BritBox is a service run by BritBox, LLC.

BritBox respects your right to privacy. We’re committed to being transparent about our use of your information and the choices available to you. This policy applies to your access or use of all websites, applications, software, sweepstakes or contests, products and services where this policy is posted or referenced (collectively, “services”). This policy tells you what information we may collect, how we collect it and what we might do with it. By accessing and using our services you agree to our use of your information as described in this policy. If you have any questions, please don’t hesitate to contact us at privacy-us@britbox.com.

If you are a California resident, click here for our California Notice at Collection and information provided pursuant to the California Consumer Privacy Act.


Updates to this policy: This privacy policy may be updated from time to time to reflect changes in law or best practice, or changes in our business practices. We will take reasonable steps to notify you of any material changes that impact on your privacy. The date of the most recent revision will appear at the top of this page. You should check this policy each time you provide information to us. If you do not agree to the changes, please do not continue to use our services.

  1. What information we might collect about you
  2. How we use this information
  3. When we may share your information with others
  4. Where we will store and use your information
  5. How long we’ll keep your information
  6. Your Rights & Choices
  7. Children
  8. Cookies and tracking technologies used through our website, apps and emails
  9. California Residents
  10. Residents of other US States
  11. Canadian residents
  12. Contact us
  13. Glossary: What are cookies and tracking technologies?

1. WHAT INFORMATION WE MIGHT COLLECT ABOUT YOU

Data you give us: We collect information from you, such as when you register to use our services, sign up to receive marketing emails from us or when you contact customer services. This may consist of identifiers such as your name, email address and billing addresspurchase and payment information such as payment card details, demographic information, and any other information you volunteer to us (for example, when you contact customer services) may create when establishing an account with us.

When you subscribe to the BritBox- service or purchase or receive a BritBox gift subscription, we will require certain personal information to enable us to process your payments and provide access to you, you’re required to submit: your name, email address, billing address, and payment card details. If you do not provide us with the personal information requested then we will not be able to provide the service or gift subscription to you.

Data we collect automatically: When you use the BritBox service, we’ll collect technical information about your use and browsing of our website and apps and about the device you’re using to access the services. For example, we receive your IP address when your device connects to our servers so we can send content to the right device.

We sometimes also collect information about the model and version of the device, browser and operating system you’re using; data about how you use the service and what you view; your device’s network and connections, and your network and/or GPS location. We also collect unique IDs from your device – like cookie IDs or your mobile device’s Ad ID (a value assigned by the operating system). To collect this information, we use cookies and other tracking technologies. You can find more information about these technologies in section 8 of this policy.

Data we infer about you: We use information we know about you and how you use the BritBox services to predict things about you. For example, we use data about what you watch, how long you stay on a particular page, how often you visit, when you visit, and the type of device you use.

Data we collect from third party partners: If you access and/or pay for the BritBox service via a third party platform, we may collect information about you from that third party platform, including information relating to your use of the services and where relevant, your payment and subscription status. Please note that these platforms have separate dedicated privacy policies which set out how those platforms use your personal information.

Data we collect from social media services and other third parties: When you choose to participate in or receive a service from us via social media and similar third party platforms, for example by posting comments, interacting with us, or entering a competition, we may collect information from you directly or the social media service may share with us personal information about you depending on the privacy notice and any choices you have on that platform.

Information we buy-in from data specialists: We may purchase data from specialist data resellers, including demographic information, publicly available information, purchase data and advertiser data


2. HOW WE USE THIS INFORMATION

We aim to use your information in ways that are fair and reasonable. Generally speaking, we and our service providers might use your information to:

