Privacy Policy & Data Protection

1. Introduction

Welcome to DStv Stream. We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how DStv Stream (Pty) Ltd ("we," "us," or "our") collects, uses, discloses, and safeguards your information when you use our streaming service, website, mobile applications, and related services (collectively, the "Service").

This policy complies with the Protection of Personal Information Act (POPIA) in South Africa and other applicable data protection laws across African countries where we operate. By accessing or using our Service, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy.

Important: If you do not agree with the terms of this Privacy Policy, please do not access or use the Service.

2. Information We Collect

We collect various types of information to provide and improve our Service to you. The information we collect includes:

2.1 Information You Provide Directly

Account Registration: Name, email address, phone number, date of birth, password, and country/region
Payment Information: Credit/debit card details, mobile money account information, bank account details, billing address, and transaction history
Profile Information: Profile picture, display name, language preferences, viewing preferences, and watchlist
Communications: Messages you send to us, customer support inquiries, survey responses, and feedback
User Content: Reviews, ratings, comments, and other content you submit or post
Parental Controls: Information about accounts under your supervision, including age verification data

2.2 Information Collected Automatically

Device Information: Device type, operating system, unique device identifiers, mobile network information, IP address, browser type and version
Usage Data: Content viewed, viewing history, search queries, watch time, pause/resume activity, content ratings, and interaction with features
Streaming Quality Data: Bandwidth, streaming quality settings, buffering events, playback errors, and connection speed
Location Information: IP-based location, GPS data (with your permission), and region/country information
Cookies and Similar Technologies: Information collected through cookies, web beacons, pixels, local storage, and device fingerprinting (see our Cookie Policy)

2.3 Information from Third Parties

Social Media: Profile information when you connect via Facebook, Google, or other social platforms
Payment Processors: Transaction confirmation and payment verification data
Analytics Providers: Aggregated usage statistics and demographic information
Marketing Partners: Information about your interests and advertising preferences
Public Databases: Verification information for fraud prevention

3. How We Use Your Information

We use the information we collect for various purposes, including:

3.1 Service Delivery and Account Management

Create and manage your account
Process payments and maintain billing records
Provide access to streaming content and features
Remember your preferences and settings
Enable downloads for offline viewing
Manage subscription plans and upgrades
Authenticate users and prevent fraud

3.2 Personalization and Recommendations

Recommend content based on your viewing history and preferences
Customize your homepage and user interface
Provide personalized marketing communications
Show relevant advertisements (where applicable)
Optimize content discovery features

3.3 Service Improvement and Analytics

Analyze usage patterns and trends
Improve streaming quality and reduce buffering
Develop new features and services
Conduct research and testing
Optimize content library and acquisitions
Monitor and analyze system performance

3.4 Communication

Send service-related notifications and updates
Respond to your inquiries and support requests
Send marketing communications (with your consent)
Notify you about changes to our terms or policies
Conduct surveys and gather feedback

3.5 Security and Compliance

Detect and prevent fraud, abuse, and illegal activities
Enforce our Terms of Service and other policies
Comply with legal obligations and regulatory requirements
Protect our rights, property, and safety
Monitor and prevent content piracy
Verify identity and prevent unauthorized access

4. Legal Basis for Processing (POPIA Compliance)

Under POPIA and similar data protection laws, we process your personal information based on the following legal grounds:

Consent: You have given explicit consent for specific processing activities
Contract Performance: Processing is necessary to fulfill our contract with you (e.g., providing the Service)
Legal Obligation: We must process your data to comply with legal requirements
Legitimate Interests: Processing is necessary for our legitimate business interests (e.g., fraud prevention, service improvement), provided these interests do not override your fundamental rights

You have the right to withdraw consent at any time, though this may affect your ability to use certain features of the Service.

5. Information Sharing and Disclosure

We do not sell your personal information to third parties. We may share your information in the following circumstances:

5.1 Service Providers and Business Partners

We share information with third-party service providers who perform services on our behalf, including:

Payment Processors: To process transactions (e.g., Stripe, PayPal, mobile money providers)
Cloud Hosting: To store data and deliver content (e.g., AWS, Google Cloud, Azure)
Content Delivery Networks (CDNs): To stream video content efficiently
Analytics Providers: To analyze usage and improve services (e.g., Google Analytics)
Customer Support: To provide support services and live chat
Marketing Partners: To deliver advertising and measure campaign effectiveness
Email Services: To send communications and notifications

These service providers are contractually obligated to protect your information and use it only for the specific purposes we authorize.

5.2 Business Transfers

If we are involved in a merger, acquisition, asset sale, bankruptcy, or other business transaction, your information may be transferred as part of that transaction. We will notify you of any such change and provide information about how your data will be handled.

