Skip to content

Privacy Notice

There is no real change to report. The previous stored version of this privacy notice contained no text, so the entire document shows up in the diff as newly added. This is a capture problem on our side, not a rewrite by the company — every line shown existed before and was simply not recorded last time. Because nothing can be compared, no consumer impact can be identified from this update. The notice itself is dated 31 July 2026 and covers Reach plc's news, shopping, subscription and advertising services. The next time this document is checked against a version with actual text, any genuine changes will show up.

Cosmetic change: formatting, typos, or contact details.

20260811_rev01COLOUR MARKS THE SEVERITY OF A FLAGGED CLAUSE · + AND − MARK ADDED AND REMOVED
1We have organised this Privacy Notice based on the different ways you might interact with us and what you might want to know.
2
3Please use the contents list below to navigate to the section of the Privacy Notice which you are interested in. At the end of each section if you want to return to the contents list please click the link: 'Click here to go back to 'Contents''
4
5Last update: 31 July 2026
+ ADDEDFull privacy notice captured for the first time

The earlier saved copy of this notice was empty, so the whole text appears as new here. Nothing in the document was actually changed by the company in this update, and no terms were added, removed or reworded that we can verify. The notice is marked 'Last update: 31 July 2026'.

6
7## CONTENTS
8
91. **[Who we are and how to contact us]()**
102. **[About this Privacy Notice]()**
113. **[When you browse our websites and use our apps]()**
124. **[When you create or sign into your online news or other Reach account]()**
135. **[When you buy a product or service from us]()**
146. **[When you opt to receive newsletters or marketing communications]()**
157. **[When you enter a competition or prize draw]()**
168. **[When you complete a survey]()**
179. **[When you subscribe to our print, online or Premium subscription sites, or place a classified ad]()**
1810. **[When you visit or interact with us on social media]()**
1911. **[When you apply for a job with us or work at other organisations we do business with]()**
2012. **[Further ways we may receive, use and share your data]()**
2113. **[How we keep your data secure, why we may keep it and countries we may transfer it to]()**
2214. **[How we ensure we protect children's privacy]()**
2315. **[UK and EU residents: your rights and how to exercise them]()**
2416. **[US, Canadian and other residents: relevant laws, rights and notices]()**
25
26## 1\. Who we are and how to contact us
27
28We are the Reach group, which is made up of Reach plc and its subsidiaries. Reach plc is the largest national and regional news publisher in the UK with a portfolio in Ireland and the United States. We aim to create engaging, relevant content which is distributed through various channels and media including newspapers, magazines, and digital platforms - playing a central role in our audiences' daily lives.
29
30We are the name behind some of the UK's most influential, iconic, and trusted news brands, such as the Daily Mirror, Daily Express, Daily Star and Daily Record, as well as leading celebrity and entertainment magazine OK! and the online shopping site Yimbly.com. We also publish leading regional titles including the Manchester Evening News, Liverpool Echo, and Birmingham Mail, plus the Mirror US and Express US. You can see the list of websites and brands we publish [**here**](https://www.reachplc.com/about-us/our-brands).
31
32Depending on who you are and how you interact with us, the legal "controller" of your personal data will be one or more of our group companies, like MGN Limited, Reach Regionals Media Limited, Express Newspapers, Reach Publishing Group Services Limited or Reach Shared Services Ltd (all at the address above).
33
34We have appointed a Data Protection and Privacy Officer (DPO) to oversee our data protection and privacy practices. If you have any comments, concerns or questions, including any requests to exercise your legal rights, under the UK GDPR or the EU GDPR, the US State Privacy Laws or other laws we encourage you to contact our DPO as follows:
35
36- By email: [dataprotection@reachplc.com](mailto:dataprotection@reachplc.com)
37- By mail: Data Protection Enquiries, Reach Plc, One Canada Square, Canary Wharf, London E14 5AP
38
39Your point of contact for anything to do with how the Reach group uses your personal data is the office of our group Data Protection Officer, who you can contact by submitting the relevant form accessible within the 'Your rights and how to exercise them' section by emailing [dataprotection@reachplc.com](mailto:dataprotection@reachplc.com) or by writing to 'The Data Protection Team' at the address above. If you are a Spanish speaker see section 16.3.3 on how to exercise your rights.
40
41Alternatively, if you are from the US you may also contact us at:
42
43- By email: [privacyofficer@reachplc.com](mailto:privacyofficer@reachplc.com)
44- By mail: Privacy Officer, Reach Plc, 14 Wall Street, FL 20, New York, NY, 10005
45
46**[\*\*\* Click here to go back to 'Contents' \*\*\*]()**
47
48## 2\. About this Privacy Notice
49
50This Privacy Notice tells you about the kinds of information we hold about you, what we do with it, and why.
51
52As a broad summary, in our business we use information about people:
53
54- To carry out our work as journalists, by investigating and reporting on stories of relevance to our readers.
55- To deliver our features and editorial content.
56- To provide services such as subscriptions, newsletters or marketing that people sign up to, and to operate interactive features like competitions and surveys.
57- To help us to understand our readers and target our marketing and advertising that enables us to continue to finance and bring you our feature and editorial content.
58- To sell products and services on our sites.
59- To carry out back-office administration and generally run and operate our business, for instance by administering our relationships with suppliers and partner organisations, or handling job applications.
60
61Some specific activities and websites might have their own additional and complementary Privacy Notices which sit alongside this one. Generally, that will be the case for very specific services such as our commercial job boards or other specialist websites, or where we have a very specific kind of relationship with you (for instance if you are a member of our group pension scheme). We try to make it obvious where that is the case.
62
63**Privacy Notice Updates**
64
65We may update this Privacy Notice from time-to-time by posting a new version on our websites. You should check this page occasionally to ensure you are happy with any changes. Where changes are material, we may also notify you of them by email.
66
67**Data Protection and Journalism**
68
69The UK
70
71In the UK the Data Protection Act 2018 provides an exemption from data protection laws to prevent unjustified interference with the work of journalists. We are members of the Independent Press Standards Organisation (IPSO) \[[IPSO](https://www.ipso.co.uk/)\] and therefore subject to the Editors' Code \[[Code](https://www.ipso.co.uk/editors-code-of-practice/)\]. If you object to a story we have published that concerns you personally then you can find our complaints policy here \[[UK Complaints](https://www.reachplc.com/complaints-policy)\], which explains how to raise a complaint and how we will handle it.
72
73Ireland
74
75In Ireland we subscribe to the Code of Practice of the Press Council of Ireland and the Press Ombudsman, which set the benchmark for high professional standards. If you believe that we have got something wrong, or that we have breached the Code of Practice, please let us know at the contact details of the publication concerned.
76
77The Code of Practice and details of how to lodge a complaint with the Press Ombudsman are available from:
78
79Post: 1, 2 & 3 Westmoreland Street, Dublin 2.
80
81Website: [www.pressombudsman.ie](http://www.pressombudsman.ie/)
82
83Email: [info@pressombudsman.ie](mailto:info@pressombudsman.ie)
84
85Telephone: 1890 208 080
86
87Fax: 01 6740046
88
89**Our use of Artificial Intelligence**
90
91We are increasingly using Artificial Intelligence (AI) tools, to help us enhance our content and streamline our processes.
92
93Meeting the data protection requirements of our consumers is at the forefront of our AI decision making, and we ensure we review and assess any personal data which may be involved in light of data protection requirements and evolving guidance. This includes conducting assessments, ensuring the accuracy of data sets used and human review of outputs. For more information on our use of AI see our AI Notice on each website footer.
94
95We also use AI tools to systematically archive, tag, and structure our published historic journalism. This includes training internal archival models to transform our library into a structured knowledge base. This knowledge base is used exclusively by Reach journalists as a reference source to support their ongoing research and reporting activities intended for publication.
96
97Beyond our internal operations, we also partner with global technology providers to license our content for the development, fine-tuning, evaluation, and ongoing improvement of artificial intelligence models. When we share content for these purposes, we implement strict contractual safeguards to protect personal data from misuse and ensure the original context of our journalism is respected. For specific details on these partnerships, please see **Section 12.13 Artificial Intelligence Partners.**
98
99**[\*\*\* Click here to go back to 'Contents' \*\*\*]()**
100
101## 3\. When you browse our websites and use our apps
102
103When you browse our websites or use our apps, we may collect technical and/or behavioural information about your use of our websites or other content online, and the device(s) you use to access the services. For example, this information may include details about how you browse our website and the devices and technology you use to browse our website. This may also include unique online identifiers such as device ID, device type, IP address and approximate location at the time of browsing. This may also include video viewing data and may link to your activity on other sites and allow us to recognise you or your device. We may use this to build a more detailed profile of you and your interests. We may also provide you with location-based services (for example, advertising and other personalised content), where we collect geo-location data.
104
105Our advertising partners may receive some information about the device you are using and about what you look at and interact with. We do this for the purpose of choosing which adverts to show you, as well as to make our sites and apps work properly. It also allows us to diagnose problems with them and understand how they are used so we can make them better. Sometimes, we also apply a degree of personalisation in choosing which content to show you (for example, by recommending articles similar to those you've viewed previously).
106
107You can learn more about what we do with this information and why in the sections below.
108
109[3.1 Targeting by Reach]()
110
111[3.2 Targeting by third party advertising networks]()
112
113[3.3 Making our sites and apps work properly and understanding how they are used]()
114
115[3.4 Website notifications and in-app messaging]()
116
117**3.1 Targeting by Reach**
118
119We combine the information you give to us (for example, sign up information for newsletters and competitions) with the information we receive when you use our websites and apps, and analyse it in order to help us to understand your preferences and interests. We then associate this with a unique identification number. This is then used to tailor the content and advertising that you see on our websites and in our apps, so it is more likely to be of interest to you. We don't share this personalised analysis with advertisers or with the third-party advertising networks that we work with other than in highly aggregated form so that your personal data cannot be identified.
120
121**3.1.1 The data we collect and what we do with it**
122
123The data we use for this purpose is as follows:
124
125- The page you view, and associated information such as how long you spend on them and other engagement data such as articles read, visit frequency, and paywall interactions.
126- Your approximate location, to city or town level.
127- Your email address, name and sometimes username and postcode, which we will receive when you sign up for an account on one or more of our websites or apps, when you subscribe to our newsletters or marketing, when you enter one of our competitions or when you complete one of our surveys.
128- The newsletters and marketing you have subscribed to, the promotions and competitions you have entered and the surveys you have completed.
129
130We will analyse this information to infer interests, preferences, and demographic characteristics, and associate it with an internal identification number. For example, if our website analytics tell us that you are located in the approximate area of Newcastle-upon-Tyne and you read our online title ChronicleLive (which is focused on local news for that area), and you sign up to receive an email newsletter about football from our national title The Mirror, then we could infer from that you are interested in things related to a local football club or to football generally.
131
132We then divide up our identification numbers into groups based on the inferences we draw about them. Those groups are called "audience segments" or "audiences". So, for example, an identifier associated with Newcastle, ChronicleLive and the football newsletter could be allocated to audiences likely to be interested in football, and events near Newcastle-upon-Tyne.
133
134We then use those "audiences" to help us to recommend content which is more likely to be interesting (for instance, more articles about football), to tailor marketing communications and to help us to target advertisements when advertisers buy advertising space from us directly.
135
136The advertiser would never see the actual data that we use - it remains with Reach at all times. All we would share with them would be the criteria we used to target their advert, how many times their advert was shown and how many people clicked on it (but not who), so that they know how well the advert did and we know how much to charge them.
137
138**Partners we work with**
139
140We work with partners such as Freestar and Google (Ad Manager) for the purposes of placing advertising on our sites, who will also collect and use specific data for advertising purposes. See [3.2 Targeting by third party advertising networks]().
141
142We also work with a subscription partner, Piano, to help us understand user journeys (e.g. pages our users are visiting the most and which pages lead to the greatest audience conversion), understand how long users spend on our website/app, and to test effectiveness of our marketing campaigns. This audience data is then used to provide a tailored experience on our website/app. To learn more about Piano's data usage, click here: [Piano.](https://piano.io/privacy-policy/)
143
144Please note you have the right to object to profiling for marketing purposes at any time. If you wish to opt-out of having your personal information profiled for personalisation purposes, you can do so via the Privacy setting link on the webpage.
145
146**3.1.2 Our legal basis**
147
148Your activity on our websites and in our apps can be managed by you using our "cookie banner" and related Consent Management Platform (CMP). The vast majority are used on the basis of your consent where you provide it. Some may use our Legitimate Interest and some are Essential - Please see our [Cookie Notice](https://express.co.uk/cookie-policy/) for further information or the 'cog' icon or link at the bottom of every webpage to manage your consents. When using our apps, if you want to change the settings, go to the 'My Account' Link at the bottom of the screen which includes 'My Privacy' and takes you to the CMP.
149
150We combine that information with the other things we know about you (like your newsletter subscriptions) on the basis of our legitimate interest in understanding our readership, both to serve you better and to make us more attractive to advertisers. This helps us to secure a future for news reporting and journalism in the age of social media, especially local news reporting and journalism.
151
152You do, of course, have an absolute right to object to this. You can always register your objection by completing the relevant form \[[15.5. Your right to object to what we do with your data, and to have restrictions placed upon it]()\].
153
154**3.1.3 How long we keep it for**
155
156We keep the information about your activity on our websites and in our apps for up to up to three years since last browsing activity, with some anonymised browsing activity retained thereafter.
157
158**3.1.4 Who we share it with and why**
159
160The data which we use to create the unique identifier and our "audiences" is shared with the partners who provide us with the technology powering it, most notably Upland Software and Lotame, who host core data management platforms for us. They act as our "processors". This means that they are bound by law and contract to do only what we tell them to do with the data, to keep it safe, and not to share it with anyone else or use it for anything other than providing their service to us.
161
162**3.1.5 Whether we send it outside the country of collection**
163
164Upland Software and Lotame are global businesses and so the data they host for us may be held outside of the country of collection. We have implemented the required safeguards as necessary (for example, standard agreements and frameworks approved by the relevant authorities).
165
166**3.2 Targeting by third party advertising networks**
167
168Digital advertising helps us to fund the news articles and content published on our sites and enables us to provide some of our content for free. We and our third-party ad partners may display digital advertising on our sites that is tailored to your interests and preferences, which are inferred from your browsing history, so the online adverts you see are more relevant to you. We work with third party ad networks to fill unsold advertising space on our sites and in our apps by auctioning it automatically through a process called "real time bidding". These ad networks bid to show their ad to you when you visit our sites or use our apps.
169
170The ad networks exchange information through cookies, which allow them to recognise you when you visit any site that they work with (not just Reach sites). Where we use cookies on our sites for advertising purposes, we collect the appropriate consent, depending on the country you are visiting us from. The cookie information will be used along with other information we hold about you to display digital advertising that is more relevant to you. It is important to note, however, that where you do not provide your consent for digital advertising you will still see digital advertising on our sites, but this will not be tailored to your interests and preferences.
171
172Where you provide consent to using your data to create a profile for digital advertising we may also sell or share limited data types to our partners with whom we have a legally binding relationship for similar purposes; typically data on the page content which you have shown an interest in and online identifiers, not direct identifiers such as your email address. Captify is one such partner. They may act as an independent controller of your data, and their privacy policy is shown here: [Captify Privacy Policy](https://www.captifytechnologies.com/privacy-notice/)
173
174We work with partners such as Freestar and Google (Ad Manager) for the purposes of delivering relevant advertising on our sites. They will collect and use specific data for advertising purposes, for example to create interest-based advertising segments or audiences, to allow us to tailor the ads we display. To learn more about Freestar's and Google's data usage, click here: [Freestar](https://freestar.com/privacy-policy/) and [Google (Ad Manager)](https://policies.google.com/privacy).
175
176**3.2.1 The data collected and how it is used**
177
178On your first visit to one of our sites or apps (and on other occasions to allow you to change your mind), you will be presented with a "cookie banner". This asks you if you consent to the use of cookies and related technologies for the purposes of, amongst other things, selecting and delivering ads. If you do, then the ad networks will be able to recognise your device according to a unique identification number.
179
180We then send out a "bid request" to the advertising networks we work with. What that bid request says is, essentially, "ID number ABC123 has landed on our website, do you want to show this user an advert?" The winner then gets to display their ad.
181
182The auction process happens automatically, in the second or so between you requesting the page and its loading and displaying. The data used by the ad networks to select the ad to show is held by them, not us, and we never see it.
183
184If we sell or share limited data to an ad partner, as described in 3.2, it will be used for profiling and digital marketing on Reach websites and apps, and potentially other sites & apps with whom the partner has a relationship, if you have given permission for that site or app to do so.
185
186An important point to understand is that most of these ad networks will not know who you are in a "real world" sense. They will not know your name, or your email address, or your phone number (we may know those things because you've given them to us in other contexts, but we never share that information with them).
187
188We say "most" because there are two significant exceptions, which are Facebook and Google. They provide targeted advertising services based on the things they know about their users, and so if you are signed into your account with them on your device, they will be able to recognise you and associate your browsing history across sites that use their services.
189
190**Data Matching**
191
192From time to time we may allow our clients to compare their customer database to ours using partner platforms such as InfoSum. This is called data matching and allows our partners to see if they can reach their audiences on our platforms and to understand if an advertising campaign would be effective.
193
194Generally this will be conducted at an aggregate audience level to provide insights, rather than individual level information, although your information may be used to generate these insights. For example, this could involve matching your hashed, pseudonymised email data with the same data held by our advertising clients. This then enables the advertiser to understand if you use their products and visit our sites, then to use this data to target bespoke advertising messages.
195
196Alternatively, we may allow advertising partners to build target audiences based on predefined attributes. These 'lookalike' audiences may be similar to our partners' existing audiences. For example, a sports brand may want to reach 'football enthusiasts'. They could select audiences who have been identified as having an interest in these areas. To do this, we segment our audiences into groups depending on what we think they like or other behaviours. This helps them find the right audiences and we are able to show you more relevant advertising.
197
198The way we match your data could also involve working with partners such as Tradedesk and their group companies, acting as joint controllers. These partners use this information to create a secure online identification code for the purpose of recognising you for cross-channel advertising. This code is placed in our cookie, does not contain any of your identifiable personal data, and will not be used by them to identify you. With your consent it may be shared with our advertising partners and other third-party advertisers globally for the purpose of enabling interest-based content or targeted advertising through Reach sites. These third parties may in turn use this code to link demographic or interest-based information you have provided in your interactions with them to the pseudonymised code. Information on the Trade Desk's use and how they work with partners can be found here [EUID Privacy Notice](https://www.transparentadvertising.eu/privacy). Alternatively to withdraw consent and object to targeted advertising based on the Trade Desk EUID activity click [here](https://www.transparentadvertising.eu/).
199
200We also work with partners such as LiveRamp Inc, acting as our processor, who will use your hashed, pseudonymised email data to create an ID which helps us recognise you across the web without sharing your actual identity. This cookie lives in your browser. If we receive your consent, via the CMP, we will then use this data to target you. Detailed information on LiveRamp's data processing activities is available in [LiveRamp's Privacy Notice](https://liveramp.uk/privacy/service-privacy-policy/) and opt-out [here](https://optout.liveramp.com/opt_out).
