| 34 | 34 | |
| 35 | 35 | **What's not covered in this policy?** |
| 36 | 36 | |
| 37 | 37 | - **BBC Public Service:** The use of your personal information by the BBC Public Service, which is a publicly funded service in and for the UK and therefore operates differently to BBC Studios which is a commercially funded business. This includes the BBC website in the UK (bbc.co.uk), any UK BBC account (as explained in more detail below), UK public services that are not geo-restricted (such as BBC Bitesize and the BBC programme pages), and the international World Service language sites. It also includes personal information collected when you comment on BBC News and BBC Sport articles or send in your photos and videos to News teams. These are all covered by the BBC Public Service privacy policy, [which you can view here](https://www.bbc.co.uk/usingthebbc/privacy-policy/). |
| 38 | 38 | - **Linked Services:** Sometimes we link to other companies' services, like articles published on other sites. Similarly, you might engage with our content and brands via another platform or company. For example, we publish our content on other platforms, like YouTube, Facebook and other social media, and news aggregators. These external services will have their own privacy policies which will apply to their collection and use of your personal information. |
| 39 | 39 | - **Third-Party Services**: We also license our brands and content to other companies who produce their own websites, events, products and digital content. These companies are responsible for any personal information they collect about you in this context. Your personal information is not shared by these companies with BBC Studios unless it is a joint activity or you are otherwise informed that it will be shared. For example, if you have opted in to receive branded newsletters from us, your email address will be shared to enable us to send this to you as you have requested. |
| 40 | | - **Contributors:** If you are a contributor to one of our programmes, the processing of your information by BBC Studios Productions is covered by [**its Contributor Privacy Policy**](https://productions.bbcstudios.com/privacy-policy), unless expressly indicated otherwise. |
| 40 | - **Contributors:** If you are a contributor to our content, the processing of your information is covered by [BBC Studios Contributor Privacy Policy](https://productions.bbcstudios.com/privacy-policy), unless expressly indicated otherwise. |
| 41 | 41 | - **Employees:** Employees, workers and contractors should refer to the BBC People Privacy Notice. |
| 42 | 42 | - **Candidates:** Candidates and applicants for roles at BBC Studios should refer to the BBC [Careers Site Privacy Notice](https://careers.bbc.co.uk/content/BBC-Careers-Privacy-Notice/). |
| 43 | 43 | |
| 44 | 44 | ## 2. HOW WE COLLECT INFORMATION ABOUT YOU |
| 45 | 45 | |
| 46 | 46 | The types of information we collect depends on the circumstances and the service you are using. We may collect information relating to you and/or your use of our services in the following ways: |
| 74 | 74 | ## 3. HOW WE USE YOUR INFORMATION |
| 75 | 75 | |
| 76 | 76 | Depending on which of our services you are using, or how you are otherwise interacting with us, we use your information in ways which are consistent with our relationship with you (i.e. as a consumer or in a business context). In this section, we have set out a description of the ways we use your personal information and the types of data this includes. Under UK and European data protection law, we are required to tell you our "lawful basis" for processing your personal data and we have included this in each description. For Canadian residents, please review the additional information at section 12 of this policy, to learn about our consent practices and your rights to withdraw consent, depending on the circumstances. |
| 77 | 77 | |
| 78 | 78 | **BBC accounts** |
| 79 | 79 | |
| 80 | | BBC account underpins many of our services, including BBC.com, BBC Shop and TopGear.com. The data we collect when you are signed in with a BBC account is used in a number of different ways. If you are in the UK and have a BBC account, when you sign-in to one of our branded services, BBC Public Service will share your account information with us to support the purposes described below. We use your BBC account to recognise you when signing into our services, including on new devices and applications. Connecting and understanding your usage across our services, allows us to make improvements and recommendations, and offer you a more seamless experience. |
| 80 | BBC account underpins many of our services, including BBC.com and TopGear.com. The data we collect when you are signed in with a BBC account is used in a number of different ways. If you are in the UK and have a BBC account, when you sign-in to one of our branded services, BBC Public Service will share your account information with us to support the purposes described below. We use your BBC account to recognise you when signing into our services, including on new devices and applications. Connecting and understanding your usage across our services, allows us to make improvements and recommendations, and offer you a more seamless experience. |
