Reach Group - Privacy Notice

ARCHIVED 2025-07-01, DATE APPROXIMATE · VERSION 20250701_rev01 · COMPARED WITH 20250201_rev01

Full text changes — 20250201_rev01 to 20250701_rev01

COLOUR MARKS THE SEVERITY OF A FLAGGED CLAUSE · + AND − MARK ADDED AND REMOVED

 ## Reach Group - Privacy Notice
 We have organised this Privacy Notice based on the different ways you might interact with us and what you might want to know.
 Please use the contents list below to navigate to the section of the Privacy Notice which you are interested in. At the end of each section if you want to return to the contents list please click the link: 'Click here to go back to 'Contents''
+Last update: 23 January 2025
+Last update: 26 June 2025
 ## CONTENTS
 . **[Who we are and how to contact us]()**
 . **[About this Privacy Notice]()**
 . **[When you browse our websites and use our apps]()**
 . **[When you visit or interact with us on social media]()**
 . **[When you apply for a job with us or work at other organisations we do business with]()**
 . **[Further ways we may receive, use and share your data]()**
 . **[How we keep your data secure, why we may keep it and countries we may transfer it to]()**
 . **[How we ensure we protect children's privacy]()**
 . **[UK and EU residents: your rights and how to exercise them]()**
+. **[US and Canadian residents: relevant laws and rights]()**
+. **[US, Canadian and other residents: relevant laws, rights and notices]()**
 ## 1\. Who we are and how to contact us
 We are the Reach group, which is made up of Reach plc and its subsidiaries. Reach plc is the largest national and regional news publisher in the UK with a portfolio in Ireland and the United States. We aim to create engaging, relevant content which is distributed through various channels and media including newspapers, magazines, and digital platforms - playing a central role in our audiences' daily lives.
 We are the name behind some of the UK's most influential, iconic, and trusted news brands, such as the Daily Mirror, Daily Express, Daily Star and Daily Record, as well as leading celebrity and entertainment magazine OK! and the online shopping site Yimbly.com. We also publish leading regional titles including the Manchester Evening News, Liverpool Echo, and Birmingham Mail, plus the Mirror US and Express US. You can see the list of websites and brands we publish [**here**](https://www.reachplc.com/about-us/our-brands).
 If you are from the US:
 - By email: [privacyofficer@reachplc.com](https://www.mirror.co.uk/privacy-notice/%E2%80%9Dmailto:privacyofficer@reachplc.com%22)
 - By mail: Privacy Officer, Reach Plc, 19th Floor, 200 Liberty Street, New York, NY 10281
+Your point of contact for anything to do with how the Reach group uses your personal data is the office of our group Data Protection Officer, who you can contact by submitting the relevant form accessible within the 'Your rights and how to exercise them' section by emailing [dataprotection@reachplc.com](mailto:dataprotection@reachplc.com) or by writing to 'The Data Protection Team' at the address above.
+Your point of contact for anything to do with how the Reach group uses your personal data is the office of our group Data Protection Officer, who you can contact by submitting the relevant form accessible within the 'Your rights and how to exercise them' section by emailing [dataprotection@reachplc.com](mailto:dataprotection@reachplc.com) or by writing to 'The Data Protection Team' at the address above. If you are a Spanish speaker see section 16.3.3 on how to exercise your rights.
 **[\*\*\* Click here to go back to 'Contents' \*\*\*]()**
 ## 2\. About this Privacy Notice
 This Privacy Notice tells you about the kinds of information we hold about you, what we do with it, and why.
 Email: [info@pressombudsman.ie](mailto:info@pressombudsman.ie)
 Telephone: 1890 208 080
 Fax: 01 6740046
+**Journalism and our use of Artificial Intelligence**
+**Our use of Artificial Intelligence**
+We are increasingly using Artificial Intelligence (AI) tools, to help us create and enhance our content.