  • Provide services and functionality you request from us, for example to create an account for you and to enable you to subscribe to our services
  • To process your purchase or redemption of a BritBox gift subscription
  • Respond to any customer service requests that you make
  • Personalise our services and our marketing, including by generating automated customized content recommendations based on your browsing and viewing behavior, as well as any demographic information we hold about you
  • In accordance with your marketing preferences/choices, send newsletters or marketing to you, including content recommendations and offers including in relating to our content, brands and services and other companies in the BBC Studios group, like UKTV or bbc.com
  • To send you physical products related to your subscription (for example, branded merchandise, if those products are included in your subscription)
  • Provide technical support and send service messages; for example, to let you know if a new version of our app is available, or if there will be any maintenance carried out on the service
  • Invite you to participate in surveys, user testing and panels
  • Administer prize draws and competitions which you choose to enter – including publishing the names of winners, if required
  • Analyze your use of our services to help us to understand how the services are used and to improve them for everyone
  • Enforce our rights and terms of service
  • Prevent fraud or other potentially illegal activities (including copyright infringement)
  • Manage our email suppression lists
  • For such other purposes as you may consent from time to time.

Aggregate and/or Anonymized Information: We may aggregate or anonymize certain information that we collect from you. Aggregate, anonymized and de-identified information is designed so that we can’t re-identify you personally. We reserve the right to use such anonymous and de-identified data for any legitimate purpose without further notice to you or your consent.


3. WHEN WE MAY SHARE YOUR INFORMATION WITH OTHERS

We may share your information outside BritBox in the following circumstances:

BritBox group companies: We may share your personal information with other BritBox group companies (including other BBC group companies) where those BritBox group companies are performing business functions on our behalf or providing us services, support or advice. We will take steps to ensure that any such processing will be in accordance with this privacy policy. We require our BritBox group companies to use appropriate organizational and technological safeguards to protect your personal information from unauthorized use and disclosure.

The BBC group: To improve your experience of our services and brands, and to enable us to cross-promote our services, your information may be shared between companies in the BBC group (including BBC Public Service and BBC Studios companies such as UKTV and bbc.com) for the purposes of research, analysis, marketing and ad-serving. Wherever reasonably possible this information will be anonymized or aggregated. In addition, different companies within the BBC group provide data processing services to each other.

Our service providers: We use a number of third parties to perform business functions on our behalf, such as sending our newsletters or any physical products, hosting our online services and providing our customer services. We take steps to only disclose the information reasonably necessary to enable these third parties to perform or improve their services. Our suppliers are contracted to comply with our instructions and in most circumstances we require that they use your personal information for limited purposes only.

Payment partners: We use specialist payment partners to process your payment card information. In processing your payments, they may also use the data for fraud detection and prevention. They’re obliged to remain certified as compliant with the Payment Card Industry (PCI) security standards.

Social media networks and other third parties: We may share information with these networks and other third parties so we can market to you through their services and to help us to market to people with similar interests to you. For example, some services allow us to upload our customer list to match them to their users in a secure form – using a technology called hashing, which makes the data unreadable unless the other company has the same data. We also use this process to exclude you from marketing campaigns that are not relevant to you. For example, if you already have an account with us, we will use this information to exclude you from promotions about new subscriptions.

We may use IP addresses, usage information and hashed email addresses (where the email address is transformed into a unique identifier that is used to match our data to those known also by the platform) to establish a connection between our data and the data processed by social media platforms like Meta (Facebook and Instagram). This allows us to provide you with more relevant and tailored advertisements in your social media feeds and helps us track and measure how you interact with our advertisements on social media, ensuring that the content you see is more aligned with your interests.

Any use of your information by third party social media services will be subject to their privacy policy and the preferences you have set for their platform(s).

You may opt-out of having your data used for these purposes as explained in section 6. If you opt-out or make any changes to your browser settings, you may continue to see non-personalized and contextual ads for our services.

Regulatory bodies and others: We may disclose your personal information to law enforcement agencies, government/regulatory bodies, internet service providers and content protection organizations as required or allowed by law. For example, if you post inappropriate or objectionable content on our services or where we reasonably believe you may be in breach of the law, we may report your content and behavior to relevant parties.