| 81 | 81 | |
| 82 | 82 | If you don't have an account, we'll assign you a unique identifier which (subject to your cookie choices in your territory) will allow us to recognise you on a new device or through a different application. If you later create an account, we will connect this ID to your account ID to enable us to continue to personalise your experience. |
| 83 | 83 | |
| 84 | 84 | Incognito mode (or private browsing) is a feature in web browsers that may help you to browse the internet without saving your browsing history, cookies and similar technologies, site data, or information entered in forms. If you are using incognito mode and do not wish to be tracked, you should not sign in to your BBC account as doing so will still enable us to link your activity to you as described above. |
| 85 | 85 | |
| 86 | 86 | _**Purposes for which we will use your information**_ |
| 361 | 361 | We use third parties to perform business functions on our behalf, such as sending our newsletters, hosting our online services, providing our customer services and fulfilling product orders and processing payments. Our suppliers must comply with our instructions, and not use your personal information for their own business purposes. |
| 362 | 362 | |
| 363 | 363 | For some of our services (e.g. BBC.com subscriptions), we use Stripe for payments, analytics, and other business services. Stripe may collect personal data including via cookies and similar technologies. The personal data Stripe collects may include transactional data and identifying information about devices that connect to its services. In addition to providing their services to us, Stripe uses this information as a data controller to operate and improve these services including for fraud and prevention and detection, authentication, analytics related to the performance of its services, and to enhance and customise the user experience. For more information, see Stripe's privacy policy at: [https://stripe.com/privacy](https://stripe.com/privacy). |
| 364 | 364 | |
| 365 | 365 | **C. Information shared via third party embedded content** |
| 366 | 366 | |
| 367 | | **_Information shared through cookies and similar technologies_** |
| 367 | Some of our online services include embedded content from social media platforms. If you allow cookies and similar technologies for social media content, they will receive information about the consumption of content shown from their services. This will be subject to the privacy policy of the relevant platform and your privacy settings with their service. |
| 368 | 368 | |
| 369 | **D**. **Information shared through cookies and similar technologies** |
| 370 | |
| 369 | 371 | We work with third parties who use cookies and similar technologies to provide a variety of services to us, including to: measure and analyse use of and engagement with our services and emails; deliver and personalise our online marketing and third-party advertising on our services. These companies may be independently making decisions about how and why your personal information is processed, meaning they are a separate "Data Controller". To learn more, please read the Cookies Notice provided for the service you are using. |
| 370 | 372 | |
| 371 | | **D. Information shared with other parties** |
| 373 | **E. Information shared with other parties** |
| 372 | 374 | |
| 373 | 375 | Where required or allowed by law, we may disclose your personal information to law enforcement agencies, government/regulatory bodies, internet service providers and content protection organisations without your consent. For example, if you post inappropriate or objectionable content on our services or where we reasonably believe you may be in breach of the law or there is a safety concern, we may report your content and behaviour to relevant parties. |
| 374 | 376 | |
| 375 | | **E. Sale or transfer of all or part of our business or assets** |
| 377 | **F. Sale or transfer of all or part of our business or assets** |
| 376 | 378 | |
| 377 | 379 | We reserve the right to transfer your personal information in the event we sell or transfer all or a part of our business or assets so that the buyer can continue to offer you the services. We will make reasonable efforts to provide you with advance notification of the transfer of your information in such circumstances. |
| 378 | 380 | |
| 379 | 381 | ## 5. WHERE WE STORE YOUR INFORMATION |
| 380 | 382 | |
| 381 | 383 | As a British company, most of our services are operated from the UK but we have teams across the world, including the USA. As described in the previous section, we may share your information with other companies in the BBC Group or with contracted third-party service providers. These companies may be located in, or use IT equipment located in, a country where the data protection laws are different to the UK. Where this is the case, we will take steps to ensure that your information receives an appropriate level of protection. |
