BBC STUDIOS PRIVACY POLICY

The use of your personal information by the BBC Public Service, which is a publicly funded service in and for the UK and therefore operates differently to BBC Studios which is a commercially funded business. This includes the BBC website in the UK (bbc.co.uk), any UK BBC account (as explained in more detail below), UK public services that are not geo-restricted (such as BBC Bitesize and the BBC programme pages), and the international World Service language sites. It also includes personal information collected when you comment on BBC News and BBC Sport articles or send in your photos and videos to News teams. These are all covered by the BBC Public Service privacy policy, which you can view here.

Sometimes we link to other companies’ services, like articles published on other sites. Similarly, you might engage with our content and brands via another platform or company. For example, we publish our content on other platforms, like YouTube, Facebook and other social media, and news aggregators. These external services will have their own privacy policies which will apply to their collection and use of your personal information.

We also license our brands and content to other companies who produce their own websites, events, products and digital content. These companies are responsible for any personal information they collect about you in this context. Your personal information is not shared by these companies with BBC Studios unless it is a joint activity or you are otherwise informed that it will be shared. For example, if you have opted in to receive branded newsletters from us, your email address will be shared to enable us to send this to you as you have requested.

If you are a contributor to one of our programmes, the processing of your information by BBC Studios Productions is covered by its Contributor Privacy Policy, unless expressly indicated otherwise.

Employees, workers and contractors should refer to the BBC People Privacy Notice.

Candidates and applicants for roles at BBC Studios should refer to the BBC Careers Site Privacy Notice

When you use our services, register for a BBC account (outside the UK), submit comments or other content, attend one of our events or you otherwise interact with us (such as through social media platforms, our apps or engaging with our sales teams, responding to surveys), we will ask you for information relevant to the circumstances. If it isn’t obvious why we are asking for certain information, we will explain this to you at the time we collect it. 

We collect sensitive information about you - such as personal information concerning your race or ethnicity, political opinions, religion, health or sexual orientation - when it is relevant and necessary, and you have chosen to provide that type of personal information to us. For example, in response to research and surveys.

In section 3, we explain in more detail about the types of information we collect

When you use or receive services from us over the internet, we automatically record information about your use of those services, your interaction with our adverts and our emails as well as information about the device you are using and your internet connection. This is done through log data, cookies and similar technologies. See our Cookie Notice for more details.

We use information we know about you and how you use our services to predict things about you (“Inferred Information”). For example, we use data about what you read, how long you stay on a particular page, how often you visit, when you visit, and the type of device you use. We won’t infer sensitive information about you.

When you choose to participate in or receive a service from us via social media and similar third party platforms, for example by posting comments, interacting with us, signing up to a newsletter or entering a competition, we may collect information from you directly or the social network may share with us personal information about you depending on the privacy notice and any choices you have on that platform.  

We use specialist companies to provide us with information they hold about you or to collect information on our behalf.  For example:

• We use market research agencies to provide us with consumer insights to help shape BBC Studios programmes, products and services.
• We also use data from data brokers such as Experian mosaic data.
• We also collect information from social media platforms, for example when you engage with us on our social media accounts or mention our brands in your posts, we may collect your social media handles and the content of your posts to or about us.

BBC account underpins many of our services, including BBC.com and TopGear.com. The data we collect when you are signed in with a BBC account is used in a number of different ways. If you are in the UK and have a BBC account, when you sign-in to one of our branded services, BBC Public Service will share your account information with us to support the purposes described below. We use your BBC account to recognise you when signing into our services, including on new devices and applications. Connecting and understanding your usage across our services, allows us to make improvements and recommendations, and offer you a more seamless experience.

If you don't have an account, we’ll assign you a unique identifier which (subject to your cookie choices in your territory) will allow us to recognise you on a new device or through a different application. If you later create an account, we will connect this ID to your account ID to enable us to continue to personalise your experience.

Incognito mode (or private browsing) is a feature in web browsers that may help you to browse the internet without saving your browsing history, cookies and similar technologies, site data, or information entered in forms. If you are using incognito mode and do not wish to be tracked, you should not sign in to your BBC account as doing so will still enable us to link your activity to you as described above.