Sale or transfer of all or part of our business or assets: Except where prohibited, we reserve the right to transfer your personal information if we sell or transfer all or a part of our business or assets so the buyer can continue to offer you the services. In such circumstances, we’ll make reasonable efforts to give you advance notification of the transfer of your information. We may also disclose certain personal information toa prospective buyer, lender or bank, as part of certain due diligence processes.


4. WHERE WE’LL STORE AND USE YOUR INFORMATION

Some of our business functions, IT systems and customer services are managed, administered or hosted from locations outside of the United States or Canada, including the EU, Japan, Pakistan and the Philippines. This means your information may be stored or processed in those locations or other locations outside of the United States or Canada. Your information may be subject to access requests from governments, courts, or law enforcement.

As described in the previous section, we may share your information with other companies in the BBC group or with third party service providers and social networks. These companies may be located in, or use IT equipment located in, countries different to that in which your information is collected. Where this is the case, we’ll take steps to ensure your information receives an equivalent level of protection.

Even though we have taken steps to help protect the information in our control, you should be aware that security measures cannot provide absolute protection. The Internet is not 100% secure. We cannot promise that your use of our sites and apps will be completely safe. We encourage you to use caution when using the Internet. This includes not sharing your passwords.


5. HOW LONG WE’LL KEEP YOUR INFORMATION

We’ll keep your information for as long as you use our services and for a period of time after you have stopped using the services for analysis, administrative and business purposes. The period for which your personal information will be kept will vary according to the type of personal information and the purpose for which the personal information was collected, and we maintain internal records setting out these various periods. As an example, we may retain certain transactional data for a number of years for the purposes of taxation or audit. After the relevant period has expired, the personal information will be securely deleted unless it is necessary for the establishment, exercise or defense of legal claims. We may keep an anonymized form of your account for a longer period, but it won’t be possible to link this data back to you.

Our payment partners will keep certain payment information for as long as required by law.


6. YOUR RIGHTS & CHOICES

Under certain circumstances, you may be able to exercise the following rights under local data protection laws depending on where you are resident.

Where permitted by applicable law and depending on the nature of your request, we may require you to prove your identity before we carry out your request, for example if you have requested access to, or deletion of, your information. The verification steps may vary depending on the sensitivity of the personal information and whether you have an account with us. Normally, we will require that any request is sent to us from the email address which you used to register for the service.

Depending on where you are a resident, you may have the right to nominate an authorized agent to make a request on your behalf. When submitting the request by following the instructions below, please ensure they are identified as acting on your authority.

We will not discriminate against you because you made any of these requests.

We may deny certain requests, or fulfil a request only in part, based on our legal rights and obligations. Certain requests may also be subject to exceptions under applicable law. If you are not satisfied with the outcome of your request, you may submit an appeal by sending an email to the contact details below with “Data Privacy Appeal” in the subject line.

Unsubscribe from email marketing: You can opt-out from email marketing at any time by changing your preference in your account settings or by clicking on the unsubscribe link in a marketing email we send to you. You can also opt-out from email marketing by contacting us at privacy-us@britbox.com. Please note that you cannot unsubscribe from some service-related messages.

In accordance with industry standards, we reserve the right to retain your record for suppression purposes for a reasonable amount of time so we can ensure we don’t contact you in the future.

Opt-out of email based advertising on social media services and other networks: You can opt-out of your email address being included within the customer lists we share with social media services and other networks to market our service as described in section 3, by contacting us as follows:

Change your settings for cookies & similar technologies: The choices you have around consents and opting out vary from territory to territory. If you are resident in the US, you can manage your cookie consent choices here or by clicking on the ‘Do not share or sell my personal information’ link in the footer of britbox.com.

You can also choose how cookies (across all websites) are handled on your device via your browser settings. For more information see section 8. Your selections are specific to the device, website, and browser you are using. Your selections may be deleted whenever you clear your cookies or browser’s cache. If you are resident in the US, you can also communicate your preference by sending a Global Privacy Control signal, on browsers or browser extensions that support such a signal.