+We are increasingly using Artificial Intelligence (AI) tools, to help us enhance our content and streamline our processes.
+Meeting the data protection requirements of our consumers is at the forefront of our AI decision making so as our uses develop we will provide more information in this Privacy Notice. For more information see our AI Notice on each website footer.
+Meeting the data protection requirements of our consumers is at the forefront of our AI decision making, and we ensure we review and assess any personal data which may be involved in light of data protection requirements and evolving guidance. This includes conducting assessments, ensuring the accuracy of data sets used and human review of outputs. For more information on AI see our AI Notice on each website footer.
 **[\*\*\* Click here to go back to 'Contents' \*\*\*]()**
 ## 3\. When you browse our websites and use our apps
 When you browse our websites or use our apps, we may collect technical and/or behavioural information about your use of our websites or other content online, and the device(s) you use to access the services. For example, this information may include details about how you browse our website and the devices and technology you use to browse our website. This may also include unique online identifiers such as device ID, device type, IP address and approximate location at the time of browsing. This may also include video viewing data and may link to your activity on other sites and allow us to recognise you or your device. We may use this to build a more detailed profile of you and your interests. We may also provide you with location-based services (for example, advertising and other personalised content), where we collect geo-location data.
 We then divide up our identification numbers into groups based on the inferences we draw about them. Those groups are called "audience segments" or "audiences". So, for example, an identifier associated with Newcastle, ChronicleLive and the football newsletter could be allocated to audiences likely to be interested in football, and events near Newcastle-upon-Tyne.
 We then use those "audiences" to do two things: first, to help us to recommend content which is more likely to be interesting (for instance, more articles about football), and second to help us to target advertisements when advertisers buy advertising space from us directly.
 The advertiser would never see the actual data that we use - it remains with Reach at all times. All we would share with them would be the criteria we used to target their advert, how many times their advert was shown and how many people clicked on it (but not who), so that they know how well the advert did and we know how much to charge them.
+We work with partners such as Freestar and Google (Ad Manager) for the purposes of placing advertising on our sites, who will collect and use specific data for advertising purposes. To learn more about Freestar's and Google's data usage, click here: [Freestar](https://freestar.com/privacy-policy/) and [Google (Ad Manager)](https://policies.google.com/privacy)
 **3.1.2 Our legal basis**
 Your activity on our websites and in our apps can be managed by you using our "cookie banner" and related Consent Management Platform (CMP). The vast majority are used on the basis of your consent where you provide it. Some may use our Legitimate Interest and some are Essential - Please see our [Cookie Notice](https://www.mirror.co.uk/cookie-policy/) for further information or the 'cog' icon or link at the bottom of every webpage to manage your consents. When using our apps, if you want to change the settings, go to the 'My Account' Link at the bottom of the screen which includes 'My Privacy' and takes you to the CMP.
 We combine that information with the other things we know about you (like your newsletter subscriptions) on the basis of our legitimate interest in understanding our readership, both to serve you better and to make us more attractive to advertisers. This helps us to secure a future for news reporting and journalism in the age of social media, especially local news reporting and journalism.
 Upland Software and Lotame are global businesses and so the data they host for us may be held outside of the country of collection. We have implemented the required safeguards as necessary (for example, standard agreements and frameworks approved by the relevant authorities).
 **3.2 Targeting by third party advertising networks**
 Digital advertising helps us to fund the news articles and content published on our sites and enables us to provide some of our content for free. We and our third-party ad partners may display digital advertising on our sites that is tailored to your interests and preferences so the online adverts you see are more relevant to you. We work with third party ad networks to fill unsold advertising space on our sites and in our apps by auctioning it automatically through a process called "real time bidding". These ad networks bid to show their ad to you when you visit our sites or use our apps.
+The ad networks exchange information through cookies, which allow them to recognise you when you visit any site that they work with (not just Reach sites). Where we use cookies on our sites for advertising purposes, we ask for prior consent. The cookie information will be used along with other information we hold about you to display digital advertising that is more relevant to you. It is important to note, however, that where you do not provide your consent for digital advertising you will still see digital advertising on our sites, but this will not be tailored to your interests and preferences.