| 397 | 399 | We protect your information in many different ways. These include staff training, investing in technology and following strict handling and storing procedures. We maintain appropriate organisational and technological safeguards to help protect against loss, misuse or unauthorised access, disclosure, alteration or destruction of the information we hold about you. We also seek to ensure our service providers do the same. Even though we have taken steps to help protect the information in our control, you should be aware that security measures cannot provide absolute protection. |
| 398 | 400 | |
| 399 | 401 | If you believe that your personal information under our control has been compromised, including access to any accounts you hold with our services, please contact us immediately using the details under 'Contact Us' below. |
| 400 | 402 | |
| 401 | 403 | ## 8. CHILDREN USING OUR SERVICE |
| 402 | 404 | |
| 403 | | Most of our services are aimed at general audiences, except our Kids and Family brands (e.g. Bluey and Hey Duggee) which are aimed at parents or carers to use with their children. |
| 405 | Most of our services are aimed at general audiences, except our Kids and Family brands (e.g. Bluey) which are aimed at parents or carers to use with their children. |
| 404 | 406 | |
| 405 | 407 | Some of our services are age restricted. This is either due to the nature of the service, for example we do this for some competitions, or due to child privacy or contracting rules in certain countries. If appropriate, we will take steps to determine the age of people submitting their information to us and may seek to obtain the authorisation of a parent or guardian. |
| 406 | 408 | |
| 407 | 409 | If you are the parent or guardian of a child and you become aware that your child has provided us with information without your authorisation, please contact us at [dataprotection@bbc.com](mailto:dataprotection@bbc.com). |
| 408 | 410 | |
| 409 | 411 | ## 9. YOUR RIGHTS & CHOICES |
| 421 | 423 | **A. Change your communication preferences** |
| 422 | 424 | |
| 423 | 425 | If you wish to stop receiving marketing communications from us, please click on the "unsubscribe" link at the bottom of the relevant email. This link will enable you to unsubscribe from the newsletter or will take you to a preference centre. Please note that you cannot unsubscribe from some service-related messages (which are not used to send marketing materials). |
| 424 | 426 | |
| 425 | 427 | In accordance with industry standards, we reserve the right to retain a minimal amount of data necessary to ensure we do not contact you in the future - for example by adding your email address to a 'suppression list'. |
| 426 | 428 | |
| 427 | | **B. Change your settings for cookies and similar technologies** |
| 429 | **B. Privacy settings and opt-outs** |
| 428 | 430 | |
| 429 | | The choices you have around consents and opting out may vary from territory to territory but will be presented on the relevant website or app. A link is available in each website footer or app settings, which is labelled as 'cookie settings', 'do not share or sell my info', or similar. |
| 431 | You can use the controls described in this section to manage how we use cookies and similar technologies, personalise content and advertising, and use your information for certain advertising and marketing activities. |
| 430 | 432 | |
| 431 | | You can also choose how cookies (across all websites) are handled on your device via your browser settings. Some browsers also have a setting called Do Not Track, which sends a signal to websites asking them not to track you. However, as there isn't a common standard for interpreting this signal, our websites do not respond to them. Instead, you should use the settings described above. |
| 433 | Where relevant, these controls also allow you to opt out of targeted advertising and the "sale" or "sharing" of your personal information. By "sale", we mean a disclosure of personal information to another party for monetary or other valuable consideration, where this is treated as a sale under applicable privacy law. By "sharing", we mean a disclosure of personal information to a third party for cross-context behavioural advertising or other purposes covered by applicable law. |
| 432 | 434 | |
| 433 | | Your selections are specific to the device, website, and browser you are using. Your selections may be deleted whenever you clear your cookies or browser's cache.You can also disable the sharing of your encrypted/hashed email address for marketing and advertising purposes in your [BBC Account settings](https://account.bbc.com/account/settings/privacy). |
| 435 | We do not knowingly "sell" or "share" the personal information of minors under 16 years of age. |
| 434 | 436 | |
| 435 | | Please see the Cookies Notice for more information about the technologies we use and the options available to you. |
| 437 | **Website and app settings** |
| 436 | 438 | |
| 439 | You can manage the use of cookies and similar technologies through the privacy settings available on the relevant website or app. A link is available in each website footer or app settings and may be labelled **"Cookie Settings"**, **"Privacy Settings"**, or similar. |
| 440 | |
| 441 | If you opt out of personalised or targeted advertising, you may still see advertising, but it may be based on the content you are viewing rather than your activity or interests. |
| 442 | |
| 443 | **Advertising and marketing using your email address** |
| 444 | |