Deleting your information: If you’d like us to delete information about you from our records, please contact us via customer services or by using the details below.

If you wish to delete your BritBox account or a payment card associated with your BritBox account, you may in addition make this request through this dedicated online form. If you have a subscription, you need to cancel this before we’ll let you delete your account or payment card.

Please note that we may be required to retain certain information by law and/or for legitimate business purposes.

Accessing your information: Much of the information we hold about you is accessible via your account. If you’d like a copy of other information we may hold about you, you can submit a request to us by using the contact details below. Please supply as much information as possible to help us to locate your information, including the email address associated with your account. You may also request confirmation that we process your information. If permitted under applicable law, we reserve the right to charge a reasonable fee for this service.

Correcting your information: Much of the information we hold about you is amendable via your account. You can also request to correct any incomplete or inaccurate personal information we hold about you, though we may need to verify the accuracy of the new data you provide to us.

Transfer your personal information in a machine-readable format (to you or a third party): You may have the right to request that we provide to you, or a third party you have chosen, certain personal information in a structured, commonly used, machine-readable format. Where this right applies, we will provide such transfer as far as it is technically feasible.

Request information about how your personal information is handled: Specifically, you may have the right to ask what personal information has been collected, how and why it is processed or disclosed, the categories of parties who have access to that information, the applicable retention period, and the source of personal information if it was collected from a third party. Even if this is what this policy is intended to achieve, you may request clarifying information. Minnesota and Oregon residents may also request a list of third parties (as defined in applicable law) to whom we have disclosed personal data.

Opt-out of targeted advertising and the “sale” or “sharing” of personal information: When you use our services, third parties may use personal information obtained from or in connection with your activities on our services and across unaffiliated sites to show more relevant advertising to you. This may include the categories of personal information described in section 1 and section 3 (including, for example, hashed email address and IP address), inferences, location, internet activity, device and browsing data and the use of that personal information by the categories of parties described in and section 8 (including, for example, advertising and analytics companies, including social networks).

In certain jurisdictions, these activities may be considered a “sale”, “sharing”, or “targeted advertising”. You can request that we stop using or sharing your personal information for such targeted advertising. You can also request that we not “sell” or “share” your personal information. By “sell”, we mean the sale of your personal information to an outside party for monetary or other valuable consideration. By “share”, we mean the disclosure of your personal information to third parties for their own marketing purposes or for cross-context behavioral advertising purposes, subject to certain exceptions under applicable law. We do not knowingly “sell” or “share” the personal information of minors under 16 years of age.

If you would like to opt out of behavioral or targeted advertising, follow the instructions in the ‘Change your settings for cookies and similar technologies section’ above.

Complain to a regulator: You may have the right to make a complaint at any time to the regulator for data protection in the territory in which where you resident. We would, however, appreciate the chance to deal with your concerns before you make a complaint to the regulator, so please contact us in the first instance at the contact details provided below.

Exercising these rights: If you would like to exercise any of these rights, please follow the instructions provided or submit a request to us in writing using the contact details provided below.


7. CHILDREN

BritBox does not direct its services to children under the age of eighteen (18) and does not knowingly collect information from such children. We require all users of the services to be at least eighteen (18) years old. If we obtain actual knowledge that a user is under the age of eighteen (18), we will promptly delete all information associated with such account. By using the services, you are representing that you are at least eighteen (18) years old.


8. COOKIES & TRACKING TECHNOLOGIES USED THROUGH OUR WEBSITE, APPS AND EMAILS

Like most companies, we (and our service providers) use specialist web and app technologies, including cookies. You can find out about these specific types of technologies in Section 13.

We use these technologies for a variety of purposes, including those outlined below.

Operating our services: for example, to keep you signed in, to secure our services and your information, plus other system administration purposes.

Providing features and functionality to improve your experience: such as enabling you to save your preferences and playback settings or to remember your playback progress.