+The ad networks exchange information through cookies, which allow them to recognise you when you visit any site that they work with (not just Reach sites). Where we use cookies on our sites for advertising purposes, we collect the appropriate consent, depending on the country you are visiting us from. The cookie information will be used along with other information we hold about you to display digital advertising that is more relevant to you. It is important to note, however, that where you do not provide your consent for digital advertising you will still see digital advertising on our sites, but this will not be tailored to your interests and preferences.
 Where you provide consent to using your data to create a profile for digital advertising we may also sell or share limited data types to our partners with whom we have a legally binding relationship for similar purposes; typically data on the page content which you have shown an interest in and online identifiers, not direct identifiers such as your email address. Captify is one such partner. They may act as an independent controller of your data, and their privacy policy is shown here: [Captify Privacy Policy](https://www.captifytechnologies.com/privacy-notice/)
 **3.2.1 The data collected and how it is used**
 On your first visit to one of our sites or apps (and on other occasions to allow you to change your mind), you will be presented with a "cookie banner". This asks you if you consent to the use of cookies and related technologies for the purposes of, amongst other things, selecting and delivering ads. If you do, then the ad networks will be able to recognise your device according to a unique identification number.
 We use your email address and the other information that you give to us as part of the account creation process to operate your account and provide those functions. When you are signed in with your Reach account, we will also have the ability to associate your account details with the information we gather through our analytics tools about how you use our sites.
 **4.1.1 The data we collect and what we do with it**
 When you create an account we may collect your name and email address.
+For services that provide local information (like InYourArea) we will also collect your postcode and any associated areas of local interest that you want to be updated about. If you subscribe to a paid version of our sites such as **Premium** or **Privacy Plus** (without personalised advertising and ad tracking) we will collect your payment details, in order for us to fulfil your subscription. For more information on subscriptions see [9\. When you subscribe to our print or "Digital Edition" titles.]()
+For services that provide local information (like InYourArea) we will also collect your postcode and any associated areas of local interest that you want to be updated about. If you subscribe to a paid version of our sites such as **Premium** or **Privacy Plus** we will collect your payment details, in order for us to fulfil your subscription. For more information on subscriptions see [9\. When you subscribe to our print or "Digital Edition" titles.]()
 Some services may let you upload your own content to our sites, such as comments or pictures. Those things will, by the nature of the service, be generally visible on the site and may be attributed to user names. Your comments may be used in print, online or on the social pages for brands owned and published by Reach plc. We may also record what types of content you have commented on, and associate this with our profile of you. Please do not provide any personal data which you do not want to be published. Comments will be subject to moderation checks before publication.
 We use this information to operate your account and to enable you to log in and use our services; for example, on InYourArea we use your postcode to identify the correct local information to display to you.
 You may also be invited during the account creation process to subscribe to one or more of our newsletters, or to opt in to receive certain special marketing offers and promotions. You can read more about that by navigating to the appropriate section of this Privacy Notice via the 'Contents' list. [Click here to go back to 'Contents']().
 **5.3 How long we keep it for**
 Reach will retain your personal data in accordance with the law and relevant regulations and will store the data for as long as is necessary to fulfil the purpose for which it was collected. The period for which we keep your personal data will be determined by the purpose for which we are using the data, and our legal and regulatory obligations.
