1 Introduction
StarWave Entertainment ("we," "our," or "us") is dedicated to respecting your privacy and protecting your personal data. This Data Protection & Security Policy outlines how we collect, use, process, and safeguard information when you engage with our entertainment platforms, services, and live events.
We comply with applicable data protection laws, including but not limited to the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other relevant regional regulations.
💡 Our Promise: We will never sell your personal data to third parties for marketing purposes. Your privacy is the foundation of our relationship with you.
2 Data We Collect
We only collect data that is necessary for providing our entertainment services. The types of information we may collect include:
2.1 Personal Information
- Name, email address, and contact details
- Account credentials and preferences
- Payment information (processed securely via encrypted third-party providers)
- Profile pictures and biographical details
2.2 Usage Data
- Watch history, ratings, and recommendations
- Device information and IP addresses
- Browsing behavior and interaction logs
- Event attendance and ticket purchase history
2.3 Sensitive Data
We do not knowingly collect sensitive personal data (such as racial origin, political opinions, or health information) unless explicitly required for specific services and with your explicit consent.
3 How We Use Your Data
Your data is used exclusively to enhance your entertainment experience:
- Service Delivery: Providing streaming access, event tickets, and account management.
- Personalization: Tailoring content recommendations and user interfaces to your preferences.
- Communication: Sending service updates, security alerts, and promotional content (with opt-out options).
- Analytics: Improving our platforms through aggregate usage analysis.
- Legal Compliance: Meeting regulatory obligations and protecting against fraud.
4 Security Measures
StarWave Entertainment employs industry-leading security protocols to protect your data from unauthorized access, alteration, disclosure, or destruction.
End-to-End Encryption
All data in transit is encrypted using TLS 1.3 and AES-256 encryption standards.
Access Control
Strict role-based access controls and multi-factor authentication for internal systems.
Regular Audits
Annual third-party security audits and penetration testing to identify vulnerabilities.
ISO 27001 Certified
Our information security management system meets international ISO 27001 standards.
In the event of a data breach, we commit to notifying affected users and relevant authorities within 72 hours as required by law.
5 Data Sharing & Third Parties
We may share your data only with trusted service providers necessary for our operations:
- Cloud Infrastructure: Secure hosting and storage partners.
- Payment Processors: PCI-DSS compliant financial institutions.
- Analytics Providers: Tools to improve platform performance (data anonymized).
- Legal Authorities: When required by law or to protect our rights.
All third-party partners are bound by strict data processing agreements that mandate the same level of protection as outlined in this policy.
6 Your Rights
Depending on your jurisdiction, you have the following rights regarding your personal data:
- Access: Request a copy of the data we hold about you.
- Rectification: Correct inaccurate or incomplete information.
- Erasure: Request deletion of your data ("Right to be Forgotten").
- Portability: Receive your data in a structured, machine-readable format.
- Restriction: Limit how we process your data.
- Objection: Opt out of processing based on legitimate interests or direct marketing.
To exercise any of these rights, please contact our Data Protection Officer using the details below. We will respond to all legitimate requests within 30 days.
8 International Data Transfers
As a global entertainment company, we may transfer data across borders. We ensure that such transfers comply with applicable laws through:
- Standard Contractual Clauses (SCCs) approved by the European Commission.
- Data residency options where legally required.
- Regular assessment of international privacy frameworks.
9 Contact Us
If you have questions about this policy, wish to exercise your rights, or report a privacy concern, please contact our Data Protection team.