Effective Date: April 22, 2025
Policy ID: NYXSCPP.25.2
SECTION 1: OVERVIEW & SCOPE
This Privacy Policy explains how NYX TV and Scream TV (together referred to as “we” or “ourteam”) handle your personal information when you use our services. ("Personal Information") of individuals ("you," "your," or "User") who access or interact with our ad-supported video-on-demand (AVOD) and free ad-supported streaming television (FAST) services ("Services").
This Policy applies to Personal Information collected through:
- Smart TV platforms (e.g., Samsung TV Plus, LG Channels, VIZIO WatchFree+)
- Streaming devices (e.g., Roku, Fire TV, Apple TV, Android TV)
- Mobile applications (iOS and Android)- Web platforms (e.g., nyxtv.co.uk, scream-tv.com)
- Third-party FAST aggregators (e.g., DistroTV, Plex, Freevee)
- Offline interactions (e.g., customer service, event sign-ups)
Personal Information includes but is not limited to: full name, email address, IP address, device identifiers, geolocation, browsing behavior, and any content or metadata linked to your engagement with our Services.
This Policy covers both registered and anonymous users and applies regardless of the platform or device used.
SECTION 2: REGIONAL COMPLIANCE
We comply with relevant privacy and data protection laws in all jurisdictions where our Servicesare available, including:
Canada (PIPEDA & Quebec Law 25)- Consent-based collection, use, and disclosure
- Rights to access, correction, and data minimization
- Appointed Privacy Officer to ensure accountability
- Retention aligned with statutory guidelines (typically 7 years or less)
United States (Federal and State)- CCPA, CPRA, VCDPA, and other applicable laws
- Consumer rights to access, correct, delete, and opt-out
- "Do Not Sell or Share My Personal Info" tools provided
- Non-discrimination for exercising privacy rights United Kingdom (UK GDPR & Data Protection Act 2018)
- Full rights under GDPR including access, rectification, erasure, objection, portability
- Adequacy mechanisms for cross-border transfers- User rights exercised via [privacy@scream-tv.com]
European Union (EU GDPR)
- Lawful basis for processing (consent, contract, legal obligation, legitimate interest)
- Data Protection Impact Assessments conducted where high-risk processing is involved
We monitor evolving laws (e.g., U.S. state laws, India's DPDP Act, EU Digital Services Act) andupdate this Policy accordingly.
SECTION 3: PLATFORM-SPECIFIC INFORMATION COLLECTION
We collect Personal Information based on platform-specific integrations:
Roku
- Device IDs, IP, session metadata, and content analytics
- Sharing with Roku for performance and ad measurement
Amazon Fire TV
- Amazon-assigned device identifiers, usage logs, DSP-level ad engagement
- Integration with Amazon’s advertising platform
Smart TVs (Samsung, LG, VIZIO)
- Aggregated viewership data (e.g., tuning behavior, session time)
- Region-based content analysisWeb & Mobile Apps
- Personal identifiers, device/browser metadata, geolocation
- SDKs (e.g., Google Analytics, Firebase, Adjust) used for behavioral tracking
- Tracking respects system- and browser-level user preferences
Cross-Device and Session Linking
- We may associate user behavior across platforms and devices to personalize your experience and maintain session continuity.
SECTION 4: PURPOSES FOR DATA PROCESSING
We process Personal Information for the following purposes:
- Service Provision: Deliver and maintain the Services
- Contractual Fulfillment: Process subscriptions, access controls, support
- Marketing and Advertising: Display personalized ads, build lookalike audiences
- Profiling and Recommendations: Generate custom content suggestions- Legal Obligations: Comply with subpoenas, audits, regulatory investigations- Security and Anti-Fraud: Prevent unauthorized access and service misuse
- Analytics and Reporting: Improve content strategy, uptime, and engagement
Processing is based on lawful grounds: your consent (where required), performance of a contract, legal obligation, or our legitimate interests.
SECTION 5: DATA DISCLOSURE
We disclose Personal Information as follows:
- Affiliates & Subsidiaries: Operational and administrative use
- Vetted Service Providers: Hosting, analytics, marketing, customer support
- Ad & Analytics Networks: Campaign measurement and optimization (e.g., Google Ad Manager,The Trade Desk)
- Government Authorities: If legally compelled or in response to valid requests
- Corporate Transactions: In the case of acquisition or restructuring
Where required (e.g., CCPA), users are provided opt-out mechanisms for disclosures considered“sales” or “shares.”
SECTION 6: DATA SUBJECT RIGHTS
Depending on jurisdiction, you may:
- Access your Personal Information
- Correct inaccurate data
- Request deletion (with exceptions)
- Restrict or object to processing
- Opt-out of profiling or automated decisions
- Withdraw consent at any time
- Request data portability
How to exercise your rights:
Submit requests via email (Section 12). We may require ID verification and will respond within the timeframe mandated by applicable law (typically 30 days).
SECTION 7: COOKIES AND TRACKING
We use cookies and similar technologies for functionality, analytics, and marketing:
- Essential Cookies: Required for login and streaming access
- Analytics Cookies: System health, usage patterns
- Functional Cookies: Save preferences, accessibility options
- Marketing Cookies: Behavioral targeting, ad frequency capping
User Control:
Cookie settings can be managed in-browser, in-app, or via a Consent Management Platform(CMP) such as OneTrust or Cookiebot. We honor Global Privacy Control (GPC) and Do NotTrack (DNT) where supported.
SECTION 8: CHILDREN’S PRIVACY
Our Services are not directed to children under the age of:- 13 (United States)- 16 (European Union/UK)- 14 (Quebec)We do not knowingly collect data from minors without verified parental consent. Any discovereddata will be securely deleted.
SECTION 9: DATA RETENTION AND DELETION
We retain Personal Information only as long as required for:
- Legal and regulatory compliance
- Service delivery and contract fulfillment
- Fraud detection and dispute resolutionTypical retention windows:- User account data: 2–7 years post-deactivation- Analytics data: 24 months- Advertising logs: 13 months Deletion requests are honored unless legal exceptions apply.
SECTION 10: CROSS-BORDER DATA TRANSFERS
We operate across jurisdictions and may transfer your data to locations outside your homecountry.
Transfer Mechanisms:
- Standard Contractual Clauses (SCCs)
- UK Addendum and International Data Transfer Agreement (IDTA)
- Vendor-level Data Processing Agreements- Encryption, pseudonymization, and access controls
A list of key subprocessors and their jurisdictions is available upon request.
SECTION 11: SECURITY & BREACH NOTIFICATION
We implement safeguards including:
- TLS/SSL encryption- Role-based access control
- Continuous monitoring and intrusion detection
- Periodic audits of vendor security practices
Breach response:
In the event of a data breach affecting your Personal Information, we will notify you within legally required timelines (e.g., 72 hours under GDPR), including relevant details and remediation steps.
SECTION 12: CONTACT INFORMATION
Privacy Officer
NYX TV / Scream TV
Canada/US: privacy@screamtv.com
UK/EU: privacy@nyxtv.com
Mail: 4811 - 211 Street NW, Edmonton, AB, Canada, T6M 0J6
For unresolved issues, you may contact your local Data Protection Authority.
SECTION 13: POLICY CHANGES
We regularly review and update this Policy to reflect changes in our practices, technologies, legalrequirements, or other factors. Any major updates will be communicated through our platforms.Material updates will be communicated via the Services or directly to you. You can always findthe most up-to-date version of this Privacy Policy on our websites, easily accessible from thefooter or menu:
- NYXTV.co.uk/privacy
- scream-tv.com/privacy