 **5.4 Who we share it with and why**
+We use Klevu, Shopify and Mirakl to manage and connect the different parts of our Yimbly.com and OK! Beauty Box ecommerce sites. They act at our discretion, as our "processor". For more information on what each processor specifically does please see below:
+We use Klevu, Shopify and Mirakl to manage and connect the different parts of our Yimbly.com and OK! Beauty Box ecommerce sites, and Gorgias for our customer service. They act at our discretion, as our "processor". For more information on what each processor specifically does please see below:
 - Klevu: [https://www.klevu.com/privacy-policy/](https://www.klevu.com/privacy-policy/)
 - Mirakl: [https://www.mirakl.com/privacy-policy](https://www.mirakl.com/privacy-policy)
 - Shopify:[https://www.shopify.com/uk/legal/privacy](https://www.shopify.com/uk/legal/privacy)
+- Gorgias: [https://www.gorgias.com/legal/privacy](https://www.gorgias.com/legal/privacy)
 - Recharge: [https://rechargepayments.com/](https://rechargepayments.com/)
 - TrustPilot: [https://uk.legal.trustpilot.com/for-businesses/business-privacy-policy](https://uk.legal.trustpilot.com/for-businesses/business-privacy-policy)
 - Yotpo: [https://www.yotpo.com/privacy-policy/](https://www.yotpo.com/privacy-policy/)
 - Paypal: [https://www.paypal.com/uk/legalhub/privacy-full](https://www.paypal.com/uk/legalhub/privacy-full)
 - Klarna: [https://www.klarna.com/international/privacy-policy/](https://www.klarna.com/international/privacy-policy/)
 - Clearpay: [https://help.clearpay.co.uk/hc/en-gb/articles/900006078786-Privacy-Policy-](https://help.clearpay.co.uk/hc/en-gb/articles/900006078786-Privacy-Policy-)
 We will also share your name, address, email and payment details with our sellers in order to fulfil an order. Our legal basis for doing this would be contractual as it is necessary in order for you to receive your goods.
 We may also provide sellers with information that allows them to serve you with more useful and relevant ads and to see how effective they are. We would not share your name or other information that directly identifies you when we do this. Instead, we use an advertising identifier like a cookie, a device identifier, or a code that would anonymise information like an email address. Our legal basis for doing this would be consent. We would attain your consent when you accept our use of cookies on our site and you have the right to opt out at any time. For more information see section [3\. When you browse our websites and use our apps]()
 **Generative AI Tools**
+We may share personal data with Generative tools like OpenAI on a 30 day or zero data retention basis for the purposes of:
+We may share personal data with Generative tools like OpenAI on a 30 day or zero data retention basis. Alternatively our customers may interact, for example, with an AI Customer Service Agent. Our purposes for use of AI are as follows:
+- **Customer Services Experience**. To automate our responses to you and provide you with context relevant to your enquiry we may use data we have stored about you such as previous enquiries, order history, recent site activity, product reviews, loyalty & rewards.
+- **Customer Services Experience**. To automate our responses to you and provide you with context relevant to your enquiry we may use data we have stored about you such as previous enquiries, order history, recent site activity, product reviews, loyalty & rewards. Alternatively you may provide data directly to an AI Customer Service Agent as part of your customer service experience.
 - **Personalised product recommendations & merchandising**. To enable us to present the right product to you as you progress through the website, or via marketing communications (if we have the permission), based on your purchase history and recent activity.
 We may also use AI, although not involving personal data, for Business intelligence purposes, to identify patterns, spot inconsistencies, predict trends, and deliver insights that lead to a better understanding of our business across all functions. Our legal basis for doing this would be legitimate interest. To opt out of your data being shared in this way email [dataprotection@reachplc.com](mailto:dataprotection@reachplc.com), stating 'opt out of AI Tools'.
 **5.6 Whether we send it outside the country of collection**
 **[\*\*\* Click here to go back to 'Contents' \*\*\*]()**
 ## 6\. When you opt to receive newsletters or other marketing communications
 We use the information you provide us with, such as email, address, or phone number, to communicate with you for the purpose you provided it, either based on your consent or where we have legitimate grounds to do so. For example, if you sign up for a newsletter or other marketing communication then we will use the email address you provide to send you that newsletter or marketing, and we may also send you text messages if you have opted in to receive these. These may include special offers and promotions. Alternatively, If you have bought a product from us, from one of our ecommerce sites \[see [5\. When you buy a product from our ecommerce sites]()\], we may send you emails about similar products and services, from the brand you purchased the product from, provided you didn't opt out when we collected your data.
