Your trust is very important to us. This means the BBC is committed to protecting the privacy and security of your personal data. It is important that you read this notice so that you are aware of how and why we are using such data. This privacy notice describes how we collect and use your personal data during and after your relationship with us, in accordance with data protection law.  

What will BBC collect and how we will use it?

You need to sign into your BBC account to use the BBC iPlayer app. We will use your account information to send you messages about BBC iPlayer app, such as updates of the iPlayer app Privacy Notice. When you use the BBC iPlayer app, we will collect and process your personal data to provide you with a personalised BBC iPlayer experience, including remembering where you left off and to improve BBC iPlayer service.

Your Added programmes

When you add a programme to My Programmes, the action gets stored on your device and sent to BBC servers to find out if the programme is currently available on BBC iPlayer. You can remove programmes by tapping Remove.

To remove everything from My Programmes on iOS or Android, go to App Settings > My Programmes > Clear History. 

Search history (iOS only)

We think it’s useful to display the programmes you’ve previously searched for within the app, so you can easily find them again. This information is stored on your device only and not sent to the BBC.

You can delete your search history by tapping the Clear history button on the search screen. This option is not currently available on Android devices.

Analytics 

The BBC uses cookies and similar technologies to understand how audiences interact with our services, content and marketing messages. On iOS and Android, the categories of personal data processed by our data processors include the following:

• IP address to determine which UK city/region you are in, or which country/continent you are in if outside of the UK
• Activity data, such as the time when you first used this app, and programmes  you watched and interacted with 
• Your device information, such as device type, OS version

For Android devices, the following personal data is also processed:  

• Which sites referred you to download and use this app
• Your BBC Account ID, BBC Account data, type of campaign seen, social media channel used before clicking onto BBC iPlayer will be collected. We will aggregate this personal data for reporting purposes 

You can “opt out” from our data processors’ tracking by filling the “Forget My Device” form in this link https://www.appsflyer.com/optout

For Apple devices, we receive aggregated attribution reports from Apple, which are not linked to you or your device. These reports contain no personal data. You can read the Apple Privacy Policy if you want to know more about how Apple uses your personal data, including your device information used to prepare the aggregate reports. 

Other information stored on your device 

To give you the best BBC iPlayer experience, the following personal data will be stored on your device only:

• The last Category you viewed, so we can return you there when you next go to the Categories section
• The last Channel you viewed, so we can return you there when you next go to the Channels section
• Whether you last viewed the Queue or the Downloaded page, so we can return you there when you next go to the Downloads section
• Your current Download Quality setting
• Resume positions for programmes you’re currently watching (on the same device)
• Whether you’ve confirmed that you’re aged 16 years or over
• Whether you’ve dismissed in-app messages, such as suggested app upgrade messages, warnings about network provider charges or TV Licence messages
• Downloaded programmes and the downloading and expiry state of those programmes
• Parental Guidance Lock PIN, secret question and answer

This above personal data will be deleted if you uninstall the BBC iPlayer app. On Android and Amazon Fire devices, you can also delete this data in the general Settings on your device. Choose Applications, Application manager or Installed Apps, scroll down to BBC iPlayer and tap Clear data or Clear cache (this will also remove all your Downloads).

Push notification

If you choose to receive push notifications and in-app messages, the BBC will use selected data processors to process the personal data listed below on our behalf: 

• Device ID assigned to your device
• The name that you gave us when you registered your BBC account
• Activity data, such as programmes you watched and interacted with
• BBC user ID associated with your BBC account 

Push notifications and in-app messages include series availability, future releases, reminders and related content that may be of interest to you. You can stop receiving push notifications and in-app messages at any time by switching the app or BBC account setting to “off.”

Who is the Data Controller?

The BBC is the “data controller” of the personal data about you. This means that the BBC decides what your personal data is used for, and the ways in which it is processed. For the avoidance of doubt, your personal data will be collected and processed solely for the purposes set out in this privacy notice. As the data controller, the BBC has the responsibility to comply, and to demonstrate compliance with, data protection law.

Lawful basis for processing your personal data

When you use the BBC iPlayer app we have a legitimate interest to process the personal data about you to authenticate your BBC Account, provide you with BBC content, access to the BBC iPlayer app, make a personalised experience as described above and improve your BBC iPlayer experience. 

We will also obtain your consent to provide you with personalised emails, such as personalised newsletters. You can sign up to receiving personalised emails and newsletters by turning on the “BBC emails for you” toggle in your account email preferences.  You can switch off the toggle anytime to withdraw your consent.

Retaining your information

The BBC will retain the personal data you give us as part of your BBC account for as long as you have an account with us. 

Your activity data collected whilst using our products and services will be kept and deleted in accordance with the BBC’s retention policies. 

Your personal data are stored in the European Economic Area (EEA), US and Israel. If your data is processed outside the UK and the EEA, the BBC will ensure that it is protected to the same standards as if it were being processed within the UK and EEA.

If you are accessing BBC iPlayer through an app, you can delete all BBC iPlayer app data stored on your device by deleting the app. 

If you delete your BBC account, your personal data, such as email address, postal code, year or date of birth will be permanently deleted. Any data about how you've used BBC services will be anonymised, and we will no longer be able to identify you from that data.

Sharing your information

When we transfer some limited personal data outside of the European Economic Area (EEA), we make sure that our contracts include safeguards for the transfer of your personal data outside the EEA. The selected data processors listed in this privacy notice have entered an appropriate contract, which ensures they only use your personal data on behalf of the BBC and not independently of the BBC. 

Your rights and more information

You have rights under data protection law:

• You can request a copy of the personal data the BBC stores about you.
• You have the right to request that we rectify any inaccurate or incomplete personal data that we hold about you.
• You have the right to ask for the personal data we collect about you to be deleted, however there are limitations and exceptions to this right which may entitle the BBC to refuse your request. 
• In certain circumstances you have the right to restrict the processing of your personal data, or to object to the processing of your personal data. 
• You have the right to ask that we transfer the personal data to you or to another organisation, in certain circumstances.

You can contact our Data Protection Officer if you have questions or you wish to find out more details about your rights, please visit the BBC’s Privacy and Cookies Policy at http://www.bbc.co.uk/privacy. Please note that the description of the personal data collected and how it is used set out in this notice applies to the exclusion of anything to the contrary set out in the BBC’s Privacy and Cookies Policy.     
    
If you have a concern about the way the BBC has handled your personal data, you can raise your concern with the supervisory authority in the UK, the Information Commissioner’s Office (ICO) https://ico.org.uk/.

Updating this privacy notice

We will revise the privacy notice if there are significant changes to how we use your personal data. The date of the most recent revisions will appear on this page.