201
202If you accept the use of cookies in our Consent Management Platform, when you submit your email address to create an account or sign-up to a newsletter or marketing we may share your email address in a hashed form with Amazon Publisher Services (APS). APS then links the hashed email to a profile which they may already hold related to that address. The hashed email will be used in a secure, pseudonymised form within a cookie to flag to APS whenever you visit an APS enabled Reach website again. APS will use this to determine, in real-time, if any of their business customers want to market to a profile similar to yours. If this is the case they may initiate an advert which will appear to you on the Reach website concerned. The APS Privacy Notice can be found at [APS PN](https://aps.amazon.com/aps/privacy-policy/). Alternatively to withdraw consent and object to targeted advertising based on APS activity click [here](https://www.amazon.com/gp/help/customer/display.html). You can also visit [www.youradchoices.org](https://www.youradchoices.org/) to have more information about how to manage your ad preferences.
203
204We also partner with Roqad, an identity resolution organisation and data aggregator. When you provide your consent via the Consent Management Platform, Roqad implements a pixel across our websites and applications to collect online identifiers, including cookies, mobile advertising identifiers, and hashed email addresses. This information is processed purely to construct their identity graph and facilitate cross device recognition. You can learn more about their data processing practices or exercise your right to opt out directly by visiting the [Roqad Privacy Notice](https://www.roq.ad/privacy-policy-roqad) and [opt out form](https://roq.ad/opt-out).
205
206Additionally, we may use advanced matching techniques offered by social media providers that allow us to directly share personal data such as email, in a hashed, pseudonymous form, to be matched with their data. If you provide your consent via the CMP this may then be used to more accurately target you. For more information see [12.4 Social media platforms]().
207
208To opt out of your email being processed in this way, email [dataprotection@reachplc.com](mailto:dataprotection@reachplc.com), stating 'opt out of hashed email'.
209
210**Accommodation and Travel Services (Stay22)** We work with [Stay22](https://www.stay22.com/) to provide location-specific accommodation and travel booking maps on our sites. When you interact with a Stay22 map or link, and provide your consent via the CMP, Stay22 may collect data including your IP address, browser type, device identifiers, geographic location, and details regarding travel queries or bookings you make. This data is used to provide relevant accommodation options and facilitate affiliate tracking. To understand how Stay22 handles your data, please review the [Stay22 Privacy Policy](https://www.stay22.com/privacy).
211
212You have the right to withdraw your consent or opt-out to the processing of your personal data at any time via our Cookie Management Platform accessed via the 'cog' icon or link at the bottom of every webpage.
213
214**AI Answer Engine**
215
216On some or our sites we work with a third party, Taboola, to provide AI-generated summaries and article links sourced from Reach titles. These may also contain ads. Taboola uses [pixels](https://www.taboola.com/marketing-hub/pixel/), [cookies and first party data](https://www.taboola.com/marketing-hub/cookie/) to track user behaviour, such as page views, clicks, device types and IP addresses which helps personalise prompts and enables ads alongside AI generated answers. Information on Taboola's data processing activities is available in [Taboola Privacy Notice](https://policies.taboola.com/privacy-policy/).
217
218You have complete control over this data. To download, access, or permanently delete your interaction history, please visit the **Taboola Data Subject Portal** at [https://accessrequest.taboola.com/](https://accessrequest.taboola.com/). Since these features rely on digital identifiers instead of your name, you must use the same device and browser for access that you used for your searches.
219
220**Withdrawing consent**
221
222You have the right to withdraw your consent or opt-out to the processing of your personal data at any time via our Cookie Management Platform accessed via the 'cog' icon or link at the bottom of every webpage. For example, we will only match your hashed, pseudonymised email with an advertiser in the Infosum platform, if you have consented to your data being used by our adtech provider Lotame. We will also only work with partners such as LiveRamp, as described above, if you have accepted cookies in our Consent Management Platform.
223
224Alternatively, if you would like to stop your email being used in this way please email dataprotection@reachplc.com, stating 'opt out of hashed email'.
225
226**3.2.2 Our legal basis**
227
228Where required by applicable law advertising networks undertake this activity on the basis of your consent, which we ask for on their behalf through the 'cookie banner' which appears when you first visit our site. The 'cookie banner' message box will reappear from time to time in case you change your mind, or when something changes (typically every 30 days). Please see our [Cookie Notice](https://express.co.uk/cookie-policy/) for further information or the 'cog' icon or link at the bottom of every webpage to manage your consents. When using our apps, if you want to change the settings, go to the 'My Account' Link at the bottom of the screen which includes 'My Privacy' and takes you to the CMP.
229
230Most of our third-party advertising partners operate within an industry framework and code of practice issued by the Internet Advertising Bureau (IAB) called the "Transparency and Consent Framework", which sets out the technical means for your choices to be passed through the ad networks. It also requires that members adhere to IAB policies and standards of behaviour.
231
232Advertising partners who do not work within the IAB framework are listed separately in the platform which can be viewed in our Consent Management Platform (CMP) - please see our [Cookie Notice](https://express.co.uk/cookie-policy/) for further information or click on the 'cog' icon or link at the bottom of every webpage. In the Consent Management Platform popup go to the 'Partners' page and scroll down - IAB partners are listed first, then you'll see Non-IAB vendors and finally Google partners.
233
234**3.2.3 How long we keep it for**
235
236We do not ourselves hold a copy of the data gathered by the advertising networks. They will each have their own retention policies which you can find in their privacy notices linked through our 'cookie banner' - these are often short (between 30 and 60 days), because shopping interests change over time.
237
238**3.2.4 Who we share it with and why**
239
240When we participate in auctions for unsold advertising space, we send bid requests to third party advertising networks. You can find the list of third-party advertising networks who we work with by clicking on the 'cog' icon or link at the bottom of every webpage and reviewing our Consent Management Platform.
241
242**3.2.5 Whether we send it outside the country of collection**
243
244The digital advertising networks are global in nature and so, while we are predominantly a UK business, this data will travel across international borders, and in particular many automated advertising transactions will be processed in the USA. Where we are the ones making the transfer (typically, we are not), we have implemented the required safeguards as necessary (for example, standard agreements and frameworks approved by the relevant authorities).
245
246**3.3 Making our sites and apps work properly, and understanding how they are used**
247
248We use the information logged by our servers and certain third-party analytics tools (such as Google Analytics, Amplitude, Mpulse and Hotjar) to help us to spot problems with our digital services, such as page errors or slow loading times, as well as understanding usage patterns and watching for security problems. This may include statistical and analytical data about your visits and activity on our sites, such as the pages you view, how long for, and which links are followed. This helps us to improve the way we deliver content and the products and services offered to you. We also use this data to report on our performance, provide audience insights and measurement, and to sell advertising.
249
250We may also collect information from your devices that tells us whether you are using an ad blocker. This is so that we can manage our compliance with the law and also determine if we are able to show you advertising. We may also ask you to suspend or whitelist our sites or platforms so that we can show you adverts.
251
252You can find more information below.
253
254**3.3.1 The data we collect and what we do with it**
255
256We gather data for this purpose in three ways.
257
258Firstly, our servers record certain information provided by your devices when they request content, consisting mostly of technical information about your device such as language, screen size and the features and functions it supports, but also including the internet or "IP" address from which it is connecting, the page or data requested and tracking interactions (articles read/tabs opened). The data is used for system performance, content delivery and security purposes. It is saved together with the dates and times the requests occurred into files stored on our servers called "logs" or "log files".
259
260Secondly, on your first visit to one of our sites or apps (and every so often again after your first visit), you will be presented with a 'cookie banner' asking you if you consent to the use of cookies and related technologies for our use of analytics. If you do, then several "cookies" (small text files) will be stored on your device containing identification numbers. Those numbers can then be read on your subsequent visits to recognise your device, and our analytics providers will use that information to provide us with various reports and metrics on how our sites are used. We also work with the analytics provider Amplitude, who collect measurement data on our behalf, as our processor. They collect this data for us, using their cookie, and only process your personal data with your consent. If you do not consent they will only provide us with anonymised data.
261
262Thirdly, Google also uses the data that it gathers as a result for other purposes, which you can read about in the [Google Privacy Policy](https://policies.google.com/privacy). If you wish to opt-out of the use of Google Analytics you can access and download the Opt-out browser add-on from here: [GA Opt-Out](https://tools.google.com/dlpage/gaoptout).
263
264To withdraw your consent for how we are using your information, please see [15.4 Your right to withdraw consent.]()
265
266**3.3.2 Our legal basis**
267
268We process the personal data captured in our server log files on the basis of our legitimate interest in monitoring our systems, understanding how they are used, fixing problems with them, and for security monitoring and management purposes.
269
270We process the data for determining an adblocker, on the basis of legitimate interest. As a predominantly advertising funded business, we do rely on our ability to show you advertising to help ensure we are able to provide you with the products and services you request.
271
272We process the personal data captured by our analytics providers on the basis of your consent, which we ask for through a "cookie banner" which appears when you first visit our site. That message box will reappear from time to time in case you change your mind (typically every thirty days), and on your first visit after we make a significant change.
273
274**3.3.3 How long we keep it for**
275
276We keep the information in our server log files for up to one year, depending upon the log type and purpose.
277
278Our analytics providers will keep the information they gather from our sites and apps in line with their own privacy notices, which you can access through our 'cookie banner' and Consent Management Platform (see the 'cog icon' or link at the bottom of every webpage).
279
280**3.3.4 Who we share it with and why**
281
282We use AWS and CloudFront to help us to analyse our server log files. They act at our direction, as our "processor".
283
284The information gathered using Amplitude or Google Analytics is held by Amplitude or Google and is made accessible to us through various dashboards and reporting tools.
285
286The following providers are key to providing additional website analytics or diagnostic capability:
287
288- Akamai Mpulse ([https://www.akamai.com/legal/privacy-and-policies](https://www.akamai.com/legal/privacy-and-policies))
289- Chartbeat ([https://chartbeat.com/privacy/](https://chartbeat.com/privacy/))
290- Hotjar ([https://www.hotjar.com/privacy/](https://www.hotjar.com/privacy/))
291- Viafoura ([https://viafoura.com/privacy-policy/](https://viafoura.com/privacy-policy/))
292- Amplitude ([https://amplitude.com/privacy)](https://amplitude.com/privacy)
293- Google Analytics ([https://policies.google.com/privacy)](https://policies.google.com/privacy)
294
295**3.3.5 Whether we send it outside the country of collection**
296
297The technology providers we use are global businesses. The data is located in Ireland with some being routed through AWS outside of the UK and EEA. We have implemented the required safeguards as necessary (for example, standard agreements and frameworks approved by the relevant authorities).
298
299**3.4 Website notifications and in-app messaging**
300
301We provide news and updates about our sites via push notification messages or 'pop-ups'. This is a free service. Our legal basis is consent, as the notifications are only sent to you if you have clicked on a button to allow it (you may have accidentally selected to receive notifications).
302
303When you consent to receiving pop-up browser notifications from one of our websites, we collect the following information:
304
305- the URL of the page you were on when you were subscribed;
306- your country code;
307- your device type;
308- your browser name and version;
309- whether the notification was shown to you; and
310- the topics of the notification you have clicked on or interacted with.
311
312We have no control over your subscription to notifications as it is controlled by your browser and device. We do not store any recognisable data about you or your device in connection with the push notification service.
313
314If you wish to unsubscribe from receiving notifications please follow the instructions here: [Airship](https://support.airship.com/hc/en-us/articles/4446152158619-How-to-opt-out-from-the-web-notification) and [One Signal](https://documentation.onesignal.com/v9.0/docs/unsubscribe-from-notifications).
315
316If you need additional assistance in relation to push notifications, please contact the team at [dataprotection@reachplc.com](mailto:dataprotection@reachplc.com) - with the Subject heading: Push Notifications
317
318**3.4.2 In-App Engagement & Messaging**
319
320We also use in-app messaging to provide information about our features and premium services based on your engagement with the app. We use service providers (such as OneSignal) to deliver messages within our app. These may include educational prompts about our features or offers for our premium services. To provide a relevant experience, we track certain interactions, such as the number of articles you read or specific sections of the app you visit. You can manage your preferences for these tools via our Consent Management Platform (Privacy Settings) in the app menu.
321
322**[\*\*\* Click here to go back to 'Contents' \*\*\*]()**
323
324## 4\. When you create or sign into your online news or other Reach account
325
326Some elements of our websites and apps require you to create an account in order to use them; for example, the ability to leave comments under articles or to use some of the functions of "InYourArea".
327
328This section covers the following:
329
330- [4.1 Online News account]()
331- [4.2 Community Forums]()
332- [4.3 Specialist Accounts including Funeral Notices, Bookanad, Marketplacelive, and Family Notices sites]()
333
334**4.1 Online News account**
335
336We use your email address and the other information that you give to us as part of the account creation process to operate your account and provide those functions. When you are signed in with your Reach account, we will also have the ability to associate your account details with the information we gather through our analytics tools about how you use our sites.
337
338**4.1.1 The data we collect and what we do with it**
339
340When you create an account we may collect your name and email address.
341
342For services that provide local information (like InYourArea) we will also collect your postcode and any associated areas of local interest that you want to be updated about. If you subscribe to a paid version of our sites such as **Premium** subscription offering or **Privacy Plus** we will collect your payment details, in order for us to fulfil your subscription. For more information on subscriptions see [9\. When you subscribe to our print, online or "digital edition" titles.]()
343
344Some of our sites allow you to log-in to your account quickly by using your existing social media accounts, such as Facebook, X (f/k/a Twitter), Apple or Google. When you choose this option, you are granting permission to such company to share your user information with us. This will include your name and email address plus any other information you have permitted them to share with third parties, and your account will be linked to your social media account. You can ask us to delete your personal data or de-link your account from your social media account by emailing [dataprotection@reachplc.com](mailto:dataprotection@reachplc.com).
345
346Some services may let you upload your own content to our sites, such as comments or pictures. These contributions are, by the nature of the service, generally visible on the site to other users and the general public and may be attributed to your username. Your comments may also be used in print, online or on the social pages for brands owned and published by Reach plc. We may record the types of content you have commented on, and associate this with our profile of you to better understand your interests. Please do not provide any personal data which you do not want to be published. Comments will be subject to moderation checks before publication.
347
348We use this information to operate your account and to enable you to log in and use our services; for example, on InYourArea we use your postcode to identify the correct local information to display to you.
349
350You may also be invited during the account creation process to subscribe to one or more of our newsletters, or to opt in to receive certain special marketing offers and promotions. You can read more about that by navigating to the appropriate section of this Privacy Notice via the 'Contents' list. [Click here to go back to 'Contents']().
351
352Unless you object, we will also associate your online account sign-up data with the other things we know about you, like your page views. You can learn more about that, including how to object, [here]().
353
354**4.1.2 Our legal basis**
355
356We process your email address and the other information you give to us in order to provide the relevant function or service of our sites on the legal basis of consent. We associate the data which you provide on sign-up with the profile created from your browsing activity on the basis of our legitimate interest. If you wish to object to this, where permitted by applicable law, please see section [Targeting by Reach]().
357
358Our legal basis for any resulting email marketing is your consent - [see here for further information]().
359
360**4.1.3 How long we keep it for**
361
362We will keep your account active for as long as you continue to use it, and for up to 3 years afterwards.
363
364**4.1.4 Who we share it with and why**
365
366We use a technology provider called [LoginRadius](https://www.loginradius.com/) to handle the technical aspects of operating your account on our behalf, including the secure hosting of your email address and password. Additionally, we work with [Viafoura](https://viafoura.com/) to provide the community engagement platform and related diagnostic and analytics capabilities.These partners act as our "processors," meaning they are bound by contract to keep your data safe and use it only as we instruct.
367
368**4.1.5 Whether we send it outside the country of collection**
369
370Our user account technology provider LoginRadius is based in California and India, and so your personal data will be processed from those locations as part of their provision of their service to us. We have implemented the required safeguards as necessary (for example, standard agreements and frameworks, approved by the relevant authorities).
371
372**4.2 Onsite Community Forums**
373
374When you participate in our Forums, we collect User-Generated Content (UGC). This includes posts, replies,'likes' and forum-specific metadata (timestamp of posts). If you link your profile, your display name and profile picture will be public.
375
376We share your data with OpenWeb acting as our processor to host this service. **OpenWeb** may use their AI Driven moderation to moderate forum content to ensure community safety.
377
378If you have a complaint regarding one of your posts, wish to appeal a decision, or to exercise one of your data protection rights email [dataprotection@reachplc.com](mailto:dataprotection@reachplc.com).
379
380**4.3 Specialist Site Accounts**
381
382This section covers when you create an account and use our services on the Funeral Notices, Bookanad, Marketplacelive, and Family Notices sites.
383
384**4.3.1 The data we collect and what we do with it**
385
386In order to use many of our website features you will have to create an account, for example, if you wish to post a funeral notice, upload a tribute to a notice, post an announcement, place an advertisement, or place a notice.
387
388When you create an account we will collect, at a minimum, your name and email address. In some circumstances, we may also collect your address and your telephone number. We use personal data as part of the account creation process, and to ensure ongoing operation of your account, and access to the services available on our websites.
389
390We use all this personal data to (i) operate your account and to enable you to log in and use our services, (ii) manage and administer your notice, announcement, and/or advertisement, and (iii) provide you with some of the features and functionalities that are reserved for account holders.
391
392Some examples of using the personal data you provide include:
393
394- When creating a local obituary notification on our Funeral Notices website, we use your city/town to ensure that we provide information that is relevant and useful for you.
395- When managing a live advertisement, if your advertisement has been successful, you can log in to your account and change the status of the advertisement to closed, ensuring that you no longer receive communications relating to that advertisement.
396
397When you post a notice and/or an announcement and, as part of this post, provide personal data that relates to a living third party, you are responsible for making sure that you have obtained the appropriate permissions for sharing their personal data. For example, uploading a photograph or a video to a notice that contains the image of another person(s).
398
399Some of our services may allow you to upload your own content to our websites, for example any comments, pictures, or videos uploaded as part of an advertisement or a notice. Such content, by the nature of our service, will be visible on the website to other users and the general public. When creating a new notice or announcement, or interacting with an existing one, please do not provide any personal data which you do not want to be published and accessible by the general public.
400
401The "controller" for advertising activities on some of our websites is Proweb. See 4.2.7.
402
403**4.3.2 Funeral Notices Pay-to-use services**
404
405Once you have created an account on Funeral Notices, our products/services will be made available for purchase.
406
407When you purchase a product/service, either online, via our website, or offline, via our call centre, we will use the personal data that you have provided during the account creation process to administer the sale of the product/service you have selected. We may also collect additional personal data in order to enable the sale, including the processing of payment information provided by you during the checkout process.
408
409**4.3.3 Funeral Notices Free-to-use services**
410
411Some of our Funeral Notice services are made available for free, and may allow you to upload your own content to our websites, for example any comments, pictures, or videos uploaded as part of a tribute. Such content, by the nature of our service, will be visible on the website to other users and the general public.