+The links in our emails are unique to your email address, and so if you click on them our servers will attribute that click to your email address and that information will be associated with your [unique identifier](). If you choose to allow your email program to load the images in our emails, we will also be able to see that you opened the email. You can find out more about each of these activities below. You can update your marketing preferences at any time. If you would like to unsubscribe (or opt-out) of receiving these emails please click the links on the emails you receive, text STOP to opt out of text messages, or contact dataprotection@reachplc.com.
+The links in our emails are unique to your email address, and so if you click on them our servers will attribute that click to your email address and that information will be associated with your [unique identifier](). If you choose to allow your email program to load the images in our emails, we will also be able to see that you opened the email. Our emails may include pixels which enable us to serve non-personalised ads within the newsletter content, via companies such as Passendo and Open Web, acting as our processors. You can find out more about each of these activities below. You can update your marketing preferences at any time. If you would like to unsubscribe (or opt-out) of receiving these emails please click the links on the emails you receive, text STOP to opt out of text messages, or contact dataprotection@reachplc.com.
 **Working with Partner Companies**
 When you give us your email address for marketing purposes, we may convert it into a hashed, pseudonymous form, and subsequently share it with selected partners who use this information to create an online identification code, for the purpose of recognising you on your device.This code does not contain any of your identifiable personal data and cannot be used to re-identify you.
 We convert your email based on legitimate interest and you can opt out of your email being shared in this way by emailing [dataprotection@reachplc.com](mailto:dataprotection@reachplc.com), and stating 'opt out of hashed email'. For more information on how these partners may subsequently use this code to serve you targeted advertising, with your consent, please see section [Data Matching]().
 When you subscribe to our digital edition titles your subscription is also processed via our provider and this information is retained for as long as you maintain your subscription, and for a period thereafter, in case of disputes or problems.
 As part of the subscription process you may be asked if you want to receive other products or services from Reach. Where this is the case you will be asked to consent to each product or service type. Such activities are managed in accordance with the relevant sections elsewhere in this Privacy Notice.
 **Privacy Plus Subscription**
+On some of our websites we offer you a **Privacy Plus** subscription service for access free of ad-tracking. This **Privacy Plus** subscription provides a reading option free of personalised advertising. For a monthly fee, a Privacy Plus subscription enables you to access the same content, without sharing your personal data for advertising purposes.
+On some of our websites we offer you a **Privacy Plus** subscription service. This **Privacy Plus** subscription provides a browsing experience, free of personalised advertising. For a monthly fee it enables you to access the same content without sharing your personal data for advertising purposes.
+This means:
+- We will not run advertising tracking technologies.
+- You will not receive personalised advertising.
 For more information see our [T&Cs](https://www.mirror.co.uk/terms-conditions/)
 In order to be able to offer you this service on our website, we will collect online identifiers such as device type, IP address, language settings, approximate location at the time of browsing, and your logged in user id. This will be used to enable us to verify you as a Privacy Plus subscriber, to technically run the service and for security and anti-fraud purposes.
 **9.2 When you place a classified ad**
 We may also share information to facilitate the sale of one or more parts of our business, including if we are approached by a potential buyer or the restructuring of one or more parts of our business and with auditing organisations such as the Audit Bureau of Circulation.
 When we share information with third parties, we only permit them to process this data for specified purposes. We do not share more information with them than is necessary for the relevant purpose and we require them to treat this information with at least the same protection we do.
 **12.2 Links to other websites and third-party affiliates**
+Our websites may include links to third-party websites, plug-ins, and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and, when you leave our website, we encourage you to read the Privacy Notice of every website you visit.