| 445 | Where permitted, we may convert your email address into a coded or "hashed" identifier and use it to match you with information held by advertising or social media platforms. We use this to advertise our products and services to you, measure our campaigns, or exclude you from advertising that is not relevant to you. |
| 446 | |
| 447 | You can disable the use of your hashed email address for personalised marketing and advertising in your [**BBC Account settings**](https://account.bbc.com/account/settings/privacy). |
| 448 | |
| 449 | Depending on where you live, privacy laws may describe some of the advertising activities above as **"targeted advertising"**, the **"sale"** of personal information or the **"sharing"** of personal information. |
| 450 | |
| 451 | You can use the controls described in this section to opt out of these activities where applicable. |
| 452 | |
| 453 | **Global Privacy Control** |
| 454 | |
| 455 | Where applicable, we recognise **Global Privacy Control (GPC)** signals. GPC is a browser or device-based setting that communicates a preference to opt out of certain uses or disclosures of personal information, including activities that may be treated as targeted advertising, sale or sharing under applicable law. |
| 456 | |
| 457 | A GPC signal generally applies to the browser or device from which it is sent. It will not necessarily apply to uses of information associated with your BBC Account, such as advertising based on your hashed email address. You should also use your BBC Account settings if you wish to disable that activity. |
| 458 | |
| 459 | **Browser settings** |
| 460 | |
| 461 | You can also choose how cookies are handled on your device through your browser settings. |
| 462 | |
| 463 | Some browsers have a setting called **Do Not Track**, which sends a signal to websites asking them not to track you. There is no commonly accepted standard for responding to this signal, so our websites do not respond to it. You should instead use the settings described above. |
| 464 | |
| 465 | Your choices may be specific to the device, website and browser you are using. They may also be deleted if you clear your cookies or browser cache. |
| 466 | |
| 467 | **Mobile apps** |
| 468 | |
| 469 | Mobile advertising identifiers are used to recognise your device and may be used to collect information about your use of apps for advertising and measurement purposes. Examples include the Advertising ID on Android devices and the IDFA on Apple devices. |
| 470 | |
| 471 | Android and Apple provide controls that allow you to limit tracking or reset advertising identifiers. Using these controls may limit how we and our partners use device identifiers for personalised or targeted advertising and campaign optimisation, although limited device information may still be used for purposes such as measuring and reporting on the performance of our campaigns. |
| 472 | |
| 473 | **Email web beacons** |
| 474 | |
| 475 | Emails may contain technologies such as web beacons that tell us whether an email has been opened or interacted with. Most email applications allow you to prevent the automatic downloading of images, which can prevent these technologies from connecting automatically to the servers that host them. |
| 476 | |
| 477 | Please see the **Cookies Notice** for more information about the technologies we use and the choices available to you. |
| 478 | |
| 437 | 479 | **C. Access information we hold about you** |
| 438 | 480 | |
| 439 | 481 | You can request to confirm what information we hold about you and can receive a copy of it. When submitting a request, please provide us with enough information to enable us to locate your record(s), including the email address we may hold for you and the details of the service you use. |
| 440 | 482 | |
| 441 | 483 | You will not have to pay a fee to access your personal information (or to exercise any of the other rights detailed below). However, we may be entitled to charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we may refuse to comply with your request in these circumstances. |
| 442 | 484 | |
| 467 | 509 | This right only applies to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you. |
| 468 | 510 | |
| 469 | 511 | **I. Request information about how your personal information is handled** |
| 470 | 512 | |
| 471 | 513 | Specifically, you may ask what personal information has been collected, how and why it is processed, the categories of parties who have access to that information, the applicable retention period, and the source of personal information if it was collected from a third party. Delaware, Minnesota, and Oregon residents may also request a list of third parties (as defined in applicable law) to whom we have disclosed personal data. |
| 472 | 514 | |
| 473 | | **J. Opt-out of targeted advertising and the "sale" or "sharing" of personal information** |
| 515 | **J. Complaints** |
| 474 | 516 | |
| 475 | | When you use our services, third parties may use personal information obtained from or in connection with your activities on our services and across unaffiliated sites to show more relevant advertising to you. This may include the categories of personal information described in sub-section G of [Section 3](https://www.bbc.com/pages/privacy-policy) above. In certain jurisdictions, these activities may be considered a "sale, "sharing", or "targeted advertising". |