Analyzing use of our services to optimize and improve our services: we monitor and measure how our services are used, as well as the effectiveness of our email and online marketing campaigns, so we can optimize and improve how we operate.

We use third party analytics services on our website and apps to help us analyze how users interact with and use our services, compile reports regarding activity on our services, and provide other services. These analytics services use cookies and other tracking technologies to collect information about your use of our services, plus technical data such as your IP address, browser type and version, time of visit, whether you are a return visitor, or any referring website. The information generated by these analytics services will be transmitted to and stored by them and will be subject to their privacy policies.

Examples of the services we may use for analytics include:

  • Google Analytics, opt-out: tools.google.com/dlpage/gaoptout

Personalizing and marketing of our services (online adverting): We use cookies and other technologies to personalize content based on your viewing and browsing behavior.

We may also use advertising companies to serve our online marketing to you elsewhere on the web. These companies may use tracking technologies to collect information about your use of our services, which they use to target our marketing messages to you. They may also collect information about your online activities over time and across different websites, as well as other online services so they can better understand your interests, and serve you with relevant adverts. Some of these services may hold personally identifiable information and they may match this to your browsing behavior for their own profiling and advertising purposes.

Examples of the services we use for personalization and marketing include and a link to the opt-out tool for the relevant service, are listed below.

Sharing tools and social media: We may provide you with the ability to share pages or information via third parties, for services such as social sharing. When you interact with these services they may collect information from and about you, as well as your interaction with their content. This activity will be subject to the privacy policy of and your settings for your chosen network. It’s important to be aware that they may track your activity, through the use of cookies or similar technology, without you needing to interact with them. If this concerns you, make sure you log out of their services before using ours.

Your Choices: You can limit some of the tracking technologies that collect information when you use our services by using our cookie consent tool, or the opt-out tools provided by our service providers and ad industry bodies, or by changing your device settings.

Cookie Consent Tool: When you are accessing our website, you can exercise your cookie consent choices with respect to certain categories of cookies, by clicking here.

Advertising Industry Opt-Out Tools: Advertising companies that serve interest-based advertising may participate in self-regulatory programs such as the Digital Advertising Alliance and the Network Advertising Initiative. Both programs provide tools that enable you to opt out from your browsing data being used by these companies to customize adverts to your interests:

Browser settings: Many web browsers automatically accept cookies (and LSOs and HTML5 storage), but you can usually modify your browser’s setting to decline cookies if you prefer or delete them when you close your browser. You’ll find instructions for this on your browser’s help menu. If you choose to decline cookies, certain features of our services may not function properly or become inaccessible to you. In addition, you may also render some technologies unusable by rejecting or removing their associated cookies. Note that if you choose to remove cookies, you may remove opt-out cookies that affect your online marketing preferences.

Mobile device settings: Similarly, you can learn how to opt out of mobile app tracking by certain advertising networks through the privacy and/or advertising settings on your device. To find out how to change these settings for Apple, Android or Windows devices, see:

Email settings: We may measure the effectiveness of our email marketing campaigns through the use of a pixel, or image file. You can opt out by turning off images in your email client – your provider may set them to ‘off’ by default.

‘Do Not Track’ (DNT) signals sent by your browser: Your browser or device may include ‘Do Not Track’ functionality. As there’s no common industry standard, we don’t currently respond to ‘Do Not Track’ signals. We continue to monitor industry and technological developments in this area and may adopt a standard if one is agreed. In the meantime, you can control the cookies as described above.


9. CALIFORNIA RESIDENTS

California residents have the right to receive notice of certain of our privacy practices, including categories of personal and sensitive personal information we may collect (see Section 2) the purpose for which we collect or use such information (see section 3), whether such information is "sold" or "shared" as those terms are defined in California law (see section 6), and how long such information is retained (see section 5). You can make requests regarding your personal information as described in section 6.