+Our websites may include links to third-party websites, plug-ins, and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and, when you leave our website, we encourage you to read the Privacy Notice of every website you visit. Please note that some of our third party/affiliate websites may have Reach branding, although they may not be operated by Reach.
+We may monetise some of these links through the use of third-party affiliate programmes. These affiliate links help pay the costs of producing our websites and ensure that the content is free to you. However, it doesn't mean that we are in any way indebted to Amazon or any other company. Nor do they or any other company have any influence over editorial coverage, how we rate products, or whether they get a positive review. Notwithstanding such affiliate programmes, we are not responsible for the content or privacy policies of these websites or for third-party advertisers, nor for the way in which they use the information they collect about you.
+We may monetise some of these links through the use of third-party affiliate programmes. These affiliate links help pay the costs of producing our websites and ensure that the content is free to you. However, it doesn't mean that we are in any way indebted to Amazon or any other company. Nor do they or any other company have any influence over editorial coverage, how we rate products, or whether they get a positive review. Notwithstanding such affiliate programmes, we are not responsible for the content or privacy policies of these websites or for third-party advertisers, nor for the way in which they use the information they collect about you. See more [Information on Affiliate Links](https://www.reachplc.com/affiliates).
 **12.3 Behavioural remarketing services**
 After you have visited our site, we may use remarketing services provided by companies such as Facebook and Google and Bing, to show you advertising on third-party websites, based on your browsing patterns and interactions. For this purpose, visitors are grouped by certain actions on our services, for example, by duration of visit. This enables us to understand your preferences and to show you personalised advertising even if you are currently on another website within the network.
 **12.4 Social media platforms**
 By using our website, products or services or by interacting with us in the ways described in this Privacy Notice, you consent to the transfer, storage and processing of your personal information outside your country of residence, including out of the EEA, in the circumstances set out in this Privacy Notice. If you do not want your information to be transferred in this way you should not use our website, applications or services.
 **[\*\*\* Click here to go back to 'Contents' \*\*\*]()**
 ## 14\. How we ensure we protect children's privacy
+Our products and services are for a general audience and not aimed at children, although we recognise that some of the content of our publications may appeal to a younger audience, for example our football content and Curiously site.
+Our products and services are for a general audience and not aimed at children.
 Across our portfolio, we have taken active measures to ensure we comply with all relevant laws and regulations, and do not knowingly collect any personal information from children under the age of sixteen or send any marketing communications to children.
 If we are running a competition, for example, which might be of interest to children, our competition rules specify that a parent or guardian must consent to entry (if the child is under eighteen). You must also be at least eighteen to purchase products or services from us. If you are under the age of eighteen, you must ensure that your parent or guardian purchases the products or services on your behalf.
 If, in the future, we collect personally identifiable information from children in connection with our products and services, we will do so in compliance with all relevant laws and regulations including, without limitation, obtaining parental consent where necessary. If you are a parent or guardian and are concerned that we may be processing personal data related to your child, please contact [dataprotection@reachplc.com](mailto:dataprotection@reachplc.com).
 DPC IE phone number is 01 7650100 / 1800437 737
 If you are based in another EU country, you can find the details of your local supervising authority here. [EU SAs](https://edpb.europa.eu/about-edpb/about-edpb/members_en)
 **[\*\*\* Click here to go back to 'Contents' \*\*\*]()**
+## 16\. US and Canadian Residents: relevant laws and rights
+## 16\. US, Canadian and Other Residents: relevant laws, rights and notices
 Privacy legislation in the US and Canada is evolving and as a result there are special rights for residents of certain states. This section details the existing state laws and consumer privacy rights and will be updated as the new laws are introduced.