For example: to register and administer your account and, if you have one, your subscription; to fulfil an order; to invite you and arrange your attendance at an event you have registered for; to deal with your queries, submissions, feedback, requests or complaints; to manage competitions; to ask you to leave a review or take a survey; to send service-related communications, such as notifying you about changes to our terms or privacy policy; and for internal and statutory accounting and reporting.

Information we use:

• Name
• Email address
• Phone number
• Date of birth or age(if we need to verify age)
• Country (which may be declared by you or determined from your IP address)
• Transaction(s) and/or usage history
• Communication preferences
• Genre/content preferences
• Communication history

And, when you buy things or sign up for a paid subscription, we also collect:

• For physical goods (e.g. from BBC Shop): Billing and delivery address
• For subscriptions (e.g. BBC.com in the US): Zip code
• Payment card information (collected directly by our payment processors, we do not store anything other than the last 4 digits of your card number)

Our Lawful Basis:

• Our legitimate interests in keeping our records updated, to manage our services effectively, and ensure you have a good experience in using our services, to keep our records updated and to respond to communications you send to us.
• Performance of a contract with you when you have bought something from us, registered your account, signed up for our events, entered a competition or taken out a subscription.
• Legal obligation for certain statutory accounting and reporting.

For example: troubleshooting and testing; system maintenance, reporting, and data hosting; preventing fraud or other potentially illegal activities (including copyright infringement); blocking disruptive users and protecting the safety of users; and enforcing our terms of service.

Information we use:

• Device identifiers (e.g. IP address, user agent, and cookie IDs)
• Account ID
• Transaction(s) and/or usage history
• Log data

Lawful Basis: Our legitimate interests in running our business, provision of administration and IT services, network security, and to prevent fraud.

When you leave a comment on one of our services or share your photos and videos with us, we will collect and process the information you provide, and we may publish or share your content on our services or other platforms. Sometimes you might choose to share content with us via our social media pages or otherwise comment on social media about our brands (i.e. simply to show your love for our brands).  When you do this, we may contact you (via the relevant platform) to ask if we can publish or use your content on our services or other platforms.

We may use the information you provide, or your social media handle, to contact you if we want to find out more, to ask if we can use or share your content or to verify your age.

Before we can accept or use your content, you must ensure you have the consent of anyone else featured. We may ask you to provide your email address to verify your age and that you are the legal parent or guardian of any children who may be featured in the content, as may be applicable under section 8 of this Privacy Policy (“Children Using Our Services”).

If you contribute to the BBC’s editorial output on BBC.com, like BBC News, Sport or Radio (for example, if you comment on an article or send a photo or video to one of the News teams) this will be subject to the BBC Public Service privacy policy and terms, and not ours.

Information we use:

• Name
• Social media handle/username and contact details
• The content you submit, which may feature you and/or others
• Date of birth and/or age (e.g. for age verification)

Lawful Basis:

• Our legitimate interest in engaging with our audiences and promoting our brands and services.
• The performance of a contract and relationship between you and us.

In accordance with your preferences, we will send you newsletters you request and relevant offers and promotions relating to our content, brands and services and other companies in the BBC Studios group, like UKTV and Britbox International.

These communications may be personalised to you based on what we think may interest you.

You may need a BBC account to receive some newsletters and if you don’t have one, we will create one for you as part of the sign-up process.

You can unsubscribe from newsletters and marketing emails by clicking on the link in the footer of the relevant email.

We may also send notifications via your device or web browser, where you have specifically given permission when requested by your browser or device.

Information we use:

• Name
• Email address
• Age range and/or birthday (e.g. to send a birthday email)
• Broad location (e.g. city or country)
• Profile (e.g. your preferences and interests inferred from your interactions with our services)
• Transaction(s), usage history and interactions (e.g. what you viewed, when, and how often, whether you opened or clicked an email etc)
• Communication history
• Marketing and communications preferences

Lawful Basis:

• Consent to send you newsletters you are subscribed to.
• Our legitimate interests to promote our content, brands and services, and those of our partners, and to manage your preferences.

