Privacy Notice
How XtreamUK proposes to handle account, device, support and website information for UK customers.
Who we are
XtreamUK is the controller for personal information handled through xtreamuk.com and the XtreamUK software service, except where a clearly identified third party acts as its own controller. Before launch, insert the company’s registered legal name, registration number and service address.
Information we collect
Depending on the service configuration, we may process account identifiers, contact details, plan and transaction references, device and session information, support messages, security logs, consent preferences and limited diagnostic data. We should not collect passwords for connected third-party services or full payment card details.
Why we use information
Information may be used to create and secure accounts, provide requested software functionality, administer billing, respond to support, prevent misuse, meet legal duties and improve reliability. Each purpose must be mapped to an appropriate lawful basis, such as contract, legal obligation, legitimate interests or consent.
Cookies and device storage
Essential browser storage may remember colour theme, security state and privacy choices. Non-essential analytics, advertising or similar storage technologies should remain disabled until a compliant choice is made where consent is required. See the Cookie Notice.
Sharing and processors
We may use carefully selected providers for hosting, email, customer support, analytics and payment processing. Contracts should restrict each processor to documented instructions and require appropriate security. The live notice must identify categories and, where useful, named providers.
International transfers
If information is transferred outside the United Kingdom, XtreamUK should use a recognised transfer mechanism and assess relevant safeguards. The live notice must reflect the actual provider locations and legal mechanism.
Retention
Personal information should be retained only for defined operational, security, tax, dispute and legal periods. A documented retention schedule should distinguish active account data, support records, security logs and suppression lists.
Your rights
Depending on the circumstances, UK data protection law may give you rights to access, correct, erase, restrict or object to processing, receive portable data and withdraw consent. Some rights are qualified. Contact privacy@xtreamuk.com to make a request.
Data-protection complaints
XtreamUK should maintain a documented process for receiving, investigating and responding to data-protection complaints. You can contact us through the support form. You may also have the right to complain to the UK Information Commissioner’s Office.
Security and changes
We use proportionate technical and organisational measures, including access controls, secure session design and monitored service providers. No online service can promise absolute security. We may update this notice when products, providers or legal requirements change and will publish a revised date.