This policy explains what personal data Videobox collects, why, the legal bases we rely on, how long we keep it, and the rights you have. The data controller is Kaadrivara OÜ.
1.Who we are
The controller is Kaadrivara OÜ, Herne tn 24-10, 10135 Tallinn, Estonia. For any privacy question or to exercise your rights, contact [email protected].
2.What we collect & why
| Category | Examples | Purpose | Legal basis |
|---|---|---|---|
| Account data | Email, password hash, plan | Create and run your membership | Contract |
| Billing data | Subscription status, transaction references | Process payments, renewals, refunds | Contract / legal obligation |
| Usage data | Pages viewed, playback events, device/browser type | Operate and secure the Service; understand what's watched | Legitimate interest / consent (analytics) |
| Support data | Emails you send us | Respond to enquiries | Legitimate interest |
| Cookie data | See the Cookies page | Essential function; analytics/ads only with consent | Consent (non-essential) |
3.How we use it
We use your data to provide the Service, process billing, respond to support, keep the platform secure, and — only where you consent — measure usage. We do not sell your personal data.
4.Processors & sharing
We share data only with processors that help us run the Service (for example, hosting and, once integrated, a payment processor). Each acts under a data-processing agreement and only on our instructions. We will name the payment processor here and on the Cookies page once it is actually connected. We do not currently load third-party analytics or advertising scripts unless and until you consent to them.
5.International transfers
Where a processor is outside the EEA, we rely on appropriate safeguards such as Standard Contractual Clauses.
6.Retention
Account and billing records are kept for the life of your membership and for as long as required by Estonian accounting and tax law afterward. Usage and analytics data are kept only as long as needed for the purpose, then aggregated or deleted. Support emails are kept while relevant to your relationship with us.
7.Your rights
Under EU data-protection law you may request access, rectification, erasure, restriction, portability, and object to processing based on legitimate interest. Where we rely on consent, you may withdraw it at any time. To exercise any right, email [email protected]. You may also lodge a complaint with the Data Protection Inspectorate (Andmekaitse Inspektsioon) or your local authority.
8.Security
We use SSL encryption in transit, hashed passwords, and access controls. No system is perfectly secure, but we take reasonable technical and organisational measures to protect your data.
9.Children
Videobox is not directed at children and is intended for adults. We do not knowingly collect data from children.
10.Changes & contact
We will update this policy as the Service evolves and revise the effective date above. Questions: [email protected].