We use machine-learning based on aggregated usage data to recommend content we think you may be interested in. Data about your use of our services will be used to train the aggregate models used to create recommendations. We’ll also use an algorithm to decide when to show you prompts to register or subscribe, based on how likely we think you are to do so.

To provide a better and more relevant service, we personalise your experience across our services and the emails you receive, in accordance with your cookie preferences. To do this, we rely on the usage data described in the “BBC Accounts” section above.

Information we use:

• BBC account ID or device-level ID
• Contact details
• Age range and/or birthday
• Account registration details
• Broad location – e.g. city or country
• Device identifiers, which may include your device’s IP address, user agent, and cookie IDs (see the Cookies Notice for the service you are using to learn more).
• Transaction(s), usage history and interactions (e.g. what you viewed, when, and how often, whether you opened or clicked an email etc)
• Profile (e.g. your preferences and interests inferred from your interactions with our services)
• Log data

Lawful Basis:

• Our legitimate interests to promote our services and engage our consumers and audiences.
• Consent for the use of cookies, similar technologies and device identifiers in the UK/EEA.

We promote our shows and services on social media and other platforms subject to user settings and preferences on those platforms.

Personalised messages and promotions on third party sites and platforms: We use different forms of targeting:

1. Where allowed by law and/or according to your selected preferences, we may use information such as your email address and usage behaviour to show you relevant marketing and promotional posts on social media and other sites such as retail outlets. For example, if you consume a lot of sport content, we might promote a new sports newsletter to you on your social media feed. When we do this, an encryption technique is applied to the data so the other platform can only read the data that it already knows about you to create a match to show you the relevant marketing message. We also use this process to exclude you from marketing campaigns that are not relevant to you. For example, if you already have an account with us, we will use this information to exclude you from promotions about registration.
2. Sometimes we use IP address and usage information to establish a connection between our data and the data processed by social media platforms like Meta (Facebook and Instagram). This allows us to provide you with more relevant and tailored advertisements in your social media feeds and helps us track and measure how you interact with our advertisements on social media, ensuring that the content you see is more aligned with your interests.
3. Sometimes we use social media technologies to track users from our services to the third-party platforms subject to your preferences and settings.

If you have a BBC account, you can opt out from personalised messages on other sites.

General audience segmentation: We may also use the audience segmentation tools of the third party platform to help us find a suitable audience – for example, we may use some information about our existing users to find new audiences on third party platforms. When we do this, we only receive aggregated anonymous reports on the performance of these posts, no personal information is shared with us.

Any use of your information by third party platforms will be subject to their Privacy Policy and the preferences you have set for their platform(s).

Information we use:

For general marketing on social media, we use targeting tools available within the platform, such as to target a particular age band or location. Where we use your data to target particular audiences on third party platforms, we use the following data from your use of our services:

• Transaction(s), usage history and interactions (e.g. what you viewed, when, and how often, whether you opened or clicked an email etc)
• Device identifiers, which may include your device’s IP address, user agent, and cookie IDs (see the Cookies Notice for the service you are using to learn more)
• Profile (e.g. your preferences and interests inferred from your interactions with our services)
• Hashed email address (transformed into a unique identifier that is used to match our data to those known also by the platform)

Lawful Basis:

• Our legitimate interests to promote our services and engage our consumers and audiences on third-party platforms subject to your marketing preferences and/or BBC Account settings.
• Consent to receive newsletters and targeted advertising.

Our digital services feature advertising, including personalised advertising. This means the advertising you see is more relevant to you. It also means we can receive more revenue from our advertisers, allowing us to invest in our content. To create an ad profile for personalisation, unique identifiers (IDs) are used to tell your device apart from others – such as an ID stored by a cookie, or your Mobile Ad ID (a unique code set by your mobile operating system). We also use your BBC account information. For example, we may display adverts based on your age band or the country you registered in.