412
413Once you have created an account, some of our products/services may enable the disclosure of information typically viewed as sensitive, for example providing information about your religious beliefs when dedicating a prayer or a religious notice to a loved one.
414
415When uploading information to our websites, please do not provide any personal data which you do not want to be published. It is also important to note that all comments on active notices will be subject to moderation checks before publication.
416
417When you request either of the above Funeral Notices services and, as part of this service, provide information concerning a living third party, you are responsible for making sure that you have obtained the appropriate permissions for sharing this information. For example, uploading a photograph or a video to a tribute that contains the image of a large number of individuals.
418
419**4.3.4 Notices placed by Funeral Directors**
420
421We offer Funeral Directors across the UK the option to use our service, and to post funeral notices for publication on the relevant area of our website.
422
423If you instruct your Funeral Director to post an online funeral notice on our website, then the information that you provide your Funeral Director will be posted on our website.
424
425Please note that when collecting information to inform their funeral notice, Funeral Directors will do so as "data controllers". This means that they are responsible for how they handle and use the personal data that they collect from you.
426
427**4.3.5 Our legal basis**
428
429We process your email address and the other personal data provided during the account creation process so that we may fulfil the contractual obligations owed for the sale of a product/provision of a service, e.g., the posting of an online and/or in-print advertisement and/or notice. This includes the processing of any payment information that is required to facilitate the sale of such products/services.
430
431We process your email address and the other personal data you provide during the account creation process on the basis of your consent for us to provide and operate an account on your behalf.
432
433We process any personal data that you upload to our websites to deliver notices on the basis of our legitimate interest in operating an online obituary service. Please note that, when uploading content, you are in complete control of what you post.
434
435We process your payment information in order to fulfil contractual obligations owed for the sale of a product/provision of a service, e.g., the posting of an online and/or print funeral notice.
436
437We process any sensitive information you provide regarding your religious beliefs on the condition that, by making a post on a generally accessible website, you have manifestly made the information public.
438
439The posting of a funeral notice, by a Funeral Director, is always performed based on the instructions that are provided to individual Funeral Directors by the families of the deceased, and in accordance with the performance of the contract that you have entered into with the Funeral Director.
440
441**4.3.6 How long we keep it for**
442
443As a general principle, we will only retain your personal data for as long as it is necessary. More information on particular retention periods is provided below.
444
445**Website data**
446
447Our analytics providers will keep the information they gather from our websites in line with their own privacy notices, which you can access through our 'cookie banner' and Consent Management Platform (see the 'cog icon' at the bottom left of every webpage)
448
449**Account data**
450
451Bookanad - When you make a booking through our bookanad website, we will keep your account active for as long as you continue to use it, and it will remain active until you request its deletion, or an inactive period of 7 years has elapsed.
452
453Funeral Notices, Family Notices, and Marketplacelive - When you register for a new account on Funeral Notices, Family Notices, and Marketplacelive, we will keep your account active for as long as you continue to use it, and it will remain active until you request its deletion.
454
455If you have made a purchase, we will keep a record of your transactions for a period of 7 years post-transaction.
456
457**Funeral Notice data**
458
459All funeral notices, posted by Funeral Directors and the general public, will remain accessible on our website indefinitely, so that the passing of a loved one may remain remembered forever. This will include any tributes posted on a funeral notice, and all other related services, for example remembrances.
460
461**4.3.7 Sharing your personal data with third parties**
462
463We will only share your personal data with a third party if there is an appropriate contract in place that binds that third party to act in accordance with our instructions.
464
465Further information regarding the third parties that we share your personal data with is detailed below.
466
467**Proweb**. We use a third-party provider called Proweb to handle the technical aspects of operating an account on our behalf, managing bookings made through Bookanad, and administering our email lists. In order to provide us with this service, they will process the personal data that you provide when you create an account and place a booking, in addition to other information that is captured from your use of our website.
468
469When providing these services, they act as our "data processor", meaning that they are bound by law and contract to keep your data safe, and to do only what we tell them to do with it.
470
471On two of our websites, Marketplacelive and Family Notices, Proweb manages the online advertisements that are displayed on-site. These advertisements will be personalised to you, based on your use of the site, if you have accepted the placement of advertising cookies on-site. For this activity, Proweb will be acting as a data controller; their Privacy Notice can be accessed here: [Proweb Privacy Statement](https://www.proweb.net/terms-and-conditions/proweb-privacy-statement).
472
473**Donatis**. We use a third-party provider called Donatis to manage all of the charitable donations made through our Funeral Notices website. Please note that Donatis are a "data controller", therefore, all on-site donations will be processed in accordance with their own [Privacy Notice](https://www.donatispayments.co.uk/terms/privacy/), and Terms and Conditions.
474
475When you write a message to accompany your donation, this message will be posted as a tribute on the funeral notice and, once the donation period has closed, this message will be shared with the Funeral Director that posted the notice, so that they may share all of the donation messages with the family of the deceased. If, when writing a message, you choose to make it private then, once the donation period has closed, this message will be shared with the Funeral Director and the family. A private message will not be posted on our website.
476
477When you make a donation, and select Gift Aid, we will share some personal data with the relevant charity. This will include your name, email address, and donation amount. This information enables the chosen charity to avail of the UK Government's tax relief program, meaning that they receive more of your donation than they otherwise would. Please note that Gift Aid is only available to UK tax residents; further information regarding Gift Aid can be found [here](https://www.gov.uk/claim-gift-aid).
478
479**Payment processors**. We use third party payment processors to handle payments made through our websites. These third party payment processors may act as both a "data controller", meaning that they define why and how to process the payment information you provide, and a "data processor", meaning that they act in accordance with our specific instructions when processing your transactional data.
480
481**Ancestry**. Ancestry is a sponsor of our Funeral Notices website. A link to their website can be found on the sponsorship icon visible on all funeral notices. Please note that by clicking on the ancestry sponsorship area of the funeral notice page, you will be taken to Ancestry's own website, where an automatic search will be performed on the name of the deceased. This search will be performed based on the URL that you have visited Ancestry from. We do not share any of your personal data with Ancestry; however, if you register for an Ancestry account, after following a link within a notice, Ancestry will be able to identify that you came from our website.
482
483**AddThis (Oracle)**. We have installed a tool called AddThis, provided by Oracle, on various pages of our websites. This tool provides you with the ability to share a notice on social media platforms of your choice. When you interact with the AddThis tool, and decide to share a notice on social media, AddThis will collect some personal data from your interaction. AddThis collects your personal data as a "data controller", meaning that they will use it for their own purposes. Further information on how AddThis uses personal data can be found in their [Privacy Policy](https://www.oracle.com/uk/legal/privacy/addthis-privacy-policy.html).
484
485**4.3.8 Working at an organisation that we do business with**
486
487For all of our customers and other organisations we do business with, we will have the business contact details of the people we work with at those organisations, and we will use them to manage and administer our relationship with that organisation. We do this on the basis of our legitimate interest in managing and administering those relationships.
488
489We keep the details of our contacts at organisations we do business with for as long as we continue to have a business relationship, and for a period thereafter for business development purposes and in case of issues or disputes.
490
491**4.3.9 Advertising as a company that we do business with**
492
493When you place an ad, e.g. as a funeral director, we will collect your name and contact details, your postcode, your payment information, and of course the content of your ad. We will use that information to publish and administer your ad, and to communicate with you about it. The content of your ad will be published and therefore accessible to the public. We do this on the basis that it is necessary to fulfil the contract agreed with you when you place your ad.
494
495We will retain the contact details of private individuals for up to 7 years from the point of last interaction, and trade contact details for as long as we have a business purpose.
496
497Your ad itself will be retained indefinitely, on the basis of our legitimate interest, in order to maintain our archive and back issues services.
498
499**[\*\*\* Click here to go back to 'Contents' \*\*\*]()**
500
501## 5\. When you buy a product or service from us
502
503At Reach, we manage two main online e-commerce platforms: [Yimbly.com](https://www.yimbly.com/) and [OK! Beauty Box](https://www.okbeautybox.co.uk/). In addition we run a number of ecommerce sites associated with our newspaper brands such as [Reach Sport Shop](https://reachsportshop.com/) or our [Regional Newspaper Shop](https://shop.regionalnewspapers.co.uk/).
504
505For information on how we process your data on these sites see below. For information on discount codes, vouchers, cashback accounts and affiliate sites see [12\. Further ways we may receive, use and share your data]()
506
507When you place an order for a product or service with us, it is necessary to share specific personal details to ensure the seamless fulfilment of your order. This information may be gathered during the registration process or by placing an order via our checkout. In certain situations, we share with a third party that will collect and process this information on our behalf to fulfil your order.
508
509**5.1 The data we collect and what we do with it**
510
511We may collect and use data in a number of ways when you buy a product or service from us. These include:
512
513- When you explore any of our websites and utilise your account for purchasing products, services, or redeeming digital vouchers.
514- When you make an online purchase and opt for guest checkout (in which case, we only gather transaction-based data).
515- When you opt-in to marketing
516- When you create an account with us.
517- While shopping online, we gather information through cookies and similar technologies - you have the control to manage these settings during your site visit.
518- When you interact with us on social media.
519- When you engage with chatbots on our site, to communicate with us and ask us questions.
520- Upon signing up for an account you will join our loyalty program, you gain access to a designated area on our sites. This space is designed to collect and store all your receipts, guarantees, and warranties for your convenience with each purchase whilst generating points that convert into monetary value.
521- When you reach out to us through various channels with queries, complaints, etc. For example, when you contact our customer service team regarding an order.
522- Upon participating in prize draws or competitions.
523- When you opt to complete surveys we send your way.
524- When you share comments or reviews on our products and services.
525- Any individual has the right to access personal data related to them, including opinions. If your comment or review contains information about the sellers who provided the service, it may be shared with them upon request.
526- When you authorise a third party to share information they hold about you with us.
527- We collect data from publicly available sources when you have given consent to share information or when the information is made public as a matter of law.
528- When you join our Loyalty programme we will use the relevant personal data that will allow us to give you rewards, for more details about personal data please see the [Yotpo privacy policy.](https://www.yotpo.com/privacy-policy/)
529
530**5.2 Our legal basis**
531
532The regulations on data protection outline various reasons for which a company may gather and process your personal data, including:
533
534Consent: In specific instances, we may collect and process your data with consent. This can happen, for example, when you willingly opt into marketing communications or create an account with us. When gathering your personal data, we will always communicate clearly which data is essential for a particular service.
535
536Contractual Obligations: Under certain circumstances, we may require your personal data to fulfil our contractual obligations. For instance, when you place an order for delivery, we will collect your address, billing/delivery, mobile and name to ensure the successful delivery of your purchase, sharing these details with a courier as needed.
537
538Legal Compliance: If mandated by law, we may be compelled to collect and process your data. For instance, we might share information about individuals involved in fraudulent or criminal activities impacting us or our sellers with law enforcement.
539
540Legitimate Interest: In specific scenarios, we may require your data to pursue our legitimate interests in a manner that is reasonably expected in the course of operating our business, and that does not significantly affect your rights, freedom, or interests. For example:
541
542- We will share your personal data for the fulfilment of your order.
543- We may utilise your purchase history to determine the offers we send you.
544- Direct marketing emails may be sent when you shop with us and choose not to opt out, commonly known as a 'soft opt-in.'
545- Combining the shopping history of numerous customers helps us identify trends, meet demand, and develop new products/services.
546- Your address details may be used to send you direct marketing information by post, informing you about products and services that we believe may interest you.
547- We may reach out to you for market research and to enhance our services.
548- With your explicit consent, or if you shop with us and do not opt out of receiving our emails ('soft opt-in'), we may use your personal data, preferences, and transaction details to keep you informed through email, text, telephone, and our contact centres about relevant products and services, including tailored special offers, discounts, promotions, events, competitions, etc. You can opt out of this at any time.
549- When you come to our eCommerce site via one of our social media websites, we will receive information, such as your name, email and ID (via an API) that will help us detect how you have come on to our site. This helps us to understand how our advertisements are performing on different social media platforms.
550- We will share your personal data in the fulfilment of our Loyalty Programme.
551- Sharing the information you provide and other information held about you within our Group companies, for the purposes of this Privacy Notice. For more information see section [12.16 How we work with Group Companies]()
552
553**5.3 How long we keep it for**
554
555Reach will retain your personal data in accordance with the law and relevant regulations and will store the data for as long as is necessary to fulfil the purpose for which it was collected. The period for which we keep your personal data will be determined by the purpose for which we are using the data, and our legal and regulatory obligations.
556
557**5.4 Who we share it with and why**
558
559We use Klevu, Shopify and Mirakl to manage and connect the different parts of our Yimbly.com and OK! Beauty Box ecommerce sites, and Gorgias for our customer service. They act at our discretion, as our "processor". For more information on what each processor specifically does please see below:
560
561- Klevu: [https://www.klevu.com/privacy-policy/](https://www.klevu.com/privacy-policy/)
562- Mirakl: [https://www.mirakl.com/privacy-policy](https://www.mirakl.com/privacy-policy)
563- Shopify:[https://www.shopify.com/uk/legal/privacy](https://www.shopify.com/uk/legal/privacy)
564- Gorgias: [https://www.gorgias.com/legal/privacy](https://www.gorgias.com/legal/privacy)
565- Recharge: [https://rechargepayments.com/](https://rechargepayments.com/)
566- TrustPilot: [https://uk.legal.trustpilot.com/for-businesses/business-privacy-policy](https://uk.legal.trustpilot.com/for-businesses/business-privacy-policy)
567- Yotpo: [https://www.yotpo.com/privacy-policy/](https://www.yotpo.com/privacy-policy/)
568- Paypal: [https://www.paypal.com/uk/legalhub/privacy-full](https://www.paypal.com/uk/legalhub/privacy-full)
569- Klarna: [https://www.klarna.com/international/privacy-policy/](https://www.klarna.com/international/privacy-policy/)
570- Clearpay: [https://help.clearpay.co.uk/hc/en-gb/articles/900006078786-Privacy-Policy-](https://help.clearpay.co.uk/hc/en-gb/articles/900006078786-Privacy-Policy-)
571- Salesforce: [https://www.salesforce.com/uk/company/privacy/](https://www.salesforce.com/uk/company/privacy/)
572
573We will also share your name, address, email and payment details with our sellers in order to fulfil an order. Our legal basis for doing this would be contractual as it is necessary in order for you to receive your goods.
574
575We may also provide sellers with information that allows them to serve you with more useful and relevant ads and to see how effective they are. We would not share your name or other information that directly identifies you when we do this. Instead, we use an advertising identifier like a cookie, a device identifier, or a code that would anonymise information like an email address. Our legal basis for doing this would be consent. We would attain your consent when you accept our use of cookies on our site and you have the right to opt out at any time. For more information see section [3\. When you browse our websites and use our apps]()
576
577**Generative AI Tools**
578
579We may share personal data with Generative tools like OpenAI on a 30 day or zero data retention basis. Alternatively our customers may interact, for example, with an AI Customer Service Agent. Our purposes for use of AI are as follows:
580
581- **Customer Services Experience**. To automate our responses to you and provide you with context relevant to your enquiry we may use data we have stored about you such as previous enquiries, order history, recent site activity, product reviews, loyalty & rewards. Alternatively you may provide data directly to an AI Customer Service Agent as part of your customer service experience.
582- **Personalised product recommendations & merchandising**. To enable us to present the right product to you as you progress through the website, or via marketing communications (if we have the permission), based on your purchase history and recent activity.
583
584We may also use AI, although not involving personal data, for Business intelligence purposes, to identify patterns, spot inconsistencies, predict trends, and deliver insights that lead to a better understanding of our business across all functions. Our legal basis for doing this would be legitimate interest. To opt out of your data being shared in this way email [dataprotection@reachplc.com](mailto:dataprotection@reachplc.com), stating 'opt out of AI Tools'.
585
586**5.6 Whether we send it outside the country of collection**
587
588From time to time we may transfer your personal data to service providers based outside of the UK and EEA for the purposes described in this Privacy Notice. In particular, we do this in regard to our email and SMS service providers, managing our marketing activities and for the processing of orders, subscriptions and payments. Where these transfers take place, your personal data will continue to be subject to safeguards set out in the law and we have mechanisms in place to ensure your data receives equivalence in protection to that within the UK and EEA. An example safeguard is standard agreements that have been approved by the relevant authorities. For more information see section 13: [How we keep your data secure, why we may keep it and countries we may transfer it to]().
589
590**[\*\*\* Click here to go back to 'Contents' \*\*\*]()**
591
592## 6\. When you opt to receive newsletters or other marketing communications
593
594We use the information you provide us with, such as email, address, or phone number, to communicate with you for the purpose you provided it, either based on your consent or where we have legitimate grounds to do so. For example, if you sign up for a newsletter or other marketing communication then we will use the email address you provide to send you that newsletter or marketing, and we may also send you text messages if you have opted in to receive these. These may include information on new products, services, special offers and promotions.
595
596Alternatively, If you have bought a product from us (or in the process of doing so) from one of our ecommerce sites \[see [5\. When you buy a product from our ecommerce sites]()\], or a Premium subscription \[see [9\. When you subscribe to our print, online or "Premium subscription" sites, or place a classified ad]()\], we may send you emails about similar products and services, from the brand you purchased the product from, provided you didn't opt out when we collected your data.
597
598**Tracking Technologies and Partner Adverts**
599
600Our newsletters include advertisements served via our partner, Passendo. These advertisements are non-personalised and served purely based on the context of the newsletter topic.
601
602To manage our email delivery effectively, we utilise limited tracking technologies:
603
604- **Unique Click Identifiers:** The links in our emails are unique to your email address. If you select a link, our servers attribute that click to your identifier to understand content popularity and to ensure our communications remain relevant.
605- **Essential Technical Pixels:** If your email program loads images, a technical request is made to our servers. We use this strictly to verify email deliverability and maintain list hygiene, such as identifying inactive mailboxes. We do not use this to build an ongoing behavioral profile of your reading habits.
606
607Once you click a link and arrive at our website, our Cookie Management Platform (CMP) will immediately present you with choices to manage your broader website tracking options.
608
609You can unsubscribe or change your marketing preferences at any time by clicking the links on the emails you receive or by contacting [dataprotection@reachplc.com](https://express.co.uk/dataprotection@reachplc.com).
610
611**Working with Partner Companies**
612
613When you provide your email address, we may convert it into a hashed, pseudonymous form, and subsequently share it with selected partners who use this information to create an online identification code to recognise you on your device.This code does not contain any of your identifiable personal data and cannot be used to re-identify you.
614
615We convert your email based on legitimate interest and you can opt out of your email being shared in this way by emailing [dataprotection@reachplc.com](mailto:dataprotection@reachplc.com), and stating 'opt out of hashed email'. With your consent via the CMP, we may subsequently share this identifier with ad partner like LiveRamp to serve you ads on our sites. For more information on how these partners may subsequently use this code to serve you targeted advertising, with your consent, please see section [Data Matching]().