Do Not Sell or Share My Personal Information: follow the instructions in section 6 to exercise your right to request that we not “sell” or “share” your personal information as such terms are defined in applicable California law.

California Shine the Light: California residents may request one time each year if we have disclosed your personal information to third parties for their own direct marketing purposes. While we do not generally disclose your personal information as defined in California’s “Shine the Light” law, you may opt out of such sharing by emailing us at privacy-us@britbox.com and indicating that you are a California resident making a “Shine the Light” inquiry.


10. RESIDENTS OF OTHER US STATES

Residents of other US states with data privacy laws (including, for example, residents of Colorado, Connecticut, Delaware, Iowa, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Tennessee, Texas, Utah or Virginia), have certain rights with respect to your personal information. The scope of these rights are covered by the rights and choices set out in section 6.


11. CANADIAN RESIDENTS

We use service providers, and share data with advertising platforms, that are located outside Canada and the Province of Quebec, primarily in the United States. For more information about our policies and procedures regarding transferring personal information outside of Canada, including with our service providers, please contact us using the information provided in section 12.

The categories of individuals within our organization who may access your personal information include: personnel in our product, technology, data, customer, research, marketing, legal and finance teams, and any other teams as required from time to time.

If you are a resident in Canada, you also have the following additional rights regarding your personal information:

Right to withdraw consent: In Canada, subject to any exemptions, express or implied consent is the legal basis upon which organizations may collect, use and disclose personal information. Accordingly, subject to any exemptions, personal information will only be collected, used and/or disclosed by us for the purposes described above in this policy, with your express or implied consent, as applicable. Where you have provided your consent to the collection, use, and disclosure of your personal information, you may have the legal right to withdraw your consent under certain circumstances. Please note that if you withdraw your consent, we may not be able to provide our services to you, or your user experience may not be as useful or enjoyable. We will explain the impact to you at the time to help you with your decision.

You may also refuse the collection of certain personal information by opting for:

  • In-person inquiries instead of email
  • Refusing cookies, though this may affect certain site functionalities

12. CONTACT US

  • Data Protection Officer
  • BritBox LLLC
  • 1120 Avenue of the Americas, FL 5
  • New York, New York 10036
  • privacy-us@britbox.com

13. GLOSSARY: What are cookies and tracking technologies?

Websites and Apps you use, including this service, may use a combination of the following technologies:

Cookies, LSOs and HTML5 storage: These are distinct yet similar technologies which use small text files to store a randomly assigned ID and a website reference ID on your device to enable a website to ‘recognize’ it. They’re not usually used to store personal information. Some cookies will be deleted when you leave the website (session cookies) and others will persist so your device can be recognized and tracked over time – for example, for analytical purposes, to keep you signed in, or to remember media playback data. They may be set by the website you visit or by other companies providing services to/via that website (‘third party cookies’). Cookies can be controlled via your browser settings, and by using the opt-out tools. Be aware that opt-out tools work by setting an opt-out cookie, which tells the website not to track you. So if you then delete/clear your cookies you’ll delete the opt-out.

Tags, pixels and web beacons: These are all terms for pieces of code invisibly embedded in the webpage which transmit a reference code to enable websites and companies to track traffic and your interaction with a website, app or email. They’re often used in conjunction with cookies to see how you navigate the website.

HTTP referrers: When you navigate to a website, the page you originated from or the URL you clicked on will be sent to the website. This is then logged and used to help understand more about your user journey, or to analyze the effectiveness of marketing campaigns.

Device fingerprinting: Websites using this technology will collect a wide range of technical data about your device, browser and operating system which enables them to uniquely identify your device with high precision without relying on other technologies. This can therefore be used if you’ve set your browser to refuse cookies.

Software Development Kits (SDKs): These are small programs contained within mobile apps to provide functionality. They’re generally used by mobile app developers to provide analytics and data about the use of an app, or to serve advertising. You can usually limit the reporting from the app settings, or by limiting or resetting the Ad ID in your device settings.