We sometimes use hashed identifiers created from email or IP addresses to facilitate this matching process. A hashed identifier is one which has been transformed into a unique string of characters using a mathematical process called hashing. This process makes the identifier unreadable and secure, and the original email address cannot be easily retrieved thereby matching data in a more privacy-friendly way. We and our advertising partners use hashed email addresses to match users across different platforms without sharing actual email addresses. This helps to securely deliver personalised ads based on user preferences and behaviour.

We will also show you ads relevant to the content you are consuming (contextual advertising). For example, if you are reading an article about travel then we might show you ads for airlines.

Our advertising is generally managed in three ways:

1. Premium in-house advertising

   We sell premium advertising space on our services directly to our advertising clients. This advertising is managed in-house driven by our own first party data that we collect from you or your device, subject to your privacy settings. This data includes registration information collected when you sign-up for our services (e.g. BBC Account), data based on what you consume on our services (e.g. articles read, adverts clicked on), technical information (e.g. browser, device and Internet Service Provider) and your location (at a country level). We use this data to create cohorts of users with shared characteristics (age, interests). These cohorts are then used to select relevant ads to show to you.

   We sometimes enable our clients to use their own customer data to personalise their ads. They may do this by matching data to their known customers or to look for ‘lookalike’ customers based on similar characteristics such as interests.  When we do this, we use specialist technologies to keep data separated and secure, such as hashed identifiers.

2. Automated advertising trading and personalisation

   We (and our clients) work with a range of companies to show you ads, both personalised and non-personalised. This includes specialist platforms and networks to:

   • sell our ad space in online auctions, e.g., ‘real-time bidding’
   • select and deliver the ads, and
   • collate and manage the data needed to personalise ads.

   Generally, these companies will be acting as separate data controllers or may be acting under the instruction of their advertiser client rather than us.

   Depending on your browser and cookie settings, we share the following data when ads are requested and delivered on our digital services:

   • IP address
   • Cookie IDs or Mobile Ad ID
   • Page URL
   • Device manufacturer, model and operating system
   • Browser type and version and preferences

   Advertising delivered via our service providers can also include the use of data that has been collated and synced across multiple sites and sources. This may include the advertiser client’s own marketing database, demographics (e.g. from data brokers and credit reference agencies), online cross-site browsing behaviour, social media data, and offline data (e.g. loyalty card and retail transactions). We do this to create “cohorts” of particular types of audiences, i.e., groups of people who share similar characteristics, habits or interests.

3. Advertising on third party services

   Sometimes we buy ad space on other websites and services to run ads for our advertisers. For example, we might show you an ad before a video on our social media channels. That ad could be personalised in the same way as when you use our services directly.

   We also run ads in the podcasts we publish on a variety of different platforms, such as Spotify, Audible and Apple Podcasts. Subject to applicable law, we allow third parties such as our service providers and those of our advertiser clients to directly collect aggregated data or other information that is not reasonably linkable to you personally, in order to measure the performance of the ads and the effectiveness of the campaigns. For example, whether you go on to listen to another podcast after hearing an ad for it within a different podcast.

   Ad personalisation settings

   On all of our services that show personalised ads, you can opt out of the personalisation at any time in a variety of ways:

   • By adjusting your browser settings,
   • By adjusting your cookie settings for the particular website/service you are using and/or
   • Disable the use of your email address for advertising in your BBC Account settings.

If you opt-out or make any changes to your browser settings, you may continue to see non-personalised and contextual ads.

Information we and our advertising partners use:

For general marketing on social media, we use targeting tools available within the platform, such as to target a particular age band or location. Where we use your data to target particular audiences on third party platforms, we use the following data from your use of our services:

• Hashed email address (transformed into a unique identifier that can be used to personalise advertising across the internet)
• Age range
• Broad location – e.g. city or country
• Advertising ID (IDs created by us for sharing with advertising platforms to personalise and measure advertising)
• Device identifiers, which may include your device’s IP address, user agent, and cookie IDs (see the Cookies Notice for the service you are using to learn more).
• Page URL and referrer URL (i.e. the page that sent you, or referred you, to the page featuring the relevant ad)
• Usage history and interactions (e.g. the ad shown to you, when it was shown, and whether you clicked on it)
• Ad Profile (e.g. demographics and interests inferred from your interactions with our services and elsewhere online)
• Log data
• Segmentation data from third parties (e.g. from data brokers and credit reference agencies like Experian)

Lawful Basis:

• Our legitimate interests to generate revenue to help fund services (including supporting the BBC Public Service in the UK) and to promote our brand partners.
• Consent for the use of cookies and similar technologies in the UK/EEA.

