Version 1 · effective 1 January 2026
Draft — requires review by a UK solicitor before launch.
Privacy Policy
Silux Control UK Ltd T/A Silux Media ("Silux Media", "we") is the controller of the personal data described here. Company number <SET IN ADMIN>, Prospect House, Staveley, Chesterfield, S43 3QE, United Kingdom. Contact: info@siluxmedia.com.
What we collect
| Data | Where it comes from | Why | Lawful basis (UK GDPR) |
|---|---|---|---|
| Name, email, password (stored only as a secure hash), country, address, VAT number | You | Running your account and billing | Contract |
| Payment card details | You, via our payment processor (Stripe) | Taking payments | Contract — we never see or store full card numbers |
| Invoices, payments, refunds | Generated by us | Billing and tax records | Legal obligation (HMRC requires 6 years) |
| Server details: server name, software version, last check-in time, plan usage (viewing hours, relay data) | Your Silux Media server | Licensing, plan limits, preventing abuse | Contract; legitimate interests |
| Relayed streams (Plus/Pro, only when a direct connection isn't possible): the stream is encrypted end to end between your app and your own server; our relay forwards the encrypted bytes and cannot read them. We record the amount of data per server and the connecting IP address for routing | Your server and your app | Providing managed remote access; enforcing the fair-use allowance | Contract |
| Security signals: IP address, browser user agent, reCAPTCHA risk score | Your browser and Google reCAPTCHA | Protecting sign-in and forms from bots and fraud | Legitimate interests |
| Legal acceptances (which terms version, when, IP) | You | Proving what you agreed to | Legal obligation; legitimate interests |
| Newsletter subscription and consent record | You | Sending the newsletter you asked for | Consent |
| Cookie choices | You | Remembering your choices | Legal obligation (PECR) |
Self-hosted plans: your media library stays on your own server. We do not receive your films, shows or viewing history. Hosted plans: we process Your Content and viewing data on your behalf as a processor under our Data Processing Agreement.
Who we share it with
We use these processors, each under a contract that protects your data:
- Stripe — card payments and refunds.
- Google (reCAPTCHA) — bot protection on sign-in and forms.
- Our email provider — account and billing emails.
- Our hosting provider — runs our servers in the UK/EU.
We do not sell your personal data.
International transfers
Where a processor handles data outside the UK, we rely on UK adequacy regulations or the International Data Transfer Agreement / Addendum to the EU Standard Contractual Clauses.
How long we keep it
- Account data: while your account is open, plus 30 days.
- Invoices and payment records: 6 years from the end of the financial year (HMRC).
- Security logs: up to 12 months.
- Newsletter consent records: for as long as you're subscribed, plus 2 years.
Your rights
You can ask for access to, correction of, deletion of, or a copy of your personal data, and you can object to or ask us to restrict processing. You can download your account data and request deletion from your account settings, or email info@siluxmedia.com. You can withdraw newsletter consent at any time with the unsubscribe link. If you're unhappy, you can complain to the Information Commissioner's Office (ico.org.uk).
Children
Silux Media is not intended for children under 18. We don't knowingly collect their data.
Changes
If we make material changes we will tell you and ask you to review them when you next sign in.