device — those are run by other companies under their own policies.

02What we collect

We deliberately collect very little. There is no account system on this website, no login form and no shopping cart — orders are taken in conversation. In practice we hold four categories of data.

Information you give us directly

• The name or nickname you use with us, and the phone number or email address you contact us from.
• Which plan you asked for, and the device you intend to use it on.
• The content of your support messages, including screenshots you send us.

Subscription data

• The username and portal details issued to your line, its expiry date and its permitted number of simultaneous connections.
• Connection counts and error events produced by the streaming servers — used to spot credential sharing and to diagnose faults.

Payment data

• A payment reference, the amount and the date. We never see or store your full card number. Card and PayPal payments are processed by the payment provider on their own systems; cryptocurrency payments leave us with nothing but a transaction hash.

Technical data collected automatically

• IP address, approximate country, browser and device type, referring page and pages viewed. This is standard web server and CDN logging.

03Why we use it, and on what legal basis

• To provide the service you bought — creating your line, activating it, renewing it, answering your questions. Legal basis: performance of a contract.
• To keep the platform working and secure — detecting abuse, blocking attacks, spotting a single subscription being resold to forty people. Legal basis: legitimate interests.
• To understand how the site is used — aggregate traffic figures that tell us which pages help and which do not. Legal basis: legitimate interests, or your consent where local law requires it.
• To meet legal and accounting obligations — keeping records of what was sold and when. Legal basis: legal obligation.

We do not use your data for automated decision-making that produces legal effects, and we do not build advertising profiles.

04What we do not do

Stated plainly, because in this industry it is worth stating:

• We do not sell, rent or trade subscriber data. Not to advertisers, not to brokers.
• We do not build a viewing profile of you, and we do not share what you watch with third parties for marketing.
• We do not add you to a mailing list because you messaged us about a fault.
• We do not run third-party advertising trackers, retargeting pixels or social widgets on this website.

05Cookies and analytics

This site is a static site. It does not set advertising cookies and it does not need a consent banner to work. Any cookies present fall into two narrow groups:

• Strictly necessary — set by our CDN and security layer to route traffic and filter malicious requests. These cannot be switched off without breaking the site.
• Analytics — if privacy-respecting analytics are enabled, they record page views and referrers in aggregate. They do not follow you across other websites.

You can block or delete cookies in your browser settings at any time; nothing on this site will stop working if you do.

06Who else touches your data

We use a small number of processors, each with access to the minimum they need to do their job:

• Hosting and CDN — serve this website and filter abusive traffic; they process IP addresses and request logs.
• Payment providers — process card, PayPal and cryptocurrency payments under their own privacy policies and card-industry obligations.
• WhatsApp (Meta) — carries our support conversations. Messages you send us on WhatsApp are also processed by Meta under Meta's own privacy policy. If you would rather not use it, email support@zoryflix.best instead.
• Email provider — delivers activation and support email.

We will disclose data to a public authority only where we are legally required to, and only to the extent required. If our business were ever transferred to another owner, your data would move with it under this same policy.

07International transfers

Our servers, support tools and payment providers are not all in one country, so data may be processed outside your own. Where data leaves the UK or the European Economic Area, we rely on adequacy decisions or on Standard Contractual Clauses with the provider concerned.

08How long we keep it

• Active subscription data — for as long as your line is active, then up to 12 months so that we can reactivate the same credentials if you come back.
• Support conversations — up to 24 months, so we have the history when the same fault recurs.
• Payment and invoice records — as long as tax and accounting law requires, typically six to seven years.
• Server and CDN logs — normally 30 to 90 days, then deleted or aggregated.

09Security

The site is served over HTTPS. Access to subscriber records is restricted to the people who run the service and is protected by strong authentication. Payment details never reach our systems in the first place, which removes an entire category of risk.

No system is perfect. If a breach occurs that is likely to put your rights at risk, we will notify the relevant supervisory authority within 72 hours and tell you directly without undue delay.

Please treat your line credentials the way you treat a password. If you have shared them, message us and we will issue new ones immediately, free.

10Your rights

Depending on where you live, you have the right to:

• ask what we hold about you and receive a copy;
• have inaccurate data corrected;
• have your data deleted where we no longer need it;
• restrict or object to certain processing;
• receive your data in a portable format;
• withdraw consent at any time, where processing was based on consent.

If you are in California, you additionally have the right to know what is collected, to request deletion, and to opt out of the “sale” or “sharing” of personal information — we do neither, so there is nothing to opt out of.

Email support@zoryflix.best with the phone number or address you contacted us from and we will respond within 30 days, free of charge. If you are unhappy with our answer you may complain to your national data protection authority.

11Children

Zoryflix is sold to adults only and is not directed at children under 16. We do not knowingly collect their data. If you believe a child has provided us with information, tell us and we will delete it. Adult categories on the service are optional and can be locked or removed from your line on request — just ask.

12Changes to this policy

When this policy changes we update the date at the top of the page. Material changes — a new category of data, a new purpose, a new processor — will also be announced on the site before they take effect. This version is effective from 1 September 2026.

13Contact

Privacy questions, access requests and deletion requests all go to the same place:

• Email: support@zoryflix.best
• WhatsApp: +1 (505) 528-2537