For example, analysing your use of our products and services, what kind of services you might use in the future, the effectiveness of our marketing and emails and our customer relationships and experiences. We use specialist measurement and IT service providers to help us to do this. We and the BBC Public Service may also do this to facilitate research and development and support product/content innovation.

We use machine learning, large language models and algorithms to derive meaning from our data, to segment our audiences (for example based on demographics and frequency of visits) and to create new products and services. We may use Inferred Information to do this.

BBC Public Service tracks usage across BBC.com so it can report on how the BBC serves audiences globally to show it is fulfilling its public purposes, and for editorial purposes. This is subject to the BBC’s own privacy policy.

Information we use:

• Device identifiers, which may include your device’s IP address, user agent, and cookie IDs (see the Cookies Notice for the service you are using to learn more)
• Page URL and referrer URL (i.e. the page that sent you, or referred you to our service)
• Transaction(s), usage history and interactions (e.g. what you viewed, when, and how often, whether you opened or clicked an email etc)
• Demographics, such as gender, age range, interests (e.g. through market research)
• Log data

Lawful Basis:

• Our legitimate interests in studying how customers use our products and services, to keep our services updated and relevant, to develop our business and to inform our marketing strategy.
• Consent where your personal information is shared/disclosed directly in response to a research questionnaire/survey.
• Consent for the use of cookies and similar technologies in the UK/EEA.

We may use specialist agencies to carry out market research on our behalf. When we do this, the agencies usually just share information with us which does not identify individuals. If this is not the case (for example because you appear in a video or a name is included alongside a comment), then this would be explained to you before you participate.

If we are carrying out our own research, we may directly collect some information from you in order to facilitate the project, e.g., name, contact details and demographic information.

We also carry out research relating to actors and public figures and when we do this, we will receive information about public opinion of such people.

Information we use:

• For consumers and audiences: Sometimes a first name and age/location, but generally no identifiable information unless otherwise explained to you at the time you take part.
• For public figures: name and public opinions and perceptions about them.

Lawful Basis:

• Our legitimate interest to better understand how our brands and on-screen talent are perceived and to engage with our customers and audiences.

When you post about us, our brands or programmes on social media, we may collate and report on this using a specialist platform so that we can better understand public perception of our brands. This is sometimes known as “social listening”.

Information we use:

• Social media username/handle
• Post contents

Lawful Basis:

• Our legitimate interest to better understand how our brands are perceived and to engage with our customers/audiences.
• If you choose to include sensitive information then we rely on the fact that this has been manifestly made public when you choose to share your personal information publicly on social media.
• Where we propose using your personal information for any other uses or for any other lawful basis, we will ensure that we notify you first and get your consent as appropriate.

To improve your experience of our services and brands, and to enable us to cross-promote our services, your information may be shared between companies in the BBC group (including BBC Public Service and BBC Studios companies such as UKTV and Britbox International) for the purposes of research, analysis, marketing and ad-serving. Wherever possible this information will be anonymised or aggregated.

In addition, the different companies within the BBC Studios group and the BBC Public Service provide data processing services to each other. For example, most of our newsletter subscription services are managed by a team in the BBC Studios Distribution UK headquarters on behalf of the group. As explained in section 3 above, the BBC account service is managed by BBC Public Service in the UK. If you are in the UK and register for an account with one of the commercial services run by us, BBCS Public Service will therefore share a copy of your data with us. Read more about data sharing by BBC Public Service.

We use third parties to perform business functions on our behalf, such as sending our newsletters, hosting our online services, providing our customer services and fulfilling product orders and processing payments. Our suppliers must comply with our instructions, and not use your personal information for their own business purposes.