 We have appointed a Privacy Officer to oversee our data protection and privacy practices, in the US and Canada. Our Data Protection Officer holds this position. If you have any comments, concerns, or questions, including any requests to exercise your legal rights, you can contact our Privacy Officer as follows:
 - By email: privacyofficer@reachplc.com
 **[16.1 California Residents]()** data collection, use and sharing, and privacy rights
 **[16.2 Residents of US states with applicable privacy legislation]()** specific information and privacy rights
 **[16.3 Residents of other states and territories with applicable legislation]()**
+**[16.4 Other Notices]()**
 **16.1 California Residents**
 This section applies to California residents. It describes how we collect, use and share Personal Information of California residents when operating our business, and their rights with respect to that Personal Information. This section should be read in conjunction with the rest of this Privacy Notice which provides further details on the nature of our data processing.
 For purposes of this section, "**Personal Information**" has the meaning given in the California Consumer Privacy Act of 2018 ("**CCPA**") and amended by the California Privacy Rights Act of 2020 ("**CPRA**"). It does not include: (i) information that is lawfully made available from federal, state or local government records; (ii) de-identified or aggregated data; or (iii) information excluded from the scope of the CCPA/CPRA.
 - **Opt-out of sale or sharing.** You have the right to opt out of the sale or sharing of your Personal Information.
 - **Limit the use of your Sensitive Personal Information.** You have the right to limit the use or disclosure of your sensitive personal information ("SPI") to the information necessary to perform services or provide goods reasonably expected.
 - **Non-discrimination.** The right not to be subject to discriminatory treatment for exercising their rights under the CPRA/CPRA.
 In the past 12 months, we have shared your Personal Information with third parties in the following circumstances, which California law classifies as a "sale" of your Personal Information:
+- supplying your data to third parties with your express consent (e.g. where you opt-in to receive notifications or create an account) or with promotional partners, such as when you enter a promotion;
+- supplying your data to third parties with your express consent (e.g. where you opt-in to receive notifications or create an account) or with promotional partners, such as when you enter a promotion, contest or sweepstake;
 - supplying attendee data to third parties who provide services in connection with our events, and sending your data to suppliers of certain products and services (where you have consented to hear from such third parties);
 - using services that help deliver interest-based ads, content and services to you and may transfer personal information to business partners for their use. California law classifies our use of these services as "sharing" your Personal Information to the companies that provide the services. This is because we allow them to collect information from our website users (e.g., online identifiers and browsing activity) so they can help serve ads, content and services more likely to interest you.
 **16.1.5 Do Not "Sell" or "Share" My Personal Information**
 California residents may opt out of the "sale" or "sharing" of their personal information.
 California residents may request and obtain a list of any third parties that we have disclosed personal information to over the previous calendar year for the purposes of sending you direct marketing about the third party's own products and services. If you would like to request this information please contact us using the [rights request form](https://docs.google.com/forms/d/e/1FAIpQLSe_S4UU9agFYuaYgp0IJr_OmXICpKF8oS8N2AaP-ybt29L-rw/viewform) or by emailing privacyofficer@reachplc.com quoting 'California Privacy Rights-(insert name of Reach Group brand)' in the subject header and state which right(s) you wish to exercise.
 **[\*\*\* Click here to go back to 'Contents' \*\*\*]()**
 **16.2 Residents of US states with applicable privacy legislation**
+This section applies solely to individual residents of States with applicable privacy legislation including, but not limited to Virginia, Colorado, Connecticut, Utah, Oregon, Texas, Montana, Delaware, Iowa, Nebraska, New Jersey and New Hampshire. It describes how we collect, use and share Personal Information of residents when operating our business, and their rights with respect to that Personal Information. This section should be read in conjunction with the rest of this Privacy Notice which provides further details on the nature of our data processing.
+This section applies solely to individual residents of States with applicable privacy legislation including, but not limited to Virginia, Colorado, Connecticut, Utah, Oregon, Texas, Montana, Delaware, Iowa, Nebraska, New Jersey, New Hampshire, Tennessee and Minnesota. It describes how we collect, use and share Personal Information of residents when operating our business, and their rights with respect to that Personal Information. This section should be read in conjunction with the rest of this Privacy Notice which provides further details on the nature of our data processing.
