Last updated: November 13, 2026
This page explains how BBCPOV ("we", "us", "our") processes personal data in accordance with the EU General Data Protection Regulation (GDPR) and the UK GDPR. It applies to residents of the European Economic Area (EEA), the United Kingdom, and other regions with equivalent data protection laws.
For a complete description of how we collect and use data, please also read our Privacy Policy.
BBCPOV is the data controller for personal data processed through this website. You can contact us regarding data protection matters at:
Email: [email protected]
| Purpose | Legal Basis |
|---|---|
| Account creation & management | Performance of a contract (Art. 6(1)(b)) |
| Processing payments & subscriptions | Performance of a contract (Art. 6(1)(b)) |
| Sending transactional emails | Performance of a contract (Art. 6(1)(b)) |
| Fraud prevention & security logging | Legitimate interests (Art. 6(1)(f)) |
| Pre-publication review of user submissions | Legitimate interests (Art. 6(1)(f)) |
| Compliance with legal obligations | Legal obligation (Art. 6(1)(c)) |
| Usage analytics (pseudonymised) | Legitimate interests (Art. 6(1)(f)) |
| Newsletter & marketing email | Consent (Art. 6(1)(a)) |
As a data subject in the EEA or UK, you have the following rights:
You have the right to obtain a copy of your personal data that we hold, along with information about how we process it.
You have the right to correct inaccurate personal data we hold about you, or to complete incomplete data.
You have the right to request deletion of your personal data where it is no longer necessary, where you withdraw consent, or where processing is unlawful.
You have the right to request that we restrict processing of your data in certain circumstances.
You have the right to receive your personal data in a structured, commonly used, machine-readable format.
You have the right to object to processing based on legitimate interests, including profiling.
You have the right not to be subject to decisions based solely on automated processing. We do not use automated decision-making of this nature.
Where we process your data based on consent — such as the newsletter — you may withdraw that consent at any time, without signing in, using the unsubscribe link in any newsletter.
Our analytics and site-search records identify visitors only by a salted, irreversible hash. We have no way to reverse that hash to you, and therefore cannot retrieve, export, or delete those records in response to an individual request. Under Art. 11 GDPR we are not required to acquire additional data solely to enable identification.
To exercise any of your rights, submit a written request to:
Email: [email protected]
We will respond within 30 days. We may need to verify your identity before processing the request.
Some of our service providers are located outside the EEA. Where we transfer personal data outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs). This may include our payment processor, email delivery provider, and content-delivery/storage provider.
| Data Type | Retention Period |
|---|---|
| Account & profile data | Duration of account + 90 days after deletion request |
| Payment & transaction records | As required by financial regulation (typically 7 years) |
| Detailed analytics & search records | 90 days, then reduced to daily totals only |
| Security logs (sign-up / login IP, sessions) | Duration of account; sessions expire automatically |
| Comments & ratings | Until removed by you or by a moderator |
| Model application data | Retained while under review; longer if approved |
| Newsletter subscription | Until you unsubscribe |
We use only functional/session cookies necessary to operate the Site, plus a stored display-language preference. We do not use advertising cookies, tracking pixels, or cross-site trackers. For full details see our Privacy Policy.
If you believe we have not handled your personal data in accordance with the GDPR, you have the right to lodge a complaint with your local data protection supervisory authority.
BBCPOV Data Privacy
[email protected]
We aim to acknowledge all requests within 72 hours and fulfil them within 30 days.