Some of our online services include embedded content from social media platforms. If you allow cookies and similar technologies for social media content, they will receive information about the consumption of content shown from their services. This will be subject to the privacy policy of the relevant platform and your privacy settings with their service.

We work with third parties who use cookies and similar technologies to provide a variety of services to us, including to: measure and analyse use of and engagement with our services and emails; deliver and personalise our online marketing and third-party advertising on our services.  These companies may be independently making decisions about how and why your personal information is processed, meaning they are a separate “Data Controller”. To learn more, please read the Cookies Notice provided for the service you are using.

Where required or allowed by law, we may disclose your personal information to law enforcement agencies, government/regulatory bodies, internet service providers and content protection organisations without your consent. For example, if you post inappropriate or objectionable content on our services or where we reasonably believe you may be in breach of the law or there is a safety concern, we may report your content and behaviour to relevant parties.

We reserve the right to transfer your personal information in the event we sell or transfer all or a part of our business or assets so that the buyer can continue to offer you the services. We will make reasonable efforts to provide you with advance notification of the transfer of your information in such circumstances.

If you wish to stop receiving marketing communications from us, please click on the "unsubscribe" link at the bottom of the relevant email. This link will enable you to unsubscribe from the newsletter or will take you to a preference centre. Please note that you cannot unsubscribe from some service-related messages (which are not used to send marketing materials).

In accordance with industry standards, we reserve the right to retain a minimal amount of data necessary to ensure we do not contact you in the future – for example by adding your email address to a ‘suppression list’.

The choices you have around consents and opting out may vary from territory to territory but will be presented on the relevant website or app. A link is available in each website footer or app settings, which is labelled as ‘cookie settings’, ‘do not share or sell my info’, or similar.

You can also choose how cookies (across all websites) are handled on your device via your browser settings. Some browsers also have a setting called Do Not Track, which sends a signal to websites asking them not to track you. However, as there isn’t a common standard for interpreting this signal, our websites do not respond to them. Instead, you should use the settings described above.

Your selections are specific to the device, website, and browser you are using. Your selections may be deleted whenever you clear your cookies or browser’s cache.

You can also disable the sharing of your encrypted/hashed email address for marketing and advertising purposes in your BBC Account settings.

Please see the Cookies Notice for more information about the technologies we use and the options available to you.

You can request to confirm what information we hold about you and can receive a copy of it. When submitting a request, please provide us with enough information to enable us to locate your record(s), including the email address we may hold for you and the details of the service you use.

You will not have to pay a fee to access your personal information (or to exercise any of the other rights detailed below). However, we may be entitled to charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we may refuse to comply with your request in these circumstances.

We will process your request within applicable legal timeframes. For the UK and the EEA, this is one calendar month, but we can extend this time if your request is particularly complicated or large.

Request information about your BBC account: To see what information exists about your BBC account and activities, you can make a request via your account.

You can request to correct any incomplete or inaccurate personal information we hold about you, though we may need to verify the accuracy of the new data you provide to us.

If you have a BBC account: You can update your “personal details” in your account settings.

You can ask us to delete information we hold about you.  For example, when we no longer need it because you initially gave us consent and you wish to withdraw it. Sometimes we may not be able to delete your information because

(i) we are legally required to keep it; or (ii) we need it for our own legitimate business purposes, for example if you were to unsubscribe from an email list, we would need your email address to add to a suppression list to ensure you were not contacted. Where applicable, we will explain the reasons for refusing your request.

If you have a BBC account: You can delete your BBC account at any time, unless you have an active subscription. If you have a subscription, you need to cancel this before we’ll let you delete your account. Deleting your account will erase any personal information we have about you. Any data about how you’ve used the BBC online will be made anonymous.

You can ask us to stop using your information for direct marketing purposes (see communication preferences).  You can also ‘object’ to us processing your information where we are relying on a legitimate interest. In some cases, we may demonstrate that we have compelling legitimate grounds to process your information which override your rights and freedoms.