5.3 Legal Requirements and Protection

We may disclose your information when required by law or when we believe disclosure is necessary to:

Comply with legal obligations, court orders, or government requests
Enforce our Terms of Service and other agreements
Protect the rights, property, or safety of DStv Stream, our users, or others
Detect, prevent, or address fraud, security, or technical issues
Respond to claims of intellectual property infringement

5.4 With Your Consent

We may share your information with third parties when you have given us explicit consent to do so, such as when you connect your account to social media platforms or participate in co-marketing activities.

5.5 Aggregated and De-identified Data

We may share aggregated, anonymized, or de-identified information that cannot reasonably be used to identify you for research, marketing, analytics, and other business purposes.

6. International Data Transfers

DStv Stream operates across multiple African countries and may transfer your information to countries outside your country of residence, including countries that may have different data protection laws.

When we transfer data internationally, we implement appropriate safeguards, including:

Standard contractual clauses approved by data protection authorities
Data processing agreements with service providers
Compliance with cross-border data transfer regulations under POPIA and similar laws
Encryption and security measures during data transmission

Our primary data storage facilities are located in South Africa, with additional servers in Nigeria, Kenya, and cloud infrastructure in Europe (for redundancy and performance optimization).

7. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

Retention Periods:

Active Accounts: We retain your account information for the duration of your subscription plus 12 months after cancellation
Viewing History: Retained for 24 months for active users; may be retained longer for machine learning purposes in anonymized form
Payment Information: Retained for 7 years for tax and accounting purposes as required by law
Communication Records: Customer support interactions retained for 3 years
Marketing Consent: Retained until you withdraw consent or for 2 years of inactivity
Legal Claims: Information relevant to legal claims retained until the claim is resolved plus applicable statute of limitations period

After the retention period expires, we securely delete or anonymize your personal information. You may request deletion of your data at any time by contacting us (see Section 11).

8. Data Security

We implement comprehensive security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction. Our security practices include:

Technical Measures:

Encryption: All data transmitted between your device and our servers uses TLS/SSL encryption (256-bit)
Storage Security: Personal information stored using AES-256 encryption at rest
Access Controls: Role-based access restrictions and multi-factor authentication for employees
Network Security: Firewalls, intrusion detection systems, and regular security monitoring
Secure Development: Security testing, code reviews, and vulnerability assessments
Payment Security: PCI-DSS compliant payment processing; we do not store full credit card numbers

Organizational Measures:

Employee training on data protection and security best practices
Background checks for employees with access to sensitive data
Non-disclosure agreements with employees and contractors
Regular security audits and penetration testing
Incident response plan for data breaches
Data protection impact assessments for high-risk processing

Important: While we strive to protect your information, no method of transmission over the internet or electronic storage is 100% secure. You are responsible for maintaining the confidentiality of your password and account credentials. Please notify us immediately if you suspect unauthorized access to your account.

9. Your Privacy Rights

Under POPIA and other applicable data protection laws, you have the following rights regarding your personal information:

9.1 Right to Access

You have the right to request confirmation of whether we process your personal information and to obtain a copy of your data. You can access much of your information through your account settings, or contact us for a comprehensive data report.

9.2 Right to Rectification

You have the right to request correction of inaccurate or incomplete personal information. You can update most information directly in your account settings.

9.3 Right to Erasure ("Right to be Forgotten")

You have the right to request deletion of your personal information under certain circumstances, including when:

The information is no longer necessary for the purposes it was collected
You withdraw consent and there is no other legal basis for processing
You object to processing and there are no overriding legitimate grounds
The information has been unlawfully processed

Note: We may retain certain information as required by law or for legitimate business purposes (e.g., fraud prevention, financial records).

9.4 Right to Restrict Processing

You can request that we limit how we use your information while you're disputing its accuracy, the lawfulness of processing, or when you need us to retain the data for legal claims.

9.5 Right to Data Portability

You have the right to receive your personal information in a structured, commonly used, machine-readable format and to transmit that data to another service provider.

9.6 Right to Object

You can object to processing of your personal information for direct marketing purposes at any time. You can also object to processing based on legitimate interests by providing specific reasons related to your particular situation.

9.7 Right to Withdraw Consent

Where processing is based on your consent, you have the right to withdraw that consent at any time. This will not affect the lawfulness of processing before the withdrawal.

9.8 Right to Lodge a Complaint

You have the right to lodge a complaint with the Information Regulator (South Africa) or other relevant data protection authority in your country if you believe we have violated your privacy rights.

How to Exercise Your Rights:

To exercise any of these rights, please contact us using the details in Section 15 below. We will respond to your request within 30 days as required by POPIA. In some cases, we may need to verify your identity before processing your request.

10. Children's Privacy

DStv Stream is not intended for children under the age of 13, and we do not knowingly collect personal information from children under 13 without parental consent.