| 476 | | |
| 477 | | You can request that we stop using or sharing your personal information for such targeted advertising; you can also request that we not "sell" or "share" your personal information. By "sell", we mean the sale of your personal information to an outside party for monetary or other valuable consideration. By "share", we mean the disclosure of your personal information to third parties for their own marketing purposes or for cross-context behavioural advertising purposes, subject to certain exceptions under applicable law. |
| 478 | | |
| 479 | | If you would like to opt out of behavioural or targeted advertising, follow the instructions in the **Change your settings for cookies and similar technologies** section above. You can also communicate your preference by sending a Global Privacy Control signal, on browsers or browser extensions that support such a signal. |
| 480 | | |
| 481 | | We do not knowingly "sell" or "share" the personal information of minors under 16 years of age. |
| 482 | | |
| 483 | | **K. Complaints** |
| 484 | | |
| 485 | 517 | The BBC Studios Data Protection Complaints Policy outlines your rights to complain to the Information Commissioner's Office (ICO), or other local data protection regulator (if applicable) if you have raised a concern with us and feel we have not resolved it. |
| 486 | 518 | |
| 487 | 519 | ## 10. CHANGES TO THIS PRIVACY POLICY |
| 488 | 520 | |
| 489 | 521 | This Privacy Policy may be updated from time to time to reflect changes in law, best practice or in our practices regarding the treatment of personal information. If material changes are made to this Privacy Policy we will notify you by placing a notice on our relevant services. The date of the most recent revision will appear at the top of this page. If you do not agree to the changes, please do not continue to use our services. You should check this policy frequently for updates. |
| 490 | 522 | |
| 507 | 539 | ## 12. ADDITIONAL NOTICES |
| 508 | 540 | |
| 509 | 541 | ### **A. CALIFORNIA RESIDENTS:** |
| 510 | 542 | |
| 511 | 543 | California residents have the right to receive notice of certain of our privacy practices, including the categories of personal and sensitive personal information we may collect (see [Section 2](https://www.bbc.com/pages/privacy-policy)), the purpose for which we collect or use such information (see [Section 3](https://www.bbc.com/pages/privacy-policy)), whether such information is "sold" or "shared" (as those terms are defined in California law (see [Section 9](https://www.bbc.com/pages/privacy-policy))), and how long such information is retained (see [Section 6](https://www.bbc.com/pages/privacy-policy)). You can make requests regarding your personal information as described in [Section 9](https://www.bbc.com/pages/privacy-policy). |
| 512 | 544 | |
| 513 | | follow the instructions in [Section 9](https://www.bbc.com/pages/privacy-policy) (J) to exercise your right to request that we not "sell" or "share" your personal information as such terms are defined in applicable California law. |
| 545 | California law gives you the right to opt out of the "sale" or "sharing" of your personal information. BBC Studios' relevant activities principally involve personalised advertising using cookies and similar technologies and matching hashed email addresses with advertising or social media platforms. |
| 514 | 546 | |
| 515 | | **California Shine the Light:** California residents may request one time each year if we have disclosed your personal information to third parties for their own direct marketing purposes. While we do not generally disclose your personal information as defined in California's "Shine the Light" law, you may opt out of such sharing by emailing us at [dataprotection@bbc.com](mailto:dataprotection@bbc.com) and indicating that you are a California resident making a "Shine the Light" inquiry. |
| 547 | You can opt out using the [**Privacy settings and opt-outs**]() described in section 9B. |
| 516 | 548 | |
| 549 | **California Shine the Light:** California residents may also have rights concerning disclosure of personal information to third parties for their own direct marketing. Where our use of your email address for advertising is covered by this law, you can opt out by turning off **Personalised marketing and advertising** in your [BBC Account](https://account.bbc.com/account/settings/privacy). |
| 550 | |
| 517 | 551 | ### **B. RESIDENTS OF OTHER U.S. STATES** |
| 518 | 552 | |
| 519 | 553 | Residents of other U.S. states with data privacy laws (including, for example, residents of Colorado, Connecticut, Delaware, Iowa, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Tennessee, Texas, Utah or Virginia), have certain rights with respect to your personal information. The scope of these rights are covered by the rights and choices set out in [Section 9](https://www.bbc.com/pages/privacy-policy). We make these available to all, regardless of their location, except where indicated. |
| 520 | 554 | |
| 521 | 555 | ### **C. CANADIAN RESIDENTS:** |
| 522 | 556 | |