You can ask us to suspend the processing of your personal information if you are concerned about its accuracy or how it is being used.  You can also ask us not to delete your information (for example because you need it to establish, exercise or defend legal claims).

This right only applies to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you.

Specifically, you may ask what personal information has been collected, how and why it is processed, the categories of parties who have access to that information, the applicable retention period, and the source of personal information if it was collected from a third party. Delaware, Minnesota, and Oregon residents may also request a list of third parties (as defined in applicable law) to whom we have disclosed personal data.

When you use our services, third parties may use personal information obtained from or in connection with your activities on our services and across unaffiliated sites to show more relevant advertising to you. This may include the categories of personal information described in sub-section 7 of Section 3 above. In certain jurisdictions, these activities may be considered a “sale, “sharing”, or “targeted advertising”.

You can request that we stop using or sharing your personal information for such targeted advertising; you can also request that we not “sell” or “share” your personal information. By, “sell”, we mean the sale of your personal information to an outside party for monetary or other valuable consideration. By “share”, we mean the disclosure of your personal information to third parties for their own marketing purposes or for cross-context behavioural advertising purposes, subject to certain exceptions under applicable law.

If you would like to opt out of behavioural or targeted advertising, follow the instructions in the Change your settings for cookies and similar technologies section above. You can also communicate your preference by sending a Global Privacy Control signal, on browsers or browser extensions that support such a signal.

We do not knowingly “sell” or “share” the personal information of minors under 16 years of age.

If you have raised a concern with us and feel we have not resolved it, you have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk).

If you think that some, or all, of the issues you are concerned about have taken place in your country or state of residence, you can complain to your local data protection and/or privacy regulator. For contact details of national data protection regulators in the EU, please refer to the European Data Protection Board website.

California residents have the right to receive notice of certain of our privacy practices, including the categories of personal and sensitive personal information we may collect, the purpose for which we collect or use such information, whether such information is “sold” or “shared” (as those terms are defined in California law), and how long such information is retained. You can find those details in in this Privacy Policy by clicking on the links in this paragraph. You can make requests regarding your personal information as described in Section 9.

Do Not Sell or Share My Personal Information: follow the instructions here to exercise your right to request that we not “sell” or “share” your personal information as such terms are defined in applicable California law.

California Shine the Light: California residents may request one time each year if we have disclosed your personal information to third parties for their own direct marketing purposes. While do not generally disclose your personal information as defined in California’s “Shine the Light” law, you may opt out of such sharing by emailing us at dataprotection@bbc.com and indicating that you are a California resident making a “Shine the Light” inquiry.

Residents of other U.S. states with data privacy laws (including, for example, residents of Colorado, Connecticut, Delaware, Iowa, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Tennessee, Texas, Utah or Virginia), have certain rights with respect to your personal information. The scope of these rights are covered by the rights and choices set out in Section 9. We make these available to all, regardless of their location, except where indicated.

We use service providers, and share data with advertising platforms, that are located outside Canada and the Province of Quebec, primarily in the USA. For more information about our policies and procedures regarding transferring personal information outside of Canada, including with our service providers, please contact us using the information outlined at Section 11.

If you are a resident in Canada, you also have the following additional rights regarding your personal information:

Right to withdraw consent. In Canada, subject to any exemptions, express or implied consent is the legal basis upon which organisations may collect, use and disclose personal information. Accordingly, subject to any exemptions, personal information will only be collected, used, and/or disclosed by us for the purposes described above in this policy, with your express or implied consent, as applicable.

Where you have provided your consent to the collection, use, and disclosure of your personal information, you may have the legal right to withdraw your consent under certain circumstances. Please note that if you withdraw your consent, we may not be able to provide our services to you, or your user experience may not be as useful or enjoyable. We will explain the impact to you at the time to help you with your decision.

You may also refuse the collection of certain personal information by opting for:

• In-person inquiries instead of email.
• Refusing cookies, though this may affect certain site functionalities

Exercising your rights: If you wish to contact us to exercise any of your privacy rights or have any queries about how we use your personal information, please see Section 9.