616
617In addition, we may work with a partner company to send our communications to you. For example, you may have consented to an email from Reach via the Substack platform. For these emails Substack are the controllers of your data, and you will have agreed to their [Privacy Notice](https://substack.com/privacy) when you signed up. You can opt out of receiving their newsletters at any time via the email you receive or by emailing privacy@substackinc.com.
618
619**6.1 Sending you the newsletters and marketing you subscribe for**
620
621We will use the email address you give to us to send newsletters or our marketing offers and promotions to you.
622
623When you subscribe to one of our email newsletters, or marketing emails, we will send those newsletters (or marketing emails) to the email address you provided. It will always be clear who the newsletter or marketing offer or promotion has come from, and we don't sell or give our email lists to anyone else.
624
625If you want us to stop, the easiest way is to click on the "unsubscribe" link which you will find at the bottom of every email, text STOP to opt out of text messages, or contact [dataprotection@reachplc.com](mailto:dataprotection@reachplc.com).
626
627In some jurisdictions outside of the EU/UK, and where permitted by applicable law, we may purchase/rent lists of persons who may be interested in our products and services. We may contact such persons by email.
628
629**6.1.1 The data we collect and what we do with it**
630
631We collect your email address in order to send you the newsletters or marketing you subscribe to. When you sign up for newsletters from our "In Your Area" local information website, we will also collect your postcode in order to provide the correct local information.
632
633Sometimes, our newsletters will contain advertisements.
634
635Unless you object, we will also associate your newsletter and marketing subscription with the other things we know about you, like your page views. You can learn more about that [here]().
636
637**6.1.2 Our legal basis**
638
639We use your email address to send you the newsletters and marketing you subscribe for on the basis of your consent. You can withdraw that consent at any time. The easiest way to do so is to click on the "unsubscribe" link at the bottom of every newsletter we send.
640
641We associate your email subscription with the other things we know about you on the basis of our legitimate interests. You can learn more about that [here]().
642
643**6.1.3 How long we keep it for**
644
645We will keep your email address on the subscription list for the relevant newsletters or marketing emails until you unsubscribe from them. Furthermore, we will stop sending you a newsletter (or marketing email) if we see no activity (e.g. no links clicked on) for a period of time, and generally but not exhaustively, after 24 months.
646
647**6.1.4 Who we share it with and why**
648
649Processors provide the technology platforms which we use to administer our email lists and to manage the adverts in our emails. They act as our "processors", meaning that they are bound by law and contract to keep your data safe, and to do only what we tell them to do with it.
650
651**6.1.5 Whether we send it outside the country of collection**
652
653Email administration data is hosted within the EEA. Advert management services data is processed from the UK and EEA.
654
655**6.1.6 Whether we send it abroad**
656
657The data is hosted and processed within the EEA.
658
659**6.2 Tracking technologies used in our emails**
660
661We use limited tracking technologies within our email newsletters to check emails have been opened and deliver contextual advertising.
662
663**6.2.1 The data we collect and what we do with it**
664
665We monitor interaction with our email campaigns in the following ways to ensure deliverability and improve our content:
666
667- **Internal Open-Rate Tracking (Pixels):** Our emails load images from our secure remote servers on demand. If your email program or device is set to automatically load images, or if you choose to display them, this request notifies our servers that the email has been opened or read. We use this performance data strictly for internal analytics (such as tracking overall open rates and determining which headlines perform best).
668- **Unique Click Identifiers:** The links to articles within our newsletters are unique. If you click a link, our servers attribute that interaction to your email identifier so we know which stories caught your interest.
669- **Contextual Advertisements:** Our newsletters include advertisements served via our partner, Passendo. These advertisements are entirely non-personalised and are served based purely on the context of the newsletter topic rather than your individual reading history.
670- **On-Site Integration:** Once you click a link and land on our website, our Cookie Management Platform (CMP) initialises. Any further tracking, such as cross-site tracking or behavioural profiling for targeted advertising, takes place exclusively on our website and is subject entirely to the choices you select on our website cookie banner.
671
672You can unsubscribe or change your marketing preferences at any time via the links in our emails or by contacting [dataprotection@reachplc.com](mailto:dataprotection@reachplc.com).
673
674**6.2.2 Our legal basis**
675
676**Email Open & Click Tracking:** We measure the basic performance and deliverability of our newsletters based on our legitimate interest. You can control or restrict open tracking at any time by configuring your email client or device to block the automatic loading of remote images.
677
678**On-Site Website Cookies:** Any subsequent data processing or targeted advertising that occurs after you click a link and land on our web platform is strictly based on the consent you grant or refuse via our website's CMP banner.
679
680**6.2.3 How long we keep it for**
681
682The data gathered to understand email opening and interests related to articles and links within the emails is retained for as long as you continue to engage with our emails, and for a period of up to 3 years afterwards.
683
684**6.2.4 Who we share it with and why**
685
686Third party processors provide the technology platforms which we use to administer our email lists and to manage the adverts in our emails. They act as our "processors", meaning that they are bound by law and contract to keep your data safe, and to do only what we tell them to do with it.
687
688**6.2.5 Whether we send it outside the country of collection**
689
690The data is hosted in the Republic of Ireland, the UK and Denmark.
691
692**[\*\*\* Click here to go back to 'Contents' \*\*\*]()**
693
694## 7\. When you enter a competition or prize draw
695
696From time to time we run competitions and prize draws which require you to provide your name and contact details. We use that information to administer the competition or prize draw and to communicate with you about it (for example if you win a prize).
697
698We may also use that email address to send you occasional special offers and promotions, if you opted in to receive them. [See here]() for more information on that and how to unsubscribe.
699
700Unless you have objected, we will associate the fact that you entered the competition with the other things we know about you, like your page views. You can learn more about that [here](). We may also run some competitions or prize draws for which we utilise your declared responses to build into our profile about you. When we do so, this will be communicated in the associated text, and you will be asked to either consent to this use or will be given the option to 'object' via a tick box.
701
702**7.1 The data we collect and what we do with it**
703
704When you enter a competition or prize draw we will collect the information you provide to us, such as your name, email address and answers to any questions. We will use that information to run the competition or prize draw. If you happen to win a prize, we may ask you for additional information, such as an address to send the prize to. As highlighted above, we may also retain your responses as part of a profile about you.
705
706**7.2 Our legal basis**
707
708We do this on the basis that it is necessary to fulfil the contract formed with you when you enter the competition or prize draw. Use of your declared data for profiling purposes will be based either upon consent (via tick box) or our legitimate interest, for which you will be given the option to 'object'.
709
710**7.3 How long we keep it for**
711
712We will keep your competition entry for the duration of the competition and for up to 12 months after the closing date. Data utilised for profiling will be retained for up to 3 years.
713
714**7.4 Who we share it with and why**
715
716Information about competition and prize draw entries is only shared with the service providers who provide us with the technology powering our systems and - if you win a prize - with the companies who supply and deliver the prize to you. The technology providers act as our "processors", meaning that they are bound by law and contract to keep your data safe, and to do only what we tell them to do with it.
717
718**7.5 Whether we send it outside the country of collection**
719
720Our online form technology provider may process your personal data outside of the UK and EEA. We have implemented safeguards to secure and limit the processing of the data, including standard agreements, and frameworks, approved by the relevant authorities.
721
722**[\*\*\* Click here to go back to 'Contents' \*\*\*]()**
723
724## 8\. When you complete a survey
725
726Sometimes we run surveys to help us to understand more about our readership or about public opinion generally. They can also help us better understand the underlying motivations behind the trends we are seeing, response to new content ideas and formats we are developing and how we can improve the service we currently offer.
727
728These surveys could be in the form of online surveys, polls, video projects, diary studies and discussion groups, and we may record the responses (answers) of those who take part.
729
730If you take part, we use your answers to those surveys to produce anonymous statistics which we use to inform our editorial content and, to an extent, our advertising. For example, if a majority of survey respondents express a preference for one TV show over another, then we might write an entertainment piece based on that or factor it in when deciding which adverts appear where.
731
732We may also run some surveys for which we utilise your declared responses to build into our profile about you. When we do so, this will be communicated in the associated text, and you will be asked to either consent to this use or will be given the option to 'object' via a tick box.
733
734Occasionally, those surveys might ask you about things which the law considers to be especially sensitive, such as your voting intentions or your religious beliefs. Where that's the case, we'll ask clearly for your permission first, and we'll always provide a "prefer not to say" or similar option. We don't use that kind of information for advertising purposes.
735
736**8.1 The data we collect and what we do with it**
737
738The types of information we collect and process about you when you take part in a survey may include:
739
740- Personal and contact details you have provided to us, such as your name, email address or postal address
741- Demographic information such as date of birth, gender, work occupation, ethnicity and readership habits.
742- Attitudinal, behavioural or purchase information shared within our surveys or forums.
743- Information about your use of third party products or services or from third parties who we may use to operate certain aspects of our business.
744- We may also collect information from cookies on your devices and this includes information about your IP address, MAC address and other identifying information, information about your devices, including your location, from third party advertising networks and how you use our products and services.
745
746We will collect your answers to the survey questions and use them to compile anonymous statistics along the lines of "35% of people preferred X over Y". Some surveys may also ask for your email address, for example if we are offering entry into a prize draw for completing it. Go [here]() to learn more about how we use your data for prize draws. As highlighted above, we may also retain your responses as part of a profile about you.
747
748When you have completed a survey, you may be invited to subscribe to a newsletter or to receive special offers and promotions from us.
749
750Sometimes we may operate "panels" of people who we send survey questions to periodically. If you join one of those panels then there may be additional kinds of information about you which we will receive, in which case we will provide further information to you before you sign up to the panel.
751
752**8.2 Our legal basis**
753
754We collect and compile your survey answers on the basis of your consent. Use of your declared data for profiling purposes will be based either upon consent (via tick box) or our legitimate interest, for which you will be given the option to 'object'.
755
756**8.3 How long we keep it for**
757
758We retain your survey responses for however long the survey runs for, and for up to 90 days afterwards. If you participated in our research panel we may keep your data for up to a year, for the purposes of insight and tracking responses over time.
759
760The resulting statistics may be kept longer, but those are always anonymous and don't contain your personal data. Data utilised for profiling will be retained for up to 3 years.
761
762**8.4 Who we share it with and why**
763
764We typically publish the overall results of our surveys, and often share those results with the brands involved (if any), but those results are always anonymous and statistical in nature ("50% of respondents thought X") and don't contain your personal data. Actual survey responses are only shared with the service providers who provide us with the technology powering our systems. They act as our "processors", meaning that they are bound by law and contract to keep your data safe, and to do only what we tell them to do with it.
765
766Once we've gathered your survey responses, we will combine them with the answers from other respondents and turn them into valuable insights which may be shared with third parties. Unless specifically stated at the start of the research activity and with your explicit permission, this information will only be disclosed to third parties in anonymised or aggregated form, stripped of any identifiable data (example forms of anonymised / aggregate data include: "X% of males from Birmingham agree that..." or "a 35 year male from Birmingham said ...")
767
768Please be aware that if you disclose information on forums it may be possible for other research participants to use this information. We are not responsible for the disclosure of any information you post in this way.
769
770**8.5 Whether we send it outside the country of collection**
771
772Our online form technology providers may process your personal data outside of the UK and EEA. We have implemented safeguards to secure and limit the processing of the data, including standard agreements and frameworks approved by the relevant authorities.
773
774**[\*\*\* Click here to go back to 'Contents' \*\*\*]()**
775
776## 9\. When you subscribe to our print, online or Premium subscription sites, or place a classified ad
777
778**9.1 When you subscribe to our print, online or "digital edition" titles**.
779
780We will collect your name, address other contact details, and payment information. We will use that information to administer your subscription. We do this on the basis that it is necessary in order to provide the subscription to you with the support of our provider. We will retain this information for as long as you maintain your subscription, and for a period thereafter, in case of disputes or problems.
781
782When you subscribe to our digital edition titles your subscription is also processed via our provider and this information is retained for as long as you maintain your subscription, and for a period thereafter, in case of disputes or problems.
783
784As part of the subscription process you may be asked if you want to receive other products or services from Reach. Where this is the case you will be asked to consent to each product or service type. Such activities are managed in accordance with the relevant sections elsewhere in this Privacy Notice.
785
786**Privacy Plus Subscription**
787
788On some of our websites we offer you a **Privacy Plus** subscription service. This **Privacy Plus** subscription provides a browsing experience, free of personalised advertising. For a monthly fee it enables you to access the same content without sharing your personal data for advertising purposes. We use our payment provider, [Stripe](https://stripe.com/gb/privacy), to process your payments on our behalf.
789
790**Premium Subscription Offerings**
791
792A number of our websites also offer a **Premium** subscription which allows readers to support local journalism with limited adverts and exclusive subscriber-only content.
793
794When you sign up for one of the **Premium** subscriptions we may send your details to our third party provider Piano. They will use your details to process your payment and deliver the content you have subscribed to. Please see a link to their privacy notice for more information on how they process personal data. [https://piano.io/gb/privacy-policy/](https://piano.io/gb/privacy-policy/)
795
796For more information on both of these subscriptions, and how they work together, see our [T&Cs](https://express.co.uk/terms-conditions/)
797
798In order to be able to offer you this service on our website, we will collect online identifiers such as device type, IP address, language settings, approximate location at the time of browsing, your logged in user id, user status, and engagement history. This will be used to enable us to verify you as a paid subscriber, to technically run the service, and for security and anti-fraud purposes. It may also determine the content we may provide to you. We may also collect your reason for leaving to improve our services and, where you have permitted us to do so, to offer you relevant alternatives.
799
800If you are a **Premium** subscriber, we will use your email to send you service messages. These may also include surveys to understand how you use our **Premium** services and how we can continue to improve the platform and content offerings plus collecting feedback during the cancellation process to improve our services. For more information see [8\. When you complete a survey]().
801
802We may also send you promotional communications including renewal offers, exclusive discounts and other communications about our products and services. You can opt out of these when you sign up to a subscription and in every communication you receive.
803
804**9.2 When you place a classified ad**
805
806When you place a classified ad in one of our print titles, we will collect your name and contact details, your payment information, and of course the content of your ad. We will use that information to publish and administer your ad, and to communicate with you about it. The content of your ad will be published and therefore accessible to the public. We do this on the basis that it is necessary to fulfil the contract agreed with you when you place your ad.
807
808We will retain the contact details of private individuals for up to 6 years from the point of last interaction, and trade contact details for as long as we have a business purpose. We do not store personally identifiable payment card information.
809
810Your ad itself will be retained indefinitely, on the basis of our legitimate interest, in order to maintain our archive and back issues services.
811
812**[\*\*\* Click here to go back to 'Contents' \*\*\*]()**
813
814## 10\. When you visit or interact with us on Social Media
815
816We operate accounts on different social media platforms, and you may choose to visit or to interact with us through these channels. If you choose to do so, we can usually only see information stored in your public profile on the social media platform, when you are logged in to your profile, while visiting our social media account; although we may process data that you provide to us when you contact us (for example: if you create a post, or send us a private message via Facebook).
817
818The social media platform also provides us with anonymous usage statistics, which we use to improve user experience and understand activity across our sites. We do not have access to the usage data that the operator of the social network collects to create these statistics.
819
820The operator of the social media platform also processes your data, regardless of whether you yourself have a profile on the platform. In addition, some social media platforms, such as Facebook, use cookies that are stored on your terminal device when you visit our social media account, even if you do not have your own profile in the network or are not logged in. These cookies enable the social media platform to create user profiles based on your preferences and interests and to show you advertising tailored to these.
821
822For information on the social media providers and their privacy policies please see our list of [Social Media Platforms](https://www.reachplc.com/site-services/social-media-cookies). For further information on how we may receive, use and share your data see [12.4 Social media platforms]().
823
824**[\*\*\* Click here to go back to 'Contents' \*\*\*]()**
825
826## 11\. When you apply for a job with us or work at other organisations we do business with
827
828**11.1 When you apply for a Job with us**
829
830When you apply for a job with us, we will process the information you or the recruitment agency gives to us in order to consider your application and to communicate with you (or the agency) about it.
831
832If we offer you a position and you accept it, then we will use your information to liaise with you about start dates, contracts, arranging induction and so on, and we may ask you for additional information to that end. That information will then be handled in accordance with our internal HR policies and Employee Privacy Notice.
833
834If we don't offer you a position or we do but you don't accept it, then we will keep your application on file for 12 months in case of future queries or issues.
835
836We process your data on the basis that it is necessary in order to take steps to enter into an employment contract with you. We process information relating to unsuccessful applications or job offers that are not accepted on the basis of our legitimate interest in keeping records of job applications.
837
838**11.2 If you work at other organisations that we do business with**
839
840For all of our customers and other organisations we do business with, we will have the business contact details of the people we work with at those organisations, and we will use them to manage and administer our relationship with that organisation. We do this on the basis of our legitimate interest in managing and administering those relationships.
841
842If you work at a current or prospective advertising or publishing services client or related agencies, revenue sharing partners (for the sale of your products or services) or are users of Reach software we will also contact you from time to time using your work contact details to promote our services. We will have those contact details either because we have worked with you before, you shared them with us for this purpose, because we or our agencies have looked them up from publicly available information, or because you have attended an event we have hosted. We do this on the basis of our legitimate interest in promoting our advertising and publishing services to businesses. We will always stop contacting you for this purpose if you ask us to. Typically, the best way to do that is to respond to the person contacting you, but you can also make the request by completing the [relevant form]().
843
844We keep the details of our contacts at organisations we do business with for as long as we continue to have a business relationship, and for a period thereafter for business development purposes and in case of issues or disputes.
845
846**11.3 Site visits and CCTV**
847
848When you visit a Reach site we will record your name, the date, and in some locations your company name. This information is retained for one week.
849
850In some circumstances, non-employees may be provided with a site pass. Where this applies, the personal data obtained, including a photograph of you, will be retained for the duration of your visit or contract with Reach and for 7 years thereafter for fraud, security, and financial reporting purposes.
851
852We use CCTV systems at our premises on the basis of our legitimate interest in protecting the safety and security of our staff and our property.
853
854**[\*\*\* Click here to go back to 'Contents' \*\*\*]()**
855
856## 12\. Further ways we may receive, use and share your data
857
858This section covers the following:
859
860- [12.1 Further data sharing by Reach]()
861- [12.2 Links to other websites and third-party affiliates]()
862- [12.3 Behavioural remarketing services]()
863- [12.4 Social media platforms]()
864- [12.5 WhatsApp Instant messaging platform]()
865- [12.6 Chatbots and other onsite data collection]()
866- [12.7 Discount codes, vouchers and cashback accounts]()
867- [12.8 Affiliate Sites, such as Mirror Bingo and Mirror Switch & Save]()
868- [12.9 When you register for an event]()
869- [12.10 Transfer as part of the sale of our business]()
870- [12.11 Award or charitable donation; nomination, voting and judging]()
871- [12.12 Business Directory and B2B Marketing Services]()
872- [12.13 Artificial Intelligence Partners]()
873- [12.14 Internal AI Archiving]()
874- [12.15 Launchpad and Independent Creator Networks]()
875- [12.16 How we work with Group Companies]()
876
877**[12.1 Further data sharing by Reach](https://express.co.uk/12furtherdata)**
878
879We may pass your information to our processors - companies that we use to provide services on our behalf, for example for home delivery services, event management, prize fulfilment agencies, sending gifts and coupons, market research or other purposes mentioned in this Privacy Notice such as analytics, direct marketing or online advertising. These processors can only use your information in accordance with our instructions and for no other purpose.
