BBCPOV ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services.
1. Information We Collect
Information you provide directly
- Account data: username, email address, display name, optional avatar URL, and your password — stored only as a bcrypt hash, never in readable form.
- Payment data: billing is handled by our payment processor. We store only the identifiers needed to manage your subscription (customer and subscription IDs) — we never receive or store your card number.
- Applications: if you apply to become a model, the name, contact details, links, photos, and age confirmation you submit.
- Comments and ratings: the text and rating you submit, shown publicly with your display name after review.
- Newsletter: your email address, only if you subscribe and then confirm via the double opt-in email.
- Communications: any messages you send us.
Information collected automatically
- Analytics: we run first-party analytics with no third-party tracker. For each page view we store a salted, irreversible hash of your IP address and browser string — not the IP itself — plus the page, referrer, campaign tags, country (country only, from our CDN), and device/browser/OS category. Site searches are recorded the same way. Detailed rows are deleted after 90 days and kept only as daily totals thereafter.
- Security logs: for account security and abuse prevention we do record real IP addresses against a small number of events: your sign-up and most recent login, active sessions, comment submissions, application submissions, and newsletter sign-ups.
- Member activity: if you are signed in, the galleries you view and the items you favourite, so we can show your history and saved items.
- Session data: server-side sessions keep you signed in and expire automatically.
Bot traffic and administrator activity are excluded from analytics.
2. How We Use Your Information
- Provide, operate, and maintain the Site and its services.
- Process transactions and manage your subscription.
- Authenticate your identity and maintain account security.
- Enforce our Terms of Service and prevent abuse.
- Send transactional emails (account confirmation, password resets, receipts).
- Send newsletters, only where you have opted in.
- Respond to your support requests.
- Understand aggregate usage patterns to improve the Site.
- Comply with legal obligations.
We do not use your data for automated decision-making or profiling that produces legal effects.
3. Sharing Your Information
We do not sell your personal data. We share it only with:
- Our payment processor — to take payment and manage subscriptions. Their use of your data is governed by their own privacy policy.
- Email delivery — to send transactional and opted-in newsletter email. These providers may not use your data for their own marketing.
- Content delivery / storage — images and video may be served from a CDN or object-storage provider.
- Law enforcement — when required by law, court order, or legal process, or to protect our rights and the safety of our users.
- Business transfers — in a merger, acquisition, or sale of assets, user data may transfer as part of that transaction.
4. Data Retention
We retain account data while your account is active and for a reasonable period afterwards, or as required by law. Payment records are retained as financial regulation requires. Detailed analytics rows are deleted after 90 days, leaving only aggregate daily counts. You may request deletion of your account at any time (see Section 7).
5. Cookies
We use cookies and similar local storage only for:
- Session cookies — to keep you signed in.
- Security cookies — to protect against cross-site request forgery (CSRF).
- Preferences — such as your chosen display language.
- Age confirmation — a cookie that remembers you confirmed you are 18 or older (it holds only the time you answered, no personal information) so you are not asked on every visit.
We do not use advertising cookies, tracking pixels, or cross-site trackers. You can disable cookies in your browser, but some features will not work.
6. Security
We use bcrypt password hashing, HTTPS for data in transit, CSRF protection on state-changing requests, server-side session management with a concurrent-session limit, and pre-publication review of user-submitted content. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
7. Your Rights & Choices
- Access: request a copy of the personal data we hold about you.
- Correction: update your display name and avatar in account settings, or contact us for anything else.
- Deletion: request deletion of your account and associated personal data. Some records may be retained for legal compliance.
- Portability: request your data in a structured, machine-readable format.
- Opt-out: unsubscribe from newsletters at any time using the link in any newsletter we send — no sign-in required.
Because analytics identifiers are irreversible hashes, we cannot link analytics records back to you individually, and so cannot extract or delete them on request.
For EU/EEA and UK residents, additional rights are detailed on our GDPR page.
To exercise any of these rights, contact [email protected].
8. Children's Privacy
This Site is intended for adults. We do not knowingly collect personal information from anyone under 18. If we discover we have, we will delete it. If you believe a minor has provided us with personal information, contact us immediately.
9. Third-Party Links
The Site may link to third-party websites, including models' own profiles. We are not responsible for their privacy practices and encourage you to review their policies.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will note significant changes on the Site or by email. Continued use after changes take effect constitutes acceptance of the revised policy.
11. Contact Us
For privacy questions or to exercise your rights: [email protected]