Your trust is very important to us. This means the BBC is committed to protecting the privacy and security of your personal data. It is important that you read this notice so that you are aware of how and why we are using such information. This privacy notice describes how we collect and use personal data about you during and after your relationship with us, in accordance with data protection law. 

What will BBC collect and how we will use it?

You will need to sign into your BBC account to use the BBC iPlayer app. We may use your account information to send important messages to you about the BBC iPlayer app, such as updates to this privacy notice. When you use the BBC iPlayer app, we will collect and process your personal data to provide you with a personalised BBC iPlayer experience and to improve BBC iPlayer service.

Your Watchlist

When you add a programme to your Watchlist, the action gets stored on your device and sent to BBC servers to find out if the programme is currently available on BBC iPlayer. You can remove programmes by tapping Remove.

To clear your watch history on iOS or Android, go to App Settings > Clear watch history.

Search history (iOS only)

We think it’s useful to display the programmes you’ve previously searched for within the app, so you can easily find them again. This information is stored on your device only and not sent to the BBC.

You can delete your search history by tapping the Clear history button on the search screen. This option is not currently available on Android devices.

Analytics 

The BBC uses cookies and similar technologies to understand how audiences interact with our services, content and marketing messages. On iOS and Android, the categories of personal data processed by our data processors include the following:

• IP address to determine which UK city/region you are in, or which country/continent you are in if outside of the UK
• Activity data, such as the time when you first used this app, and programmes you watched and interacted with
• Your device information, such as device type, OS version

For Android devices, the following personal data is also processed:  

• Which sites referred you to download and use this app
• Your BBC Account ID, BBC Account data, type of campaign seen, and social media channel used before clicking onto BBC iPlayer. We use this information to understand which campaigns lead people to use BBC iPlayer and will aggregate this personal data for reporting purposes

You can “opt out” from our data processors’ tracking by filling the “Forget My Device” form in this link https://www.appsflyer.com/optout

For Apple devices, we receive aggregated attribution reports from Apple, which are not linked to you or your device. These reports contain no personal data. You can read the Apple Privacy Policy if you want to know more about how Apple uses your personal data, including your device information used to prepare the aggregate reports. 

Other information stored on your device 

To give you the best BBC iPlayer experience, the following information will be stored on your device only:

• The last Category you viewed, so we can return you there when you next go to the Categories section
• The last Channel you viewed, so we can return you there when you next go to the Channels section
• Whether you last viewed the Queue or the Downloaded page, so we can return you there when you next go to the Downloads section
• Your current Download Quality setting
• Resume positions for programmes you’re currently watching (on the same device)
• Whether you’ve confirmed that you’re aged 16 years or over
• Whether you’ve dismissed in-app messages, such as suggested app upgrade messages, warnings about network provider charges or TV Licence messages
• Downloaded programmes and the downloading and expiry state of those programmes
• Parental Guidance Lock PIN, secret question and answer

You can remove this locally stored information by uninstalling the BBC iPlayer app. On Android and Amazon Fire devices, you can also delete this data in the general Settings on your device. Choose Applications, Application manager or Installed Apps, scroll down to BBC iPlayer and tap Clear data (this will also remove all your Downloads).

Deleting locally stored information does not delete your BBC account or information held on BBC servers.

Push notifications

If you choose to receive push notifications and in-app messages, the BBC will use selected data processors to process the personal data listed below on our behalf:

Device ID assigned to your device

• Device ID assigned to your device
• The name that you gave us when you registered your BBC account
• Activity data, such as programmes you watched and interacted with
• BBC user ID associated with your BBC account

Push notifications and in-app messages include series availability, future releases, reminders and related content that may be of interest to you. You can stop receiving push notifications and in-app messages at any time by switching the app or BBC account setting to “off.”

Who is the Data Controller?

The BBC is the “data controller” of the personal data about you. This means that the BBC decides what your personal data is used for, and the ways in which it is processed. This notice explains how we use your personal data in connection with the BBC iPlayer apps and should be read alongside the BBC’s Privacy and Cookies Policy, including the information about your BBC account. As the data controller, the BBC has the responsibility to comply, and to demonstrate compliance with, data protection law.

Lawful basis for processing your personal data

We rely on “public task” where processing your personal data is necessary to deliver the BBC’s public services. Our public task is established by our Charter and Framework Agreement, which set out the BBC’s mission and public purposes, including providing content and services that inform, educate and entertain.

This includes processing your personal data to authenticate your BBC account, provide access to BBC content through the BBC iPlayer app, remember where you left off, and provide a personalised experience. We also rely on public task for analytics and service improvement where the processing is necessary and proportionate to understand how BBC iPlayer is used and improve the service, where that processing is necessary and proportionate to delivering our public services.

Sharing your personal data

We share some of your personal data with TV Licensing to keep the database up to date.

We may share personal data with a third party where required or permitted by law.

Retaining your personal data

The BBC will retain the personal data you give us as part of your BBC account for as long as you have an account with us, subject to our retention requirements explained below.

Your activity data collected whilst using our products and services will be kept and deleted in accordance with the BBC’s retention policies. For more information about how we determine retention periods, see How long will you keep my information?

Your personal data is stored in the European Economic Area (EEA), US and Israel. Where your personal data is transferred outside the UK, we comply with the applicable requirements of UK data protection law, as explained under “Sharing your data”.

If you are accessing BBC iPlayer through an app, you can delete the locally stored BBC iPlayer app data by deleting the app. This does not delete information held on BBC servers.

If you delete your BBC account, we will delete or anonymise the personal data associated with it in accordance with our account-deletion process and retention requirements. We may retain some information where there is a lawful reason to do so. Where we anonymise information about how you have used BBC services, you will no longer be identifiable from it. 

Your rights and more information

You have rights under data protection law:

• You can request a copy of the personal data BBC stores about you.
• You have the right to request that we rectify any inaccurate or incomplete personal data that we hold about you.
• You have the right to ask for the personal data we collect about you to be deleted, however there are limitations and exceptions to this right which may entitle the BBC to refuse your request. 
• In certain circumstances, you have the right to restrict the processing of your personal data or to object to the processing of your personal data. 
• You have the right to ask that we transfer the personal data to you or to another organisation, in certain circumstances.

You can contact our Data Protection Officer if you have questions or wish to exercise your rights. For more details about your rights, please visit the BBC’s Privacy and Cookies Policy at http://www.bbc.co.uk/privacy. 

If you have a concern about the way the BBC has handled your personal data, you can contact us using the details above. You also have the right to complain to the supervisory authority in the UK, the Information Commissioner’s Office (ICO) https://ico.org.uk/.

Updating this privacy notice

We will revise the privacy notice if there are significant changes to how we use your personal data.