880
881In addition, further to the data sharing described elsewhere in this Privacy Notice, Reach will disclose your information and co-operate with appropriate bodies and authorities in good faith where we are required to by law, a court order, a regulatory authority, or otherwise, including with the police, trading standards, regulatory authorities, including the Information Commissioner's Office, other relevant authorities, or credit reference agencies.
882
883Where permitted by applicable laws, where you interact with us, we may monitor, record, and retain all associated data, correspondence, and communications, such as written letters, telephone call recordings, emails, text messages, social media messages, in person meetings and any other communications. We will do this to, (i) comply with our legal and regulatory obligations (ii), prevent, or detect crime (iii), maintain appropriate evidential records (iv), protect the security of our communications systems and (v) for training and quality purposes. Where necessary, we will also use your personal information to defend ourselves from any legal claims brought by you in connection with the provision of our products and services.
884
885We will also use personal information to manage and administer our business generally.
886
887We will share information with security consultants and IT security system providers, where necessary, to monitor and manage data security and the security of our sites and networks, and to develop security threat intelligence data.
888
889We may also share information to facilitate the sale of one or more parts of our business, including if we are approached by a potential buyer or the restructuring of one or more parts of our business and with auditing organisations such as the Audit Bureau of Circulation.
890
891When we share information with third parties, we only permit them to process this data for specified purposes. We do not share more information with them than is necessary for the relevant purpose and we require them to treat this information with at least the same protection we do.
892
893**12.2 Links to other websites and third-party affiliates**
894
895Our websites may include links to third-party websites, plug-ins, and applications. We work with companies like Skimlinks and AWin who have relationships with retailers and other publishers, to enable you to click a link on our site and go directly to their site. We do not drop cookies through our affiliate links. Instead we use a type of link that redirects users into the affiliates network. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and, when you leave our website, we encourage you to read the Privacy Notice of every website you visit. Please note that some of our third party/affiliate websites may have Reach branding, although they may not be operated by Reach. For more information on how Skimlinks and AWin use your data see here: [Skimlinks](https://www.skimlinks.com/privacy-policy/) and [Awin](https://www.awin.com/gb/privacy).
896
897Similarly, we embed maps and affiliate booking tools provided by Stay22. When you use these features to search for or book hotels, rentals, or travel arrangements, your personal data is collected directly by Stay22's affiliate network ecosystem, allowing them to track conversions and transactions generated from our platforms.For more information on how Stay22 use your data see here: [**Stay22**](https://www.stay22.com/privacy)
898
899We may monetise some of these links through the use of third-party affiliate programmes. These affiliate links help pay the costs of producing our websites and ensure that the content is free to you. However, it doesn't mean that we are in any way indebted to Amazon or any other company. Nor do they or any other company have any influence over editorial coverage, how we rate products, or whether they get a positive review. Notwithstanding such affiliate programmes, we are not responsible for the content or privacy policies of these websites or for third-party advertisers, nor for the way in which they use the information they collect about you. See more [Information on Affiliate Links](https://www.reachplc.com/affiliates).
900
901**12.3 Behavioural remarketing services**
902
903After you have visited our site, we may use remarketing services provided by companies such as Facebook and Google and Bing, to show you advertising on third-party websites, based on your browsing patterns and interactions. For this purpose, visitors are grouped by certain actions on our services, for example, by duration of visit. This enables us to understand your preferences and to show you personalised advertising even if you are currently on another website within the network.
904
905**12.4 Social media platforms**
906
907We may also share de-identified information with social media platforms for advertising and analysis purposes. For example, we may share a hashed, non-identifiable version of your email with, for example, Facebook or Google, with the aim of showing you advertising on those platforms, or to exclude you from seeing our advertising on those platforms.
908
909Combined with the use of their respective pixels/advanced matching and Conversions/Events APIs (a secure server-to-server interface that allows us to share specific actions you take on our website directly with platforms such as Meta and TikTok), this enables us to better understand how you interact with our website, measure the impact of our advertising and website conversions, deliver relevant advertising that may be of interest to you and protect your privacy.
910
911Processing your data in this way enables us to deliver relevant advertising that may be of interest to you and protect your privacy. It also enables us to measure the impact of our advertising and website conversions, improve targeted advertising, improve marketing attribution and improve conversion tracking.
912
913To opt out of your email being processed in this way, email [dataprotection@reachplc.com](mailto:dataprotection@reachplc.com), stating 'opt out of hashed email'. You have the right to withdraw your consent or opt-out to the processing of your personal data at any time via our Cookie Management Platform accessed via the 'cog' icon or link at the bottom of every webpage.
914
915**12.5 WhatsApp Instant messaging platform**
916
917When you sign up to one of our Whats App communities to receive the latest updates, exclusives and comments straight to your phone. As part of this process you are allowing WhatsApp to receive and share data with us, including your phone number. The use of your data will be in accordance with this Privacy Notice, and also WhatsApp Privacy Notice [here](https://www.whatsapp.com/legal/privacy-policy-eea).
918
919You can exit the Community you joined at any time by going to the Communities tab of your Whatsapp account, and following these instructions: [How to exit a community](https://faq.whatsapp.com/1312647189536807/).
920
921**12.6 Chatbots and other onsite data collection**
922
923If you engage with chatbots on our sites to communicate with us and ask questions, your information will be used in accordance with this Privacy notice, and specifically to:
924
925- Provide responses to your questions.
926- Analyse and report on user engagement with the chatbot.
927- Review and improve the quality performance of the chatbot.
928- Develop related products and services.
929
930Please note that our chatbots may leverage third party generative AI platforms. Where this is the case, we will:
931
932- Undertake a data protection impact assessment, where legally required.
933- Put in place appropriate controls to ensure that data protection risks are mitigated to an acceptable level.
934- Follow a Privacy by Design approach when developing the chatbot.
935
936Where our chatbots leverage third party generative AI platforms, the information you disclose via the chatbot may be shared with the provider of the AI platform for its purposes, over which we have no control. Please do not submit any information with our chatbots that you would not be willing to share publicly. **For more information see our AI Notice on our websites.**
937
938**12.7 Discount codes, vouchers and cashback accounts**
939
940Some of our sites offer discount codes. When you use one of our discount codes we will collect information about how you use our site. For example, when you redeem a voucher we'll record details of the offer, the date and time and the device you've redeemed it on. Although we do not share your data with the code providers, when you claim your code your personal data may be collected.
941
942The legal "controller" of your personal data is Reach plc, and we rely on the performance of a contract for the application of discount codes. However, our discount websites are managed on our behalf by Widilo who also act as a data controller should you create an account or sign up to their newsletters.
943
944Reach is not responsible for the content or use of personal data on third party websites linked to from our sites which offer Discount Codes. When you navigate to and use these sites, for example to redeem a discount code, we would recommend that you check the Privacy Notice associated with that site for more information on how those sites process your information.
945
946Similarly if you create a Cashback account, as part of the registration your data will be shared directly by you with our cashback partner in line with their terms and conditions which are provided to you at the point of registration. The legal "controller" of your personal data is Reach plc, and we rely on the performance of a contract for the management of Cashback accounts. They are administered by Widilo, also as a data controller, and are subject to their terms and conditions which are provided at the point of registration. For more information on how cashback partners use your data we recommend you check their Privacy Notice for more information.
947
948For anything to do with how Widilo uses your personal data, please see their privacy notice [here](https://www.widilo.co.uk/privacy-policy).
949
950**12.8 Affiliate Sites, such as Mirror Bingo and Mirror Switch & Save**
951
952[Reach Gaming Affiliates](https://www.reachgamingaffiliates.com/) is a website operated by Reach, to promote our Gaming Affiliate programs, and provide users with the ability to join the program. We provide direct links to our nationally recognised and trusted gaming brands on our Reach Gaming Affiliates webpage, such as Mirror Bingo, OK! Bingo and Express Wins. We also provide links to web pages where you can submit your information in order to join our Reach Gaming Affiliates Account.
953
954Please note that we do not directly collect any personal data, concerning your browsing behaviour or your participation in our affiliate program, on this website.
955
956When you navigate to these web pages, please note that our partner, Jumpman, will be the data controller for the personal data that you provide, and Reach will be the data processor. The information we share will be used in accordance with our partner's privacy policy, which you should read when you sign up with the partner. For more information about how your Affiliate data will be used, please see the Jumpman Privacy Notice [here](https://www.mirrorbingo.com/privacy-policy).
957
958Mirror Switch & Save have partnered with Quotezone.co.uk to help you compare insurance policies including:
959
960- [Home insurance](https://insurance.mirrorswitchandsave.co.uk/home/index.php)
961- [Travel insurance](https://insurance.mirrorswitchandsave.co.uk/travel/index.php)
962- [Pet insurance](https://insurance.mirrorswitchandsave.co.uk/pet/index.php)
963- [Van insurance](https://insurance.mirrorswitchandsave.co.uk/van/index.php)
964- [Car insurance](https://insurance.mirrorswitchandsave.co.uk/car/index.php)
965- [Bike insurance](https://insurance.mirrorswitchandsave.co.uk/bike/index.php)
966- [Breakdown insurance](https://insurance.mirrorswitchandsave.co.uk/breakdown/index.php)
967- [Bicycle insurance](https://insurance.mirrorswitchandsave.co.uk/bicycle-quote/index.php)
968
969When you navigate to these web pages, please note that our partner Quotezone will be the data controller for the personal data that you provide, and Reach will be the data processor. For more information about how your Affiliate data will be used, please see the Quotezone Privacy Notice [here](https://www.quotezone.co.uk/about/privacy-policy).
970
971**12.9 When you register for an event**
972
973We use Ticket Tailor to process registrations and issue tickets for our events. We process this data to perform our contract with you. You can read Ticket Tailor's privacy policy [https://www.tickettailor.com/legal/privacy-policy](https://www.tickettailor.com/legal/privacy-policy)
974
975When you register for an event, on any of the websites we may add your information to our mailing lists. If the event has sponsors, we might also share information, including personal data, with those sponsors. This will be in accordance with the privacy laws in the country in which you reside. For example, in the EU/UK, you may have actively given specific consent for marketing from Reach brands, and separately for your data to be shared with a 'named sponsor'.
976
977You can unsubscribe from our communications at any time, by following the unsubscribe instructions on the correspondence you receive, or by emailing [dataprotection@reachplc.com](mailto:dataprotection@reachplc.com) You can also withdraw consent (opt-out) of your data being shared by emailing [dataprotection@reachplc.com](mailto:dataprotection@reachplc.com) stating 'Opt-out of Sharing' and providing your email and the brand details as above.
978
979Please note the use of your personal information by sponsors, will be subject to their own privacy policy and practices, for which we are not responsible.
980
981**12.10 Transfer as part of the sale of our business**
982
983If we sell part or all of our business, personal information may be one of the transferred business assets. If this happens, your information may be disclosed to any successors of our business for them to use for the purpose set out in this Privacy Notice.
984
985**12.11 Award or charitable donation; nomination, voting and judging**
986
987**Nomination and voting**
988
989When you make a nomination or are nominated (either by a nominator, or directly by us) for an award or charitable donation, we may ask for the following personal information:
990
991- First name and surname of the nominator
992- Telephone number of the nominator
993- Email address of the nominator
994- Name of the nominee
995- Postal address nominee
996- Email address nominee
997- Telephone number of the nominee
998
999Personal information may also be included in the narrative of why the nominee deserves the award or charitable donation. This could include anything about the nominee's life, including sensitive data such as health information or criminal offence data about themselves or others. We may also conduct our own research to find identified nominees. We will collect the same information to the extent it is available from publicly available sources or other third parties we interview.
1000
1001When you vote for a nomination, for example via an online form, we may also collect personal information including your name, IP and email address.
1002
1003Generally, we will only process your personal information on one or more of the following legal grounds:
1004
1005**Our legitimate interests**: Where it is necessary to use your personal information for the purposes of our legitimate interests (or those of a third party). For example:
1006
1007- We have a legitimate interest in collecting the nominator's personal details (such as name, contact numbers and/or email address) from the nominator, from publicly available sources or when we find out about the nominee's story from another source, so we can contact the nominee or identified nominee to see if they are interested in taking part in the award or charitable donation process.
1008- We have a legitimate interest in using the nominee's/ identified nominee's personal information so we can assess their suitability to receive an award or charitable donation, including performing background checks.
1009
1010**Consent**: We may ask you for your consent to use your personal information for a specific purpose. We will explain the specific purpose for processing at the time we ask you for such consent.
1011
1012**Judging**
1013
1014When you submit a nomination for an award or charitable donation, or you are nominated for an award or charitable donation, we will review all of the information provided in line with the selection criteria. We will use the personal information provided by nominators, or compiled from its own research, to produce a shortlist for each award or charitable donation. If the nomination does not comply with the terms and conditions, then the relevant personal information will be promptly deleted.
1015
1016Personal information of shortlisted potential award or charitable donation winners (which may include both nominees and identified nominees) may be shared with the relevant award or charitable donation judging panel. The panels are made up of members selected by us and will review the shortlist to choose winners of the award or charitable donation and inform us of their decision. Alternatively we may advertise for public vote, for example in our national and regional newspapers.
1017
1018We may also contact nominators and/or nominees/ identified nominees to research their story prior to the winners being contacted.
1019
1020If you are selected as a winner of an award or charitable donation, we will use the personal data provided by the nominators to contact the winners. Winners will be contacted and asked to confirm that they are happy to be winners of the relevant award or charitable donation and for their personal information to be used for this purpose.
1021
1022The personal data may also be used to communicate & run an event, for publication in Reach print and on-line titles, and for use on social media platforms.
1023
1024**12.12 Business Directory and B2B Marketing Services**
1025
1026We may receive personal information about you from third-party sources to help us maintain the accuracy of our records and grow our business. This includes professional and business contact information from providers such as Cognism Limited. The data provided typically includes your name, job title, business email address, and professional social media profile (e.g., LinkedIn URL).
1027
1028We work in partnership with Market Location. In certain circumstances, we may share business contact information with them to ensure our records are accurate and up-to-date. Market Location may also use this information for their own professional services and directory products. You can find more information about how Market Location handles your data, including your rights to object to their processing, by visiting their [Privacy Policy](https://marketlocation.co.uk/privacy-policy/).
1029
1030**12.13 Artificial Intelligence Partners**
1031
1032We partner with select artificial intelligence (AI) developers and technology platforms to enhance our services and support the broader digital media ecosystems as follows:
1033
1034- We share our content (including articles, archives, and multimedia) with AI providers such as Amazon Web Services, acting as our Processor, to enhance our models and enable us to improve our service to our readers. This may include categorising our content, such as articles and images, so these can be easily identified and accessed for future use.
1035- We enter into commercial licensing agreements with major technology providers, including Google, to license our published content archives. This allows our journalism to be displayed within AI-generated summaries and responses. Under these agreements, our content may undergo pre-processing and be utilised by the AI provider for the training, fine-tuning, evaluation, and ongoing improvement of their artificial intelligence models.
1036
1037**What data is included?** This licensed content consists entirely of our public journalism and archives, which may include personal data embedded within reporting, such as names, public profiles, quotes, or specific details mentioned in our published stories.
1038
1039**What data is excluded?** We strictly prohibit our AI partners from accessing or using your private user data. Your account credentials, email address, payment details, billing history, or private interactions with our platforms are never shared, sold, or licensed for AI training or model improvement purposes.
1040
1041**12.14 Internal AI Archiving**
1042
1043We use Artificial Intelligence to assist with the digital archiving and tagging of our historical publications. This processing involves training and fine tuning internal archival models on our past content to build a searchable knowledge base. We partner with Amazon Web Services (AWS) to host the cloud infrastructure and power these analytical tools. This system functions as a reference utility for Reach journalists to support standard journalistic research, fact checking, and reporting.
1044
1045**What data is included?** This activity utilises our public editorial archives. It may include personal data natively embedded within historical news reporting, such as names, quotes, public profiles, or specific factual details published within past stories.
1046
1047**What data is excluded?** No private user account data, registration details, marketing preferences, billing histories, or private reader interactions are ever injected into our archival training models or knowledge base systems.
1048
1049**[\*\*\* Click here to go back to 'Contents' \*\*\*]()**
1050
1051**12.15 Launchpad and Independent Creator Networks**
1052
1053Launchpad is an online publishing platform operated by Reach. This service is designed to enable independent creators to build, distribute, and monetise their digital content. When you use this platform, Reach and the specific creator you choose to engage with act as joint data controllers for your information. Reach provides the underlying technological infrastructure and manages all advertising operations. This section applies to all subscribers, account holders, and site visitors across the United Kingdom, the European Union, and the United States.
1054
1055**The data we collect and what we do with it**
1056
1057We collect the minimum amount of personal data necessary to maintain your account, serve content, and manage advertising preferences. When you create an account or subscribe to a publication, we collect your email address, your username, and your basic account preferences. We use this information to authenticate your login sessions, manage your subscriptions, and deliver the specific creator blogs you have requested. We also collect technical infrastructure data, such as your internet protocol address and browser type, to ensure platform security, prevent fraudulent account creation, and ensure content renders correctly on your device.
1058
1059**Free and Paid Subscriptions**
1060
1061We offer tiered access models for our communities and newsletters, including both free and paid newsletter subscriptions. In order to provide, technically operate, and verify these subscription services on our website, we collect online identifiers including your device type, IP address, language settings, approximate location at the time of browsing, your logged-in user ID, user status, and engagement history.
1062
1063We use this data to verify your subscription status, ensure platform security, prevent fraud, and determine what tailored content is delivered to you. If you choose to cancel a subscription, we may also collect your reason for leaving to improve our platform, and where permitted, offer you relevant alternative communities.
1064
1065**Newsletter Communications**
1066
1067When you sign up to receive updates from a creator, your email address is used to send you newsletters, content recommendations, and interesting articles from across our network, in line with the consent you have provided. The advertisements inside our newsletters are strictly contextual. This means the promotions you see are selected automatically based entirely on the topic, category, or theme of the specific newsletter edition you are reading. We do not use tracking pixels to monitor your email behaviour or build an advertising profile about your interests for email delivery.
1068
1069You have total control over these communications. You can unsubscribe at any time by clicking the unsubscribe link contained within the footer of any email we send you.
1070
1071**Service and Promotional Messages for Paid Subscribers**
1072
1073If you are a subscriber to a free or paid newsletter/community tier, we will use your email address to send you essential service messages. These include transactional receipts, renewal reminders, operational updates, and automated surveys or feedback requests during a cancellation process to help us improve our offerings.
1074
1075Where permitted by law or your preferences, we may also send you promotional communications about your subscription, such as exclusive discounts, renewal offers, and relevant updates across the network. You have total control over these and can easily opt out at the point of sign-up or via the opt-out link contained in any promotional email you receive.