 **16.2.1 Personal Information We Collect**
 We may collect the following types of Personal Information about you as described below:
 **A. Personal Information You Provide to Us**
 **16.2.5 Our Response Time to Your Request**
 We will make every effort to respond to your request within forty-five (45) days from when you contacted us. If you have a complex request, the legislation allows us up to ninety (90) days to respond. We will still contact you within forty-five (45) days from when you contacted us to let you know we need more time to respond and the reason for the extension. For particular states where the time frame for response may be shorter, we will adhere to the required legal timeframe.
 **16.2.6 Right to Appeal**
+Residents of certain states, including Virginia, Colorado, Connecticut, Oregon, Texas, Delaware, Iowa, Nebraska, New Hampshire and New Jersey may appeal a refusal to take action on a request by contacting us by emailing [privacyofficer@reachplc.com](mailto:privacyofficer@reachplc.com).
+Residents of certain states, including Virginia, Colorado, Connecticut, Oregon, Texas, Delaware, Iowa, Nebraska, New Hampshire, New Jersey, Tennessee and Minnesota may appeal a refusal to take action on a request by contacting us by emailing [privacyofficer@reachplc.com](mailto:privacyofficer@reachplc.com).
 **[\*\*\* Click here to go back to 'Contents' \*\*\*]()**
 **16.3 Residents of other states and territories with applicable legislation**
 Residents may be covered by other local state data protection or privacy legislation. To exercise these rights please use the [rights request form](https://docs.google.com/forms/d/e/1FAIpQLSe_S4UU9agFYuaYgp0IJr_OmXICpKF8oS8N2AaP-ybt29L-rw/viewform), to submit a request in relation to your data rights.
 We may need to verify your identity before processing your request, which may require us to request additional personal information from you. In certain circumstances, we may decline or limit your request, particularly where we are unable to verify your identity or locate your information in our systems, or as permitted by law.
 We will attempt to respond to your request within thirty (30) days. We will advise you in writing if we cannot meet your request within this time limit.
 To exercise these rights please use the our [rights request form](https://docs.google.com/forms/d/e/1FAIpQLSe_S4UU9agFYuaYgp0IJr_OmXICpKF8oS8N2AaP-ybt29L-rw/viewform) or contact us by emailing [privacyofficer@reachplc.com](mailto:privacyofficer@reachplc.com).
+**16.3.3 Spanish Speaking Consumers of [The Mirror US ES](https://www.themirror.com/es/)**
+If you are a Spanish speaking consumer of https://www.themirror.com/es/ please email the Data Protection Officer at [privacidad@reachplc.com](mailto:privacidad@reachplc.com) stating the country in which you live and which data protection right you would like to exercise. Alternatively fill in the US [rights request form](https://docs.google.com/forms/d/e/1FAIpQLSe_S4UU9agFYuaYgp0IJr_OmXICpKF8oS8N2AaP-ybt29L-rw/viewform) or go to [UK and EU residents: your rights and how to exercise them]().
+**16.4 Other Notices**
+**Video Services Notice**
+Your video content viewing and associated media consumption activities (collectively "Viewing Activities") may be collected and shared by Reach when you use the Services. By watching video content on or through the Services, you are consenting to share your personal information, together with your Viewing Activities, with third parties, including, without limitation, service providers with whom we partner to provide our Products to you, as well as our advertising, social media and other business partners.
+Such sharing allows you to take advantage of the full features of the Services, which may include serving you ads on the Services that are of interest to you. Your consent to sharing is valid for two years from the date of such use or until you withdraw your consent by clicking on the "Do Not Sell or Share My Personal Information" link in the footer of the relevant website or by the [rights request form](https://docs.google.com/forms/d/e/1FAIpQLSe_S4UU9agFYuaYgp0IJr_OmXICpKF8oS8N2AaP-ybt29L-rw/viewform).
+**[\*\*\* Click here to go back to 'Contents' \*\*\*]()**