Age Verification:

Users must be at least 18 years old to create an account and subscribe independently
Users aged 13-17 may use the Service with parental or guardian consent
Children under 13 may only access the Service through a Kids Profile created and managed by a parent or guardian

Kids Profiles:

Kids Profiles have restricted content access based on age-appropriate ratings
Limited data collection: We collect only essential information such as viewing history for content recommendations
No marketing: Children under 13 will not receive marketing communications
Parental controls: Parents can manage viewing restrictions, screen time limits, and delete viewing history

If we discover that we have collected personal information from a child under 13 without proper parental consent, we will delete that information as quickly as possible. If you believe we have collected information from a child under 13, please contact us immediately at [email protected].

11. Cookies and Tracking Technologies

We use cookies, web beacons, pixels, and similar tracking technologies to enhance your experience, analyze usage, and deliver personalized content and advertising.

For detailed information about:

Types of cookies we use
How to manage cookie preferences
Third-party cookies and advertising
Other tracking technologies

Please see our comprehensive Cookie Policy.

12. Third-Party Links and Services

Our Service may contain links to third-party websites, applications, or services that are not owned or controlled by DStv Stream. This Privacy Policy does not apply to those third-party services.

Third-Party Services We Integrate:

Social Media Platforms: Facebook, Twitter, Instagram, YouTube (for sharing and social login)
Payment Providers: Stripe, PayPal, M-Pesa, MTN Mobile Money, Airtel Money
Analytics: Google Analytics, Firebase Analytics
Advertising: Google Ads, Facebook Ads (where applicable)
Customer Support: Intercom, Zendesk

We encourage you to review the privacy policies of any third-party services you access through our Service. We are not responsible for the privacy practices or content of these third-party services.

13. Marketing Communications

We may send you marketing communications about our services, new features, special offers, and promotional content if you have:

Provided your consent to receive marketing communications
Subscribed to our service (in which case we may send service-related marketing)

Types of Marketing Communications:

Email newsletters about new content and features
SMS notifications about special offers (with explicit consent)
Push notifications through our mobile app
In-app promotional messages
Social media advertisements

Opt-Out Options:

You can opt out of marketing communications at any time by:

Clicking the "unsubscribe" link in any marketing email
Adjusting notification settings in your account preferences
Replying "STOP" to SMS messages
Disabling push notifications in your device settings
Contacting us at [email protected]

Note: Even if you opt out of marketing communications, we will still send you essential service-related communications such as account notifications, billing information, and critical security updates.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes, we will:

Update the "Last Updated" date at the top of this policy
Notify you via email if the changes are significant (for registered users)
Display a prominent notice on our website and app
Request your consent if required by law

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of the Service after changes are posted constitutes your acceptance of the revised Privacy Policy.

You can view previous versions of our Privacy Policy by contacting us at [email protected].

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

DStv Stream Privacy Team

Email: [email protected]
General Inquiries: [email protected]
Phone: +27 11 123 4567 (Monday-Friday, 8:00 AM - 6:00 PM SAST)

Postal Address:

DStv Stream (Pty) Ltd
Privacy Department
123 Streaming Boulevard
Sandton, Johannesburg, 2196
South Africa

Data Protection Officer

Email: [email protected]
Phone: +27 11 123 4599

Regional Contacts:

Nigeria: [email protected] | +234 1 234 5678
Kenya: [email protected] | +254 20 123 4567
Ghana: [email protected] | +233 30 123 4567

Regulatory Authority (South Africa):

If you are not satisfied with our response or believe we are processing your personal information unlawfully, you have the right to lodge a complaint with:

Information Regulator South Africa
Email: [email protected]
Phone: +27 10 023 5200
Website: www.justice.gov.za/inforeg/

16. Additional Information for Specific Regions

South Africa (POPIA)

This Privacy Policy complies with the Protection of Personal Information Act, 2013 (POPIA). As a South African data subject, you have specific rights under POPIA, including those outlined in Section 9 of this policy.

Nigeria (NDPR)

For Nigerian users, we comply with the Nigeria Data Protection Regulation (NDPR). Your data is processed lawfully and with your consent where required.

Kenya (DPA)

We comply with the Kenya Data Protection Act, 2019. Kenyan users have the right to access, correct, and delete their personal data as outlined in this policy.

Ghana

We process personal data of Ghanaian users in accordance with the Data Protection Act, 2012 (Act 843) and guidelines from the Data Protection Commission.

European Economic Area (GDPR)

If you are located in the EEA, you have additional rights under the General Data Protection Regulation (GDPR), including enhanced data portability and more stringent consent requirements.

17. Legal Acknowledgment

By using DStv Stream's services, you acknowledge that:

You have read and understood this Privacy Policy
You consent to the collection, use, and disclosure of your personal information as described in this policy
You understand your rights regarding your personal information
You agree to our use of cookies and tracking technologies as described in our Cookie Policy
If you are creating an account on behalf of a minor (13-17), you have the authority to provide consent on their behalf

This Privacy Policy forms part of our Terms of Service and should be read in conjunction with those terms.

Thank you for trusting DStv Stream with your personal information. We are committed to protecting your privacy and providing you with an exceptional streaming experience.