1076
1077**Creator Blogs and Personalised Advertising**
1078
1079Independent creators have the ability to place behavioural advertisements within the content of their own on site blogs. Behavioural advertising uses tracking technologies to understand your interests based on your browsing activity across the internet, allowing advertisers to display more relevant adverts to you.
1080
1081We only serve personalised advertisements with your consent via our CMP. When you visit creator blogs or access your user account dashboard, you can use our Consent Management interface to customise your tracking preferences. Through this panel, you can also review the specific list of approved ad tech vendors, grant or deny consent for behavioural tracking, or object to data processing at any moment.
1082
1083**Data Sharing within the Creator Network and Third-Party Processors**
1084
1085To provide our subscription model, we must share specific information across our ecosystem. When you subscribe to an independent creator, that individual creator is granted access to your email address solely to distribute their newsletter and manage their community. All independent creators on Launchpad are contractually bound to process your data in strict compliance with applicable global privacy laws. They are legally forbidden from downloading your email address for external marketing purposes, sharing it with unauthorised third parties, or selling your data.
1086
1087When you sign up for one of the free or paid subscription tiers, we use a third-party provider, Piano, to run the infrastructure. They will use your details to process your payments, manage account access, and deliver the content you have subscribed to. Please see the [Piano Privacy Notice](https://piano.io/gb/privacy-policy/) for more information on how they process personal data.
1088
1089**Data Transfer and Retention**
1090
1091As an international media company, we may store or process your information in data centres located outside your home country, including the United Kingdom, the European Union, and the United States. We implement strict legal safeguards, including standard contractual clauses approved by regulatory authorities, to ensure your data receives an identical level of protection regardless of geographic location.
1092
1093We retain your personal data in accordance with the law and relevant regulations and will store the data for as long as is necessary to fulfil the purpose for which it was collected. The period for which we keep your personal data will be determined by the purpose for which we are using the data, and our legal and regulatory obligations.
1094
1095**Your Rights and how to access them**
1096
1097Depending on your location, you possess legal rights regarding your personal data. You have the right to request access to the information we hold about you, request the correction of inaccurate data, or seek the complete erasure of your personal records from our system. You also have the right to restrict or object to certain types of data processing, including behavioural tracking. To exercise any of these rights, please contact [dataprotection@reachplc.com](mailto:dataprotection@reachplc.com)
1098
1099**[\*\*\* Click here to go back to 'Contents' \*\*\*]()**
1100
1101**12.16 How we work with Group Companies**
1102
1103Reach receives information from, and shares information with, other companies within the Reach Group to help operate, provide, improve, understand, customise, support, and market our services and their offerings. This includes:
1104
1105- helping improve infrastructure and delivery systems;
1106- understanding how our services or theirs are used;
1107- promoting safety, security and integrity across the Reach Group e.g. securing systems and fighting spam, threats, abuse, or infringement activities;
1108- performing analytics and analysis of how you interact with the group's products and services, to facilitate business efficiencies, to help us better understand our audiences and deliver relevant content, develop products and services that would be relevant to you; and
1109- sharing information to deliver more relevant advertising from across the Reach Group network.
1110
1111We also share information to fulfil the service to you for example:
1112
1113- When you decide to place an advertisement on Marketplace Live, through our Bookanad website, the information that you have provided will be shared with Marketplace Live, so that the publication and administration of your advertisement may be effectively managed.
1114- When you elect to place a notice on the InYourArea website, through our Bookanad website, the information that you have provided when creating an account, and a notice, will be shared with InYourArea so that they may manage and administer your online post.
1115
1116**Audience Analytics and Understanding**
1117
1118When you consent to our cookies via our CMP, we may use your information (cookie identifiers and usage data) to help us better understand our audiences. This may include linking engagement data across our websites and apps for the following purposes;
1119
1120- Content improvement, to analyse what content is popular with our audiences so we can prioritise content that matters to our readers.
1121- Performance analysis, to assess how our platforms are performing, including traffic levels and audience engagement.
1122- Analytics and insights, to ingest the data into our analytics platforms (Engine), which allow our teams to ask questions and gain insights that support better decision making.
1123
1124**Advertising Relevance and Effectiveness**
1125
1126Another key way we share data across our websites and apps, is for advertising and targeting purposes. When you consent to cookies via our CMP, we may use your information from your online behaviour across our group sites to deliver adverts that are relevant to your interests and to help measure the effectiveness of our advertising campaigns. For example:
1127
1128- When you go onto one of our sites we can track your behaviour on those sites, or any of our other sites across our Group companies, and use this to target advertising or email content to you. For example, if you use our ecommerce site yimbly.com, we can see if you later visited one of our other sites and you may see advertising for the products you looked at based on this. If you would prefer to opt out, you can do so via the consent management pop-up.
1129- This also applies if you open an email from us and this takes you online as we can use the information from your online behaviour to later target marketing to you. So for example if you subscribe to marketing emails on one of our regional news sites and we see you have looked at sporting content on our other sites we may provide you with sport related content in your marketing emails from the regional news site. You can unsubscribe from emails at any time.
1130- We may also upload emails (in hashed, pseudonymous form) straight to the advertising data system and this enables us to identify the same non-identifiable user across devices. So we know, for example, that the person who looks at Reach lifestyle content on their phone and then Reach fashion content on their desktop, is in fact the same non-identified person. You can unsubscribe from emails at any time.
1131- We may also use the other data you have provided to us, combined with your online behaviour, to personalise your email campaigns. For example, if you signed up an account when browsing 'football' content on our news sites, we may classify you as a 'football intender'. Later when you go online we may see you are also interested in content on films and classify you as a 'football and films intender'. As a result you may see advertising content related to football and films, when you visit our sites.
1132
1133**[\*\*\* Click here to go back to 'Contents' \*\*\*]()**
1134
1135## 13\. How we keep your data secure, why we may keep it, and countries we may transfer it to
1136
1137**13.1 How we keep your data secure.**
1138
1139We are committed to protecting the personal data we hold and keep your information secure by taking appropriate technical and organisational measures, including for example encryption techniques and access control, to protect personal and sensitive data against its unauthorised or unlawful processing and against its accidental loss, destruction or damage.
1140
1141Where we use third-party service providers to store data, we have appropriate agreements in place to ensure that your personal data is protected. In addition, we limit access to your personal information to those employees, agents, contractors and other third parties who have a business need to know. We also require any third parties to whom we may transfer personal data to have appropriate security measures in place. They will only process your personal information on our instructions and they are subject to a duty of confidentiality.
1142
1143Our websites may permit you to create an account, or have the facility for an account to be created on your behalf. When this happens, you may be prompted to create a password. You are responsible for maintaining the confidentiality of your password, and you are responsible for any access to or use of your account by someone else that has obtained your password, whether or not such access or use has been authorised by you. You should notify us of any unauthorised use of your password or account. In the unlikely event of a breach we will notify the affected individuals in a timely manner, as required by law. If you believe your account has been compromised, please contact us at [dataprotection@reachpc.com](mailto:dataprotection@reachpc.com), or if you are in the US email [privacyofficer@reachplc.com](mailto:privacyofficer@reachplc.com) stating which state you are a resident of.
1144
1145**13.2 Reason for keeping it**
1146
1147We hold personal data for a variety of different purposes and the length of time we keep your data will vary depending on the services or products we are providing our customers with.
1148
1149We will only keep your data for a reasonable period of time, which is based on the purpose for which we are using your data. For example, we review our marketing contact lists and delete those contacts where there has been no activity for three years. In addition, by law, for tax and other purposes, we may have to keep basic information about our customers (including Contact, Identity, Financial and Transaction Data) for seven years after they cease being customers. We may also need to keep information to evidence a contract or prevent fraud.
1150
1151Once the purpose has been fulfilled, we will securely delete that data or anonymise your information (so that we, or anyone else, can no longer tell that data relates to you) unless we are required to retain the data longer for legal, tax or accounting reasons.
1152
1153**13.3 Countries we may transfer your data to**
1154
1155When you provide information to us, we may transfer your personal information to our group companies and processors who are based in a country other than your country of residence. For example, if you are a UK citizen you may find your data is processed by a supplier or service based outside the UK or EEA, such as in the United States. If such a transfer requires us to apply additional safeguards to your personal information under, for example, UK or European data protection laws, we will do so.
1156
1157These steps may include implementing the UK's International Data Transfer Agreement clauses or European Commission's Standard Contractual Clauses, with additional UK-specific clauses for transfers of personal information to our service providers and business partners. Alternatively we will ensure the third parties we work with will offer an adequate level of protection by meeting the legally agreed requirements of the EU-US Data Privacy Framework, and the UK extension, as appropriate.
1158
1159To the extent applicable, we may rely on derogations as set forth in Article 49 of the GDPR for the transfer and onward transfer of personal information collected from individuals in the UK or EEA to the United States, and other countries that the EU views as not providing adequate data protection. Specifically, we may transfer such information to another party in accordance with our lawful basis for processing.
1160
1161By using our website, products or services or by interacting with us in the ways described in this Privacy Notice, you consent to the transfer, storage and processing of your personal information outside your country of residence, including out of the EEA, in the circumstances set out in this Privacy Notice. If you do not want your information to be transferred in this way you should not use our website, applications or services.
1162
1163**[\*\*\* Click here to go back to 'Contents' \*\*\*]()**
1164
1165## 14\. How we ensure we protect children's privacy
1166
1167Our products and services are for a general audience and not aimed at children.
1168
1169Across our portfolio, we have taken active measures to ensure we comply with all relevant laws and regulations, and do not knowingly collect any personal information from children under the age of sixteen or send any marketing communications to children.
1170
1171If we are running a competition, for example, which might be of interest to children, our competition rules specify that a parent or guardian must consent to entry (if the child is under eighteen). You must also be at least eighteen to purchase products or services from us. If you are under the age of eighteen, you must ensure that your parent or guardian purchases the products or services on your behalf.
1172
1173If, in the future, we collect personally identifiable information from children in connection with our products and services, we will do so in compliance with all relevant laws and regulations including, without limitation, obtaining parental consent where necessary. If you are a parent or guardian and are concerned that we may be processing personal data related to your child, please contact [dataprotection@reachplc.com](mailto:dataprotection@reachplc.com).
1174
1175**[\*\*\* Click here to go back to 'Contents' \*\*\*]()**
1176
1177## 15\. UK and EU residents: Your rights and how to exercise them
1178
1179The law gives you certain rights over your personal information.
1180
1181You can exercise your rights by contacting our group Data Protection Officer's team through the use of the relevant forms provided below. It is helpful to be as specific as possible about what you want us to do or what information you are looking for, because it enables us to respond to you more quickly.
1182
1183Depending on your request, we may ask you to prove your identity to us first, in order to make sure that someone isn't impersonating you. For example, if you contact us about your Reach account using a different email address, we may first require you to prove that you control the email address which you used to set up the account. If you want information about a subscription or some other paid service then we may ask you to provide the last four digits of the credit card used to pay for it.
1184
1185If you are making a request on behalf of someone else, you must include proof of their permission for you to do so, or provide evidence of a power of attorney, court order, or health professional evidence that they are unable to provide consent.
1186
1187Most of your rights do have exceptions to them, designed to protect the rights of others or to ensure that we can comply with the law and operate our business in a prudent manner (for example, by keeping certain records). If we decline all or part of your request on the basis of one or more of those exceptions, we will tell you that we are doing so, and we will explain our reasons. We may also reject your request entirely if it is excessive or unfounded.
1188
1189**15.1 Your right to access the information we hold about you**
1190
1191You have the right to have access to the information we hold about you. There are a few exceptions to that right, designed to protect the rights of other people.
1192
1193To exercise this right please use our [right of access request form](https://docs.google.com/forms/d/1ryghEIexPahCbYznAymrFU1t9IMioqQOkeBbzZkBwtw/viewform).
1194
1195**15.2 Your right to have inaccurate information about you rectified**
1196
1197If we hold information about you that is factually inaccurate (for example, we have spelled your name wrong) then you have the right to have it corrected. This right does not extend to matters of opinion; for example, moderation decisions we might make about your comments on our websites.
1198
1199To exercise this right please use our [other rights request form](https://docs.google.com/forms/d/1l5UU-bfte8NUvRWG5BTUV0076O78C6ZDxpazy5n_Kpk/viewform).
1200
1201**15.3 Your right to have your information erased in some circumstances**
1202
1203You may have the right to have some or all of your information deleted, principally if the information you want deleted is no longer needed or if we don't have a legal basis to continue using it (for example, if we are using it on the basis of your consent and you withdraw your consent).
1204
1205Accounts on this site can be deleted at the users request. Contact [dataprotection@reachplc.com](mailto:dataprotection@reachplc.com) or complete the form below. Please note, account deletion will lead to the deletion of all personal data and it cannot be recovered.
1206
1207To exercise this right please use our [right to erasure request form](https://docs.google.com/forms/d/1FPYI30k_YxTZTRMeJFKOifbszAvNBcKv4mXE2hJbCSU/viewform).
1208
1209**15.4 Your right to withdraw your consent**
1210
1211If we're relying on your consent to do something with your information (for example, to send you newsletters) then you have the right to withdraw that consent at any time.
1212
1213For newsletters and email communications, you can withdraw your consent to receive the communication by clicking the 'Unsubscribe' link at the bottom of any email. Additionally, you can prevent email open-tracking independently by disabling the 'load remote images' setting within your specific email application provider.
1214
1215To withdraw your consent for how we are using your information, please use our [unsubscribe request form](https://docs.google.com/forms/d/1BzxjkfB1KIdmiTUWF3ij_2Ezs4dOb-KS6O1_a5bqeuQ/viewform)
1216
1217For targeted advertising on our websites, you can access the screen to do this by clicking the "Privacy" tag with the 'cog' icon or link at the bottom of every webpage to go to the Consent Management Platform (CMP).
1218
1219For targeted advertising in our apps, you will be presented with the CMP on initial download and whenever it is updated thereafter. You can also change your CMP settings by navigating to 'My Account' at the bottom of the app screen and clicking on 'My Privacy'.
1220
1221**15.5 Your right to object to what we do with your data, and to have restrictions placed upon it**
1222
1223If we are doing something with your data not on the basis of your consent but on the basis of our "legitimate interest", then you have the right to object to what we are doing, and we must stop unless we can show that there is a compelling and legitimate reason to continue or what we are doing relates to a legal claim. Activities such as fraud prevention will fall into that category.
1224
1225In the case of direct marketing and profiling, your right to object is absolute. Regardless of what other mechanisms we may make available, you can always object by unsubscribing from marketing emails and by rejecting the use of cookies on our websites (see the Privacy 'cog' or link at the bottom of every webpage). When using our apps, if you want to change the settings, go to the 'My Account' Link at the bottom of the screen which includes 'My Privacy' and takes you to the Consent Management Platform (CMP).
1226
1227To exercise this request please use our [other rights request form](https://docs.google.com/forms/d/1l5UU-bfte8NUvRWG5BTUV0076O78C6ZDxpazy5n_Kpk/viewform).
1228
1229**15.6 Your right to restrict what we do with your information in some circumstances**
1230
1231In certain circumstances, you have the right to restrict our use of your information to simply storing it and using it only for legal claims, protecting the rights of others and matters of important public interest. Those circumstances are: if you dispute the accuracy of information we hold about you; if we do something unlawful with your information but you don't want us to delete it; if we don't need the information anymore but you want us to preserve it in connection with a legal claim; or for the duration of the period in which we are considering a valid objection you have raised under your right to object discussed above.
1232
1233To exercise this right please use our [other rights request form](https://docs.google.com/forms/d/1l5UU-bfte8NUvRWG5BTUV0076O78C6ZDxpazy5n_Kpk/viewform).
1234
1235**15.7 Your right to portability**
1236
1237You have the right to receive the personal data concerning you which you have provided to a controller in a portable electronic format, or have it transmitted to another controller, where processing is based upon consent and undertaken by automated means.
1238
1239To exercise this right please use our [other rights request form](https://docs.google.com/forms/d/1l5UU-bfte8NUvRWG5BTUV0076O78C6ZDxpazy5n_Kpk/viewform).
1240
1241**15.8 How to Complain**
1242
1243If you have a complaint or disagree with a decision we have made, we ask that you discuss it with us first by contacting the group Data Protection Officer using our [data protection complaints form](https://docs.google.com/forms/d/1HqiwFBdi3amJGQYGKtGwBjVbNhQx--YXQZG4L1Cmz5k/viewform) or via the address given at the top of this Privacy Notice.
1244
1245If you remain dissatisfied with the outcome of your complaint, once you have brought it to our attention, you also have the right to complain to your data protection supervisory authority.
1246
1247**In the UK this is the Information Commissioner's Office:**
1248
1249The ICO's contact information is:
1250
1251Information Commissioner's Office
1252Wycliffe House
1253Wilmslow
1254Cheshire
1255SK9 5AF
1256
1257ICO website: [https://ico.org.uk/](https://ico.org.uk/)
1258Helpline Number: 0303 123 1113
1259
1260**In the Republic of Ireland, it is the Data Protection Commissioner:**
1261
126221 Fitzwilliam Square South
1263Dublin 2
1264D02 RD28
1265Ireland
1266
1267DPC IE website: [https://www.dataprotection.ie/](https://www.dataprotection.ie/)
1268DPC IE phone number is 01 7650100 / 1800437 737
1269
1270If you are based in another EU country, you can find the details of your local supervising authority here. [EU SAs](https://edpb.europa.eu/about-edpb/about-edpb/members_en)
1271
1272**[\*\*\* Click here to go back to 'Contents' \*\*\*]()**
1273
1274## 16\. US, Canadian and Other Residents: relevant laws, rights and notices
1275
1276Privacy legislation in the US and Canada is evolving and as a result there are special rights for residents of certain states. This section details the existing state laws and consumer privacy rights and will be updated as the new laws are introduced.
1277
1278We have appointed a Privacy Officer to oversee our data protection and privacy practices, in the US and Canada. Our Data Protection Officer holds this position. If you have any comments, concerns, or questions, including any requests to exercise your legal rights, you can contact our Privacy Officer as follows:
1279
1280- By email: privacyofficer@reachplc.com
1281- By post: Privacy Officer, Reach Plc, 14 Wall Street, FL 20, New York, NY, 10005
1282
1283It would be very helpful for us if you could include your full name, your postcode, details of the service you are using and/or account information when contacting us.
1284
1285This section covers the following:
1286
1287**[16.1 California Residents]()** data collection, use and sharing, and privacy rights
1288
1289**[16.2 Residents of US states with applicable privacy legislation]()** specific information and privacy rights
1290
1291**[16.3 Residents of other states and territories with applicable legislation]()**
1292
1293**[16.4 Other Notices]()**
1294
1295**QUICK LINK**
1296
1297For information on how to opt out of the "sale" and "sharing" of your information see the following:
1298
1299**California - See** [16.1.5 Do Not "Sell" or "Share" My Personal Information]().
1300
1301**All other States with Applicable Legislation - See** [16.2.4 Exercising these Rights]().
