Privacy policy

What personal data we collect, why we need it, how long we keep it and the rights you have over it.

Last updated: 3 October 2026

Who we are

CosyTelly (“we”, “us”) runs the website cosytelly.com and the CosyTelly IPTV UK subscription service. We are the controller of the personal data described in this policy. You can contact us about privacy at hello@cosytelly.com or on WhatsApp using the button on any page.

The data we collect

When you contact us or place an order

• Your WhatsApp number and display name, and the messages you send us.
• Your email address and any details you include, if you email us.
• The plan, plan length and number of connections you choose.
• Payment records such as the amount, date and transaction reference. If a payment provider processes your payment, it handles your payment details under its own privacy policy.

When you use the service

• The username we create for your subscription and its start and end dates.
• The device and app you use, if you tell us so we can help with setup.
• Your device’s MAC address, if you use a MAG box or an app that registers devices that way.
• Technical connection data, such as the IP address a stream connects from and when, which we need to deliver streams, enforce connection limits and prevent abuse.

When you visit this website

• Our web host records standard server logs (IP address, browser type, pages requested and time) to keep the site secure and working.
• We do not use advertising cookies or tracking pixels. If we add analytics in future, we will ask for your consent first and update this policy.
• Fonts on this site load from Google Fonts, which receives your IP address and browser details when a page loads.
• Order and trial buttons open WhatsApp. From that point, WhatsApp’s own privacy policy applies to the chat.

How and why we use your data

Under UK data protection law we must have a lawful basis for each use:

• Contract: to take your order, activate your subscription, provide support and process refunds.
• Legitimate interests: to keep the website and service secure, prevent fraud and account sharing beyond your plan, and improve how we help customers.
• Legal obligation: to keep financial records and respond to lawful requests.
• Consent: for optional marketing messages. You can withdraw consent at any time by replying “stop” or emailing us.

We do not sell your personal data, and we never use it for automated decisions that have legal or similarly significant effects on you.

Who we share it with

We share personal data only where needed to run the business: hosting and infrastructure providers, the messaging platform you choose to contact us on (WhatsApp), payment providers, and professional advisers. We may also disclose data where the law requires it. Each provider may only use your data to provide its service to us or under its own legal obligations.

International transfers

Some providers, including messaging platforms, process data outside the UK. Where that happens we rely on UK adequacy regulations or appropriate safeguards such as the UK International Data Transfer Agreement or Addendum.

How long we keep it

• Order and payment records: up to six years, for accounting and tax purposes.
• Support conversations and subscription details: while you are a customer and for up to 12 months afterwards.
• Technical connection data and server logs: normally no longer than 30 days, unless needed to investigate abuse.

Your rights

You have the right to access your personal data, to have it corrected, to have it erased, to restrict or object to how we use it, to data portability, and to withdraw consent. To use any of these rights, contact us at hello@cosytelly.com. We will respond within one month.

If you are unhappy with how we handle your data, you can complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113. We would appreciate the chance to put things right first.

Children

Our service is for adults aged 18 and over. We do not knowingly collect personal data from children.

Security

We protect personal data with access controls, encrypted connections and by limiting who can see it. No online service can be perfectly secure, so please keep your login details private.

Changes to this policy

We may update this policy when our services or the law change. The date at the top shows when it was last revised. You can also read our terms of service and refund policy.