1302
1303**[16.1 California Residents]()**
1304
1305This section applies to California residents. It describes how we collect, use and share Personal Information of California residents when operating our business, and their rights with respect to that Personal Information. This section should be read in conjunction with the rest of this Privacy Notice which provides further details on the nature of our data processing.
1306
1307For purposes of this section, "**Personal Information**" has the meaning given in the California Consumer Privacy Act of 2018 ("**CCPA**") including as amended by the California Privacy Rights Act of 2020. It does not include: (i) information that is lawfully made available from federal, state or local government records; (ii) de-identified or aggregated data; or (iii) information excluded from the scope of the CCPA.
1308
1309On some occasions, in order to provide our Services to our clients, we may process service data that we receive from or on behalf of our clients. If you are a California resident, you may have certain CCPA rights with regards to this information. Under the CCPA, when we act as a "service provider" (as opposed to a "business" or a "third party") over such information, we only process your information in a way required to provide our services to our clients, at our clients' direction. If you wish to exercise any of your rights under CCPA regarding such information, please contact the relevant business that collected the information from you, as they control and determine how your information is processed.
1310
1311**16.1.1 Personal Information that we collect, use and share**
1312
1313The table below provides a summary of the categories of your personal information Reach may have collected, the sources of that data, the reasons for collection and who we may have disclosed the data to over the last twelve months. The information gathered in this table may apply to you in different ways depending on how you have interacted with us.
1314
1315**Please see the keys below the table to inform the second and third column:**
1316
1317<table><tbody><tr><td><p><strong>Category</strong></p></td><td><p><strong>Business Purpose for Disclosure</strong></p></td><td><p><strong>Categories of Recipients of Disclosures</strong></p></td><td><p><strong>Do we share this data?</strong></p></td></tr><tr><td><p><strong>Personal Information</strong></p></td></tr><tr><td><p><strong>Identifiers</strong></p><p>such as name, email address, billing information, username, any provided phone numbers, such as home, or mobile, online screen name, security questions and password.</p></td><td><p>P1, P2, P3, P4, P5, P6, P7</p></td><td><p>D1, D2, D3, D4, D5, D6, D7, D8</p></td><td><p>No</p></td></tr><tr><td><p><strong>Commercial Data</strong></p><p>such as records of your purchases and transaction data.</p></td><td><p>P1, P2, P3, P4, P6, P7</p></td><td><p>D1, D2, D3, D6, D7, D8</p></td><td><p>No</p></td></tr><tr><td><p><strong>Customer Records</strong></p><p>such as financial or payment information to process payments and information about your transactions and purchases with us.</p></td><td><p>P1, P7</p></td><td><p>D2, D6, D7, D8</p></td><td><p>No</p></td></tr><tr><td><p><strong>Internet &amp; electronic network activity information</strong></p><p>including, but not limited to browsing history, device ID, search history, and information regarding interactions with an internet website, video, application, comments or advertisement, including other usage data related to your use of any of our Services or other online services, including travel search queries and map interactions via our partner Stay22. Please see our <a href="https://express.co.uk/cookie-policy">Cookie Notice</a> for further information.</p></td><td><p>P1, P2, P3, P4, P5, P6, P7</p></td><td><p>D1, D2, D3, D4, D5, D6, D7, D8</p></td><td><p>Yes</p></td></tr><tr><td><p><strong>Device information and other identifiers</strong></p><p>such as IP address; browser type and language; operating system; platform type; device type; software and hardware attributes; and unique device, advertising, hashed pseudonymous emails and app identifiers.</p></td><td><p>P1, P2, P3, P4, P6, P7</p></td><td><p>D1, D2, D3, D4, D5, D6, D7, D8</p></td><td><p>Yes</p></td></tr><tr><td><p><strong>Geolocation Data</strong></p><p>such as general location, and, if you provide permission, precise GPS location.</p></td><td><p>P1, P2, P3, P4, P6, P7</p></td><td><p>D1, D2, D3, D4, D5, D6, D7, D8</p></td><td><p>Yes</p></td></tr><tr><td><p><strong>Sensory Data</strong></p><p>such as audio recordings if you call our customer service or volunteer this information as part of using our services and photographs in connection with your social media account</p></td><td><p>P1, P2, P5, P7</p></td><td><p>D1, D2, D6, D7, D8</p></td><td><p>No</p></td></tr><tr><td><p><strong>Financial Data</strong></p><p>such as credit or debit card number, verification number, and expiration date, to process payments and information about your transactions and purchases with us.</p></td><td><p>P1, P7</p></td><td><p>D2, D6, D7, D8</p></td><td><p>No</p></td></tr><tr><td><p><strong>Social media information</strong></p><p>(which may include personal identifiers, photos, location, user generated content, comments, demographic information). If you link your account or access the Services through a third-party connection or log-in, we may have access to any information you provide to that social network depending on your privacy settings, such as your name, email address, photo, location, and current city; and information you provide to us directly through our pages on social networking and blogging platforms (e.g., Facebook, Instagram, YouTube, and Twitter).</p></td><td><p>P1, P2, P3, P4, P5, P6, P7</p></td><td><p>D1, D2, D3, D4, D5, D6, D7, D8</p></td><td><p>No</p></td></tr><tr><td><p><strong>Research, survey, or sweepstakes information</strong></p><p>(including personal identifiers and user generated content) collected if you participate in a survey or sweepstakes; includes information needed for you to participate (such as contact information), and to fulfil your prize.</p></td><td><p>P1, P2, P3, P4, P5, P6, P7</p></td><td><p>D1, D2, D3, D5, D6, D7, D8</p></td><td><p>No</p></td></tr><tr><td><p><strong>Inference Data</strong></p><p>including inferences drawn from any of the information identified above to create a profile reflecting a consumer's preferences, characteristics, behaviour or attitudes.</p></td><td><p>P1, P2, P3, P4, P6, P7</p></td><td><p>D1, D2, D3, D5, D6, D7, D8</p></td><td><p>No</p></td></tr><tr><td><p><strong>Sensitive Personal Information</strong></p></td></tr><tr><td><p>Account log-in in combination with any required security questions or password collected if you create an account with us.</p></td><td><p>P1, P2, P7</p></td><td><p>D2, D6, D7, D8</p></td><td><p>No</p></td></tr></tbody></table>
1318
1319**Data collection key**
1320
1321Purposes
1322
1323- P1 - Performing services; including but not limited to customer service and related requests, processing orders or other transactions, managing and maintaining your account, marketing or advertorial services, analytics.
1324- P2 - Analysis and improvement; reviewing our activities to enhance either services offered or improve commercial capabilities such as by improving the positioning or quality of our adverts and developing of new functionality and tools.
1325- P3 - Commercial interests; including but not limited to the promotion of goods and services and to drive engagement, page views, subscriptions, registrations, purchases and similar.
1326- P4 - Ephemeral; data processed in a transient manner and not retained by Reach.
1327- P5 - Editorial; to support the production of editorial content across Reach titles.
1328- P6 - Repairs; review of assets and management of debugging and other fixes to maintain and improve functionality.
1329- P7 - Security, fraud and legal compliance; actions deemed necessary to protect and defend Reach assets against illegal, malicious and damaging activity.
1330
1331Disclosures
1332
1333- D1 - Reach subsidiaries and affiliates; we may disclose information in order to deliver services in the ways described in this Privacy Notice. Marketing will only be sent to you where the necessary consent has been provided.
1334- D2 - Service providers or contractors; we may disclose information where we work in partnership to provide you with products or services.
1335- D3 - Commercial partners; we may disclose information with third parties to provide you with relevant content and advertising on websites and mobile apps where we have the necessary permissions to do so. We may also disclose information to enable you to receive marketing you have asked to receive.
1336- D4 - Social media; we may disclose information with social media networks where we have the necessary permission to do so.
1337- D5 - Analytics providers; we may disclose information with data analytic providers to review, evaluate and improve our services.
1338- D6 - Security; we may disclose information where it is necessary to do so in order to protect the rights, assets, employees and customers of Reach.
1339- D7 - Legal requirements; we may disclose information where necessary to comply with our legal obligations or if we believe it is required in relation to the investigation or prevention of suspected or actual illegal activity.
1340- D8 - Business Development; we may disclose information for the purpose of business transfers, mergers, acquisitions, bankruptcy proceedings or similar.
1341
1342**16.1.2 Sharing of your data**
1343
1344- Like many companies, we use services that help deliver interest-based ads, content and services to you and may transfer personal information to business partners for their use. California law classifies our use of these services as "sharing" your Personal Information to the companies that provide the services. This is because we allow them to collect information from our website users (e.g., online identifiers and browsing activity) so they can help serve ads, content and services more likely to interest you.This sharing is limited to advertising partners with whom we have a contractual agreement and to the online marketing related purposes agreed by you via Reach's Consent Management Platform (CMP). The data types include an online identifier, URLs from Reach pages, a referrer identifier, hashed and pseudonymised emails and a truncated IP address. For example, we may share your data with identity and advertising partners, such as LiveRamp, Roqad and Freestar to recognise you across different devices and to serve you more relevant, interest-based advertising. Roqad utilises these cookies, mobile device identifiers, and hashed email addresses solely to build their identity graph. We also share internet network activity and inferred commercial data with Stay22 to display contextual accommodation options based on the articles or events you are browsing.
1345
1346 For information on the third party partners we work with please click [here](https://www.reachplc.com/site-services/third-party-cookies)
1347
1348**16.1.3 Sources of Personal Information.**
1349
1350In general, we may collect the categories of personal information identified in the table above from the following categories of sources:
1351
1352- Directly from you and your devices
1353- Through your use of our services
1354- From third parties and service providers, including affiliates, commercial partners, social media networks, analytic providers, credit reference agencies
1355
1356**16.1.4 California Residents' Rights.**
1357
1358As a California resident, you have the following rights (subject to certain limitations):
1359
1360- **Information.** You can request the following information about how we have collected and used your Personal Information. This includes information beyond the standard 12-month period for any personal information collected on or after January 1, 2022, at your request:
1361
1362- The categories of Personal Information that we have collected.
1363- The categories of sources from which we collected Personal Information **(such as social media networks and credit reference agencies)**.
1364- The categories of information collected both directly and indirectly, including through a service provider or contractor.
1365- The business or commercial purpose for collecting and/or selling Personal Information.
1366- The categories of third parties with whom we share Personal Information **(such as analytics providers and social media networks)**.
1367- Whether we have disclosed your Personal Information for a business purpose, and if so, the categories of Personal Information received by each category of third party recipient, including the categories of PI disclosed to a service provider.
1368- Whether we've sold your Personal Information, and if so, the categories of Personal Information received by each category of third party recipient.
1369
1370- **Access**. You can request a copy of the Personal Information that we have collected about you. You may request a copy of personal information collected on or after January 1, 2022, beyond the standard 12-month look-back period.
1371- **Deletion.** You can ask us to delete the Personal Information that we have collected from you.
1372- **Retention**. How long we keep your data and the criteria for those periods.
1373- **Correction.** You can request that we correct inaccurate Personal Information.
1374- **Portability.** You have the right to receive your information in an easily understandable, machine readable and transmittable form.
1375- **Opt-out of sale or sharing.** You have the right to opt out of the sale or sharing of your Personal Information.
1376- **Limit the use of your Sensitive Personal Information.** You have the right to limit the use or disclosure of your sensitive personal information ("SPI") to the information necessary to perform services or provide goods reasonably expected.
1377- **Non-discrimination.** The right not to be subject to discriminatory treatment for exercising their rights under the CCPA.
1378- **Decline the use of Profiling and Automated Decision Making**.The right to not be subject to profiling and automatic decision making which results in significant effects.
1379
1380In the past 12 months, we have shared your Personal Information with third parties in the following circumstances, which California law classifies as a "sale" of your Personal Information:
1381
1382- supplying your data to third parties with your express consent (e.g. where you opt-in to receive notifications or create an account) or with promotional partners, such as when you enter a promotion, contest or sweepstake;
1383- supplying attendee data to third parties who provide services in connection with our events, and sending your data to suppliers of certain products and services (where you have consented to hear from such third parties);
1384- using services that help deliver interest-based ads, content and services to you and may transfer personal information to business partners for their use. California law classifies our use of these services as "sharing" your Personal Information to the companies that provide the services. This is because we allow them to collect information from our website users (e.g., online identifiers and browsing activity) so they can help serve ads, content and services more likely to interest you.
1385
1386**16.1.5 Do Not "Sell" or "Share" My Personal Information.**
1387
1388California residents may opt out of the "sale" or "sharing" of their personal information.
1389
1390- **Sale**: Reach enters into commercial arrangements where specific personal information may be disclosed for monetary or other valuable consideration, which qualifies as a sale under applicable privacy legislation. If we "sell" your Personal Information, you can opt-out. In addition, if you direct us not to "sell" your Personal Information, we will consider it a request pursuant to California's "Shine the Light'' law to stop sharing your personal information covered by that law with third parties for their direct marketing purposes.
1391
1392- **Sharing:** We also "share" your Personal Information, as defined, with trusted business partners to deliver interest-based ads, content and services to you, including for site measurement. See section 16.1.2. Depending on what services you use, we may provide the following categories of personal information to third parties for these purposes:
1393
1394- For online targeted advertising purposes: demographic and statistical information, contact and registration information, device information and identifiers, browser and usage data, geolocation, and social media information.
1395
1396Reach does not knowingly share the personal information of children or teens under the age of 18 without the necessary permissions as required by the CCPA.
1397
1398**To opt out of the "sale" and "sharing" of your information.**
1399
1400- Whilst browsing our websites you have the right under CCPA to opt out of these purposes by selecting the **'Do Not Sell or Share My Personal Information'** link in the footer of the relevant website. You can also update your preferences via the **Privacy Settings link**. If you access this site and/or app from other devices or browsers, or clear your cookies on your devices or browsers, you will need to indicate your preferences again from those devices or browsers.
1401
1402 Alternatively to opt out of "sales" or "sharing" of personal information you can toggle your cookies off in the cookie preference centre or enable Global Privacy Control ("GPC") on your browser. To learn more about GPC, please visit [http://globalprivacycontrol.org](http://globalprivacycontrol.org/).
1403
1404- To opt out of the "sale" of other data, including email, you may also submit a request directly by submitting the [rights request form](https://docs.google.com/forms/d/e/1FAIpQLSe_S4UU9agFYuaYgp0IJr_OmXICpKF8oS8N2AaP-ybt29L-rw/viewform) or by emailing privacyofficer@reachplc.com quoting 'California Privacy Rights-(insert name of Reach Group brand)' in the subject header and state 'Opt out of Sale'. We reserve the right to ask for evidence of your residency in California before processing your request.
1405
1406Please note that a 'Do Not Sell or Share My Personal Information' request does not prevent the ongoing disclosure of data to our service providers. It also does not cover information that has previously been disclosed to third parties for these purposes who may re-sell or re-share your personal information for the purpose of delivering ads tailored to your interests. To opt out of re-sales by such downstream participants, visit their digital properties listed at [https://www.iabprivacy.com/optout.html](https://www.iabprivacy.com/optout.html).
1407
1408**16.1.6 Limit the use of your Sensitive Personal Information.**
1409
1410California residents have the right to limit the use or disclosure of their sensitive personal information ("SPI") if we are using your SPI beyond what is reasonable and proportionate to provide the requested goods or services. While we recognise opt-out preference signals (aka, Global Privacy Controls) when required to do so by law, given the specific methods by which Reach may collect your SPI in the limited circumstances it collects SPI, opt-out preference signals would be an ineffective and technologically impractical means for honouring limit the use requests. Therefore, please make your request to limit the use of your SPI using the [rights request form](https://docs.google.com/forms/d/e/1FAIpQLSe_S4UU9agFYuaYgp0IJr_OmXICpKF8oS8N2AaP-ybt29L-rw/viewform) or by emailing privacyofficer@reachplc.com quoting 'California Privacy Rights-(insert name of Reach Group brand)' in the subject header and state 'Limit the use of Sensitive Data'. We reserve the right to ask for evidence of your residency in California before processing your request.
1411
1412**16.1.7 Exercising your rights to Information Access and Deletion**
1413
1414California residents wishing to exercise their right to access their personal information or request that we delete it can do so using the [rights request form](https://docs.google.com/forms/d/e/1FAIpQLSe_S4UU9agFYuaYgp0IJr_OmXICpKF8oS8N2AaP-ybt29L-rw/viewform) or by emailing privacyofficer@reachplc.com quoting 'California Privacy Rights-(insert name of Reach Group brand)' in the subject header and state which right(s) you wish to exercise.
1415
1416We will take steps to verify your request by (i) sending you an email confirmation to which you must respond to confirm your request; and (ii) matching the information provided by you with the information we have in our records. You must complete all required fields on our webform (or otherwise provide us with such information to verify your request.
1417
1418We will process your request based upon the personal information in our records that is linked or reasonably linkable to the information provided in your request. In some cases, we may request additional information in order to verify your request or where necessary to process your request. If we are unable to adequately verify a request, we will notify the requestor.
1419
1420**16.1.8 Our Response Time to Your Request**
1421
1422We will make every effort to respond to your request within forty-five (45) days from when you contacted us. If you have a complex request, the CCPA allows us up to ninety (90) days to respond. We will still contact you within forty-five (45) days from when you contacted us to let you know we need more time to respond and the reason for the extension.
1423
1424**16.1.9 Authorised Agents**
1425
1426Authorised agents may initiate a request on behalf of another individual by providing evidence of authority from the individual; authorised agents will be required to provide proof of their authorisation and we may also require that the relevant consumer directly verify their identity and the authority of the authorised agent.
1427
1428**16.1.10 Shine The Light**
1429
1430California residents may request and obtain a list of any third parties that we have disclosed personal information to over the previous calendar year for the purposes of sending you direct marketing about the third party's own products and services. If you would like to request this information please contact us using the [rights request form](https://docs.google.com/forms/d/e/1FAIpQLSe_S4UU9agFYuaYgp0IJr_OmXICpKF8oS8N2AaP-ybt29L-rw/viewform) or by emailing privacyofficer@reachplc.com quoting 'California Privacy Rights-(insert name of Reach Group brand)' in the subject header and state which right(s) you wish to exercise.
1431
1432**[\*\*\* Click here to go back to 'Contents' \*\*\*]()**
1433
1434**16.2 Residents of US states with applicable privacy legislation**
1435
1436This section applies solely to individual residents of States with applicable privacy legislation including, but not limited to Virginia, Colorado, Connecticut, Utah, Oregon, Texas, Montana, Delaware, Iowa, Nebraska, New Jersey, New Hampshire, Tennessee, Minnesota, Maryland, Indiana, Kentucky and Rhode Island. It describes how we collect, use and share Personal Information of residents when operating our business, and their rights with respect to that Personal Information. This section should be read in conjunction with the rest of this Privacy Notice which provides further details on the nature of our data processing.
1437
1438**16.2.1 Personal Information We Collect**
1439
1440We may collect the following types of Personal Information about you as described below:
1441
1442**A. Personal Information You Provide to Us**
1443
1444In using our Products, you may provide us with Personal Information, which may include (the examples provided are illustrative and not intended to be exhaustive):
1445
1446- Contact information such as name, email address, postal address and telephone number(s);
1447- Account information and log in credentials, including unique identifiers such as username and password;
1448- Payment and transaction information including credit or bank card information;
1449- Preferences for communications;
1450- Communications and opinions in chat rooms, message boards, forums, surveys, polls, and online forms;
1451- Access to your geo-location (including through our mobile app) or to other data held on social media platforms and other software (for example, access to your contacts, calendar or photos);
1452- Photos and/or videos; and
1453- Any additional information that we describe to you, when we collect your data with your consent.
1454
1455You agree that you will provide to us only your own Personal Information, or the Personal Information of those whom you have the legal right to provide (such as in your capacity as a legal guardian). You agree to provide us with accurate Personal Information.
1456
1457**B. Personal Information We May Automatically Collect About You**
1458
1459Our Products may automatically collect certain Personal Information about you. This Personal Information may include the following (the examples provided are illustrative and not intended to be exhaustive). Any of this information may be combined with other Personal Information we may have or obtain about you from your use of our Products or from third parties as described below in "Personal Information We May Receive from Third Parties."
1460
1461- IP address, which is the number associated with the service through which you access the Internet, such as through your ISP (Internet service provider);
1462- Date and time of your visit, registration, login or use of our Products;
1463- Domain server from which you are using our Products;
1464- Type of computer, web browsers, search engine used, operating system, or platform you use;
1465- Data identifying the web pages you visited prior to and after visiting or using our Products;
1466- Data identifying the videos that you view while using our Products;
1467- Your location data
1468- Your behaviour, movement and activity on or within the Product;
1469- Your profile information
1470- Account login in combination with any required security questions or password collected if you create an account with us.
1471- Mobile application identification and behaviour, use, and aggregated usage, performance data, and where the application was downloaded from.
1472- If you sign up for text messaging, cookies or other tracking devices may be used to personalise your experience (for example, to send you personalised text message offers).
1473- Data identifying your interactions with community engagement features, such as commenting history, likes, or shares.
1474
1475**C. Personal Information We May Receive from Third Parties**
1476
1477We may collect or receive additional Personal Information about you from third-party websites and apps, social media platforms and video viewing platforms, such as, but not limited, to Facebook, Twitter, TikTok, Instagram, SnapChat and YouTube ("Social Media Platforms"), third party data providers, and sources providing publicly-available Personal information (e.g., from the U.S. postal service) for the purposes described in "How We Use Personal Information" section below.
1478
1479Personal Information we may access from Social Media Platforms may include, but is not limited to:
1480
1481- Your Social Media Platform login information
1482- Your location data
1483- Your profile information
1484- Your list of contacts, friends or followers
1485- Certain information about your activities on the Social Media Platform such as without limitation the content you view, and products or services you purchase there
1486
1487Please keep in mind that when you provide Personal Information to us via a third-party website or platform (for example, via our applications on a mobile device or by logging into any of our Products via a social media account), the Personal Information you provide to us may be separately collected by the third-party website or platform or the Social Media Platform. Please review the privacy policies of the applicable third-party or Social Media Platform for their privacy practices. Also, please be aware that if you are logged into your social media account when you are visiting our Products, the Social Media Platform you are logged into may track your activities on our Products.
1488
1489**16.2.2 How we Use Personal Information**
1490
1491**A. Use and Purpose of Processing Your Personal Information**
1492
1493We use and process your Personal Information for the following types of purposes (the examples provided are illustrative and not intended to be exhaustive).
1494
1495- To provide you with the Products, and other promotions, newsletters and information we think you may be interested in
1496- To respond to your inquiries and provide you with requested information and to provide other communications, including by email, chat or text messages, and including alerts, notification of promotions, contests, and events
1497- For marketing and advertising purposes, including sending you promotional material or special offers, provided that you have not already opted-out of receiving such communications
1498- For billing and payment processing
1499- To deliver personalised advertising and content, including textual and audio-visual ads and content
1500- To fulfil contracts we have with you
1501- To manage, improve and support our relationships with third-parties that we contract with in connection with our business, Products and services, including vendors, suppliers, and parents, affiliates, subsidiaries, and business partners
1502- To maintain, improve, customise, or administer the Products, perform business analysis, or other internal purposes to improve the quality of our business, Products and services, resolve technical problems, or improve security or develop other products and services
1503- To comply with our Terms of Service and Terms of Use for various Products
1504- To perform analytics for business purposes and business intelligence, such as monitoring traffic to our Products, counting ad impressions, and auditing legal and regulatory compliance
1505- To maintain the safety, security, and integrity of our Products, databases and other technology assets and our business, including preventing fraud, detecting security breaches and prosecuting violators
1506- To identify and repair errors in our Products' functionality
1507- To evaluate or conduct a merger, divestiture, restructuring, reorganisation, dissolution, or other sale or transfer of some or all of our assets, in which Personal Information we hold is among the assets transferred
1508- To comply with any applicable laws and regulations and respond to lawful requests; and/or
1509- For any other purposes disclosed to you at the time we collect your Personal Information and/or pursuant to your consent.
1510
1511**B. Disclosing Your Personal Information to Other Parties**
1512
1513We may disclose your Personal Information to other parties, including:
1514
1515- Our affiliates
1516- Service providers and contractors, including companies that handle the technical aspects of account operation, such as LoginRadius, which hosts identifiers and login credentials on our behalf.
1517- Advertisers, advertising technology companies, Social Media Platforms, analytics companies.
1518- Community engagement and identity management platforms, such as Viafoura, which provide analytics and diagnostic capabilities to facilitate community interactions and site performance.
1519- Other third parties with whom we have business relationships to provide you with relevant content and advertising.
1520- Government regulators
1521- Our legal advisors and parties involved in a legal process.
1522- To an entity involved in the sale of our business
1523- Third parties to whom you or your agents authorise us to disclose your Personal Information in connection with products or Services we provide to you.
1524
1525**Large Language and Artificial Intelligence Models:** Reach does not disclose or process private consumer account data, behavioral profiles, or subscriber information for the purpose of training large language models. However, we do license our published editorial content archives to technology partners, including Google, for model fine-tuning, evaluation, and capability improvement. This public text may contain personal data natively embedded within our news reporting (such as names or quotes).
1526
1527**Targeted Advertising**: In order to provide advertisements and content that are more relevant to you, we and our advertising and content providers may collect certain types of Personal Information when you use our Products (such as, by way of example, your email, the IP address of your device, the identifier on your mobile device, or cookies stored on your device). We may combine this information with other information we have, or that we collect through other sources, and may share the information we collect with third parties to provide interest based or targeted advertising and content, including textual and/or audio-visual ads or content. As part of this activity, and where you have provided your consent, we share specific identifiers, including hashed email data and mobile advertising identifiers, with identity resolution partners such as Roqad to build identity graphs that assist in identifying devices across platforms. In addition, our advertising partners and Social Media Platforms may use information received from us to combine it with other information they may have obtained about you through other sources or through your relationship with them.
1528
1529**"Sale" or "Share" of Your Personal Information:** Reach enters into commercial arrangements where specific personal information may be disclosed for monetary or other valuable consideration, which qualifies as a sale under applicable privacy legislation. The term sale has a broader meaning under privacy legislation than would ordinarily be understood in a non legal context. If we sell or share your Personal Information, you have the absolute right to opt out. You can exercise this right at any time by clicking the Do Not Sell or Share My Personal Information link located in the footer of our websites or within our application settings.
1530
1531We do share your Personal Information, as defined, with trusted business partners to deliver interest-based ads, content and services to you, including for site measurement, community engagement features and account management services. For example, when you use our site, we share information collected from you with our identity partner, [LoginRadius Inc](https://www.loginradius.com/)., to manage your account and secure your login credentials across our platforms and with **Viafoura** to facilitate our community features.
1532
1533Depending on what services you use, we may provide the following categories of personal information to third parties for online targeted advertising purposes: demographic and statistical information, contact and registration information, device information and identifiers, browser and usage data, geolocation, and social media information.
1534
1535For example, when you use our site, we share information that we collect from you, such as your email (in hashed, pseudonymous form), IP address, or information about your browser or operating system, with our identity partners, including LiveRamp Inc. This is used to recognise you across different devices and to serve you more relevant, interest-based advertising.This process links your activity on the site to LiveRamp's offline identity graph to create a privacy safe link for advertisers. Detailed information on LiveRamp's data processing activities is available in [LiveRamp's Privacy Notice](https://liveramp.uk/privacy/service-privacy-policy/) and opt-out [here](https://optout.liveramp.com/opt_out).You may also opt-out via the Global Privacy Control (GPC) signal on your browser.
1536
1537Furthermore, cross-context behavioral tracking and geolocation analytics are shared with our travel mapping partner, Stay22 Inc., to serve real time localised accommodation offerings tailored to your browsing context.
1538
1539If you would like to stop your email being used in this way, please email [privacyofficer@reachplc.com](mailto:privacyofficer@reachplc.com) stating 'opt out of hashed email'.
1540
1541If you would like to opt out from this use generally, or for more information, please see our Cookie Policy for more information. We do not sell your sensitive personal data.
1542
1543For information on the third party advertising and analytic partners we work with please click [here](https://www.reachplc.com/site-services/third-party-cookies). For information on the social media operators and their privacy policies please see our list of [Social Media Platforms](https://www.reachplc.com/site-services/social-media-cookies).
1544
1545**16.2.3 Residents Rights**
1546
1547Privacy laws in some US states give residents certain rights with respect to their personal data.
1548
1549These rights include:
1550
1551- **Access.** You can request a copy of the Personal Information we collected about you.
1552- **Right to correct.** You have the right to correct inaccuracies in the personal information we collect from you, taking into account the nature of the personal information and the purposes for which we process it.
1553- **Right to delete.** You have the right to delete personal information that you have provided or that we have obtained about you. Please note that we may deny such a request if the requested deletion falls under an exception to this right set as provided by the relevant law. Additionally, if you request the deletion of your personal information and we have obtained such information from a third-party source, we may retain such data by keeping a record of the deletion request and the minimum data necessary to ensure that your personal information remains deleted from our records and that such retained data is not used for any other purpose, or we may opt you out of the processing of such personal information for any purpose except for those allowed under the relevant legislation.
1554- **Right to data portability.** You have the right to access and obtain a copy of your personal information that you previously provided to us in a portable and, to the extent technically feasible, readily usable format that allows you to transmit the data to another business without hindrance, where the processing is carried out by automated means.
1555- **Right to Know.** You have the right to obtain a list of the third parties that have received your personal data from us.
1556- **Right to opt out of targeted ads, sales to third parties, or profiling**. You have the right to opt-out of the processing of your personal information for purposes of: (i) targeted advertising; (ii) the sale of personal information; or (iii) profiling in furtherance of decisions that produce legal or similarly significant effects concerning you or to review the personal data used in the processing to understand how these decisions were made. As described in this privacy notice:
1557
1558- We DO process personal information for the purposes of targeted advertising;
1559- We DO NOT sell your personal information in exchange for monetary consideration;
1560- We DO NOT engage in profiling decisions based on your personal information that produce legal or similarly significant effects concerning you.
1561
1562**16.2.4 Exercising these Rights**
1563
1564**How to exercise your right to information, access, and deletion**
1565
1566You may exercise your privacy rights by submitting the [rights request form](https://docs.google.com/forms/d/e/1FAIpQLSe_S4UU9agFYuaYgp0IJr_OmXICpKF8oS8N2AaP-ybt29L-rw/viewform) or by emailing privacyofficer@reachplc.com quoting 'US Privacy Rights (insert name of Reach Group brand)' in the subject header and detail which right(s) you wish to exercise, and the US state you live in.
1567
1568**How to exercise your right to opt-out of the "sale or sharing" of your Personal Information**
1569
1570- **For internet and mobile users.** If you do not wish for us or our online third-party partners (such as advertising networks) to sell or share your personal information with others, please click on the "Do Not Sell or Share My Personal Information" link in the footer of the relevant website. You can also update your preferences via the **Privacy Settings link**. If you access this site and/or app from other devices or browsers, or clear your cookies on your devices or browsers, you will need to indicate your preferences again from those devices or browsers.
1571
1572 Alternatively to opt out of "sales" or "sharing" of personal information you can toggle your cookies off in the cookie preference centre or, in applicable states, enable Global Privacy Control ("GPC") on your browser. To learn more about GPC, please visit [https://globalprivacycontrol.org/](https://globalprivacycontrol.org/).
1573
1574- **For other offline users eg account holders:** You may also submit a request directly by submitting the [rights request form](https://docs.google.com/forms/d/e/1FAIpQLSe_S4UU9agFYuaYgp0IJr_OmXICpKF8oS8N2AaP-ybt29L-rw/viewform) or by emailing [privacyofficer@reachplc.com](mailto:privacyofficer@reachplc.com) quoting 'US Privacy Rights-(insert name of Reach Group brand)' in the subject header and state 'opt-out of third-party sale or share'. Alternatively, if you specifically wish to prevent your email address from being converted into a hashed format for sharing with identity resolution or advertising partners, you can email [privacyofficer@reachplc.com](mailto:privacyofficer@reachplc.com) stating 'opt out of hashed email'.
1575
1576**16.2.5 Our Response Time to Your Request**
1577
1578We will make every effort to respond to your request within forty-five (45) days from when you contacted us. If you have a complex request, the legislation allows us up to ninety (90) days to respond. We will still contact you within forty-five (45) days from when you contacted us to let you know we need more time to respond and the reason for the extension. For particular states where the time frame for response may be shorter, we will adhere to the required legal timeframe.
1579
1580**16.2.6 Right to Appeal**
1581
1582Residents of certain states, including Virginia, Colorado, Connecticut, Oregon, Texas, Delaware, Iowa, Nebraska, New Hampshire, New Jersey, Tennessee, Minnesota, Maryland, Indiana, Kentucky and Rhode Island may appeal a refusal to take action on a request by contacting us by emailing [privacyofficer@reachplc.com](mailto:privacyofficer@reachplc.com).
1583
1584**[\*\*\* Click here to go back to 'Contents' \*\*\*]()**
1585
1586**16.3 Residents of other states and countries with applicable legislation**
1587
1588Residents may be covered by other local state or country data protection or privacy legislation. To exercise these rights, for example a deletion request, please use the [rights request form](https://docs.google.com/forms/d/e/1FAIpQLSe_S4UU9agFYuaYgp0IJr_OmXICpKF8oS8N2AaP-ybt29L-rw/viewform), to submit a request in relation to your data rights.
1589
1590**16.3.1 Nevada Privacy Rights**
1591
1592Reach does not currently sell your personal data, as defined by Nevada Law, for monetary compensation to third parties for their own purposes. Nevada residents, however, may request that we include their name on a do-not-sell list in the event Reach were to do so in the future. Please email us at privacyofficer@reachplc.com if you want to place your name on the do not sell list.
1593
1594**16.3.2 Canadian Residents**
1595
1596Federal and provincial laws in Canada, such as the Personal Information Protection and Electronic Documents Act 2000 (PIPEDA) and Quebec's Bill 64 (Law 25) give residents certain rights with respect to their personal data.
1597
1598**Your Rights and Choices.**
1599
1600If you are a Canadian resident you may be able to exercise certain rights with respect to your personal information that we collect and control:
1601
1602- **Access.** Ask us for a copy of your Personal Information and can ask for a copy of Personal Information you provided in machine readable form.
1603- **Correction.** Ask us to correct the personal information we have about you if you believe it is inaccurate or incomplete
1604- **Deletion.** Ask us to erase or delete all or some of your Personal Information (e.g., if it is no longer necessary to provide products or services to you).
1605- **Object to, or Limit or Restrict, Use of Personal Information:** Ask us to stop using all or some of your Personal Information (e.g., if we have no legal right to keep using it) or to limit our use of it (e.g., if your Personal Information is inaccurate or unlawfully held).
1606- **Data Portability**: You may also have the right to access and obtain a copy of your personal information that you previously provided to us in a portable and, to the extent technically feasible, readily usable format that allows you to transmit the data to another business without hindrance, where the processing is carried out by automated means.
1607
1608We may need to verify your identity before processing your request, which may require us to request additional personal information from you. In certain circumstances, we may decline or limit your request, particularly where we are unable to verify your identity or locate your information in our systems, or as permitted by law.
1609
1610We will attempt to respond to your request within thirty (30) days. We will advise you in writing if we cannot meet your request within this time limit.
1611
1612To exercise these rights please use the our [rights request form](https://docs.google.com/forms/d/e/1FAIpQLSe_S4UU9agFYuaYgp0IJr_OmXICpKF8oS8N2AaP-ybt29L-rw/viewform) or contact us by emailing [privacyofficer@reachplc.com](mailto:privacyofficer@reachplc.com).
1613
1614**16.3.3 Spanish Speaking Consumers of [The Mirror US ES](https://www.themirror.com/es/)**
1615
1616If you are a Spanish speaking consumer of https://www.themirror.com/es/ please email the Data Protection Officer at [privacidad@reachplc.com](mailto:privacidad@reachplc.com) stating the country in which you live and which data protection right you would like to exercise. Alternatively fill in the US [rights request form](https://docs.google.com/forms/d/e/1FAIpQLSe_S4UU9agFYuaYgp0IJr_OmXICpKF8oS8N2AaP-ybt29L-rw/viewform) or go to [UK and EU residents: your rights and how to exercise them]().
1617
1618**16.3.4 Rights under the LGPD**
1619
1620In certain circumstances, for example if you are a Brazil resident, you may exercise the rights available to you (with some exceptions and restrictions) under the Brazil general data protection law ("**LGPD**"). These rights may include the rights of information, access, portability, deletion, correction, revoke consent for direct marketing and opt-out of online behavioural advertising.
1621
1622To exercise these rights please use the our [rights request form](https://docs.google.com/forms/d/e/1FAIpQLSe_S4UU9agFYuaYgp0IJr_OmXICpKF8oS8N2AaP-ybt29L-rw/viewform) or contact us by emailing [privacyofficer@reachplc.com](mailto:privacyofficer@reachplc.com).
1623
1624**16.4 Other Notices**
1625
1626**Video Services Notice**
1627
1628Your video content viewing and associated media consumption activities (collectively "Viewing Activities") may be collected and shared by Reach when you use the Services. By watching video content on or through the Services, you are consenting to share your personal information, together with your Viewing Activities, with third parties, including, without limitation, service providers with whom we partner to provide our Products to you, as well as our advertising, social media and other business partners.
1629
1630Such sharing allows you to take advantage of the full features of the Services, which may include serving you ads on the Services that are of interest to you. Your consent to sharing is valid for two years from the date of such use or until you withdraw your consent by clicking on the "Do Not Sell or Share My Personal Information" link in the footer of the relevant website or by the [rights request form](https://docs.google.com/forms/d/e/1FAIpQLSe_S4UU9agFYuaYgp0IJr_OmXICpKF8oS8N2AaP-ybt29L-rw/viewform).
1631
1632**[\*\*\* Click here to go back to 'Contents' \*\*\*]()**