Reach Group - Privacy Notice

ARCHIVED 2025-11-01, DATE APPROXIMATE · VERSION 20251101_rev01 · COMPARED WITH 20250701_rev01

Full text changes — 20250701_rev01 to 20251101_rev01

COLOUR MARKS THE SEVERITY OF A FLAGGED CLAUSE · + AND − MARK ADDED AND REMOVED

 ## Reach Group - Privacy Notice
 We have organised this Privacy Notice based on the different ways you might interact with us and what you might want to know.
 Please use the contents list below to navigate to the section of the Privacy Notice which you are interested in. At the end of each section if you want to return to the contents list please click the link: 'Click here to go back to 'Contents''
+Last update: 26 June 2025
+Last update: 16 October 2025
 ## CONTENTS
 . **[Who we are and how to contact us]()**
 . **[About this Privacy Notice]()**
 . **[When you browse our websites and use our apps]()**
 We are the Reach group, which is made up of Reach plc and its subsidiaries. Reach plc is the largest national and regional news publisher in the UK with a portfolio in Ireland and the United States. We aim to create engaging, relevant content which is distributed through various channels and media including newspapers, magazines, and digital platforms - playing a central role in our audiences' daily lives.
 We are the name behind some of the UK's most influential, iconic, and trusted news brands, such as the Daily Mirror, Daily Express, Daily Star and Daily Record, as well as leading celebrity and entertainment magazine OK! and the online shopping site Yimbly.com. We also publish leading regional titles including the Manchester Evening News, Liverpool Echo, and Birmingham Mail, plus the Mirror US and Express US. You can see the list of websites and brands we publish [**here**](https://www.reachplc.com/about-us/our-brands).
 Depending on who you are and how you interact with us, the legal "controller" of your personal data will be one or more of our group companies, like MGN Limited, Reach Regionals Media Limited, Express Newspapers, Reach Publishing Group Services Limited or Reach Shared Services Ltd (all at the address above).
+We have appointed a Data Protection and Privacy Officer (DPO) to oversee our data protection and privacy practices. If you have any comments, concerns or questions, including any requests to exercise your legal rights, our DPO can be reached as follows:
+We have appointed a Data Protection and Privacy Officer (DPO) to oversee our data protection and privacy practices. If you have any comments, concerns or questions, including any requests to exercise your legal rights, under the UK GDPR or the EU GDPR, the US State Privacy Laws or other laws we encourage you to contact our DPO as follows:
+If you are from the UK/EU:
 - By email: [dataprotection@reachplc.com](mailto:dataprotection@reachplc.com)
 - By mail: Data Protection Enquiries, Reach Plc, One Canada Square, Canary Wharf, London E14 5AP
+If you are from the US:
+Your point of contact for anything to do with how the Reach group uses your personal data is the office of our group Data Protection Officer, who you can contact by submitting the relevant form accessible within the 'Your rights and how to exercise them' section by emailing [dataprotection@reachplc.com](mailto:dataprotection@reachplc.com) or by writing to 'The Data Protection Team' at the address above. If you are a Spanish speaker see section 16.3.3 on how to exercise your rights.
+- By email: [privacyofficer@reachplc.com](https://www.mirror.co.uk/privacy-notice/%E2%80%9Dmailto:privacyofficer@reachplc.com%22)
+Alternatively, if you are from the US you may also contact us at:
+- By email: [privacyofficer@reachplc.com](mailto:privacyofficer@reachplc.com)
 - By mail: Privacy Officer, Reach Plc, 19th Floor, 200 Liberty Street, New York, NY 10281
+Your point of contact for anything to do with how the Reach group uses your personal data is the office of our group Data Protection Officer, who you can contact by submitting the relevant form accessible within the 'Your rights and how to exercise them' section by emailing [dataprotection@reachplc.com](mailto:dataprotection@reachplc.com) or by writing to 'The Data Protection Team' at the address above. If you are a Spanish speaker see section 16.3.3 on how to exercise your rights.
 **[\*\*\* Click here to go back to 'Contents' \*\*\*]()**
 ## 2\. About this Privacy Notice
 This Privacy Notice tells you about the kinds of information we hold about you, what we do with it, and why.
 [3.3 Making our sites and apps work properly and understanding how they are used]()
 [3.4 Website Notifications (Pop ups)]()
 **3.1 Targeting by Reach**
+We combine the information you give to us (for example, sign up information for newsletters and competitions) with the information we receive when you use our websites and apps, and analyse it in order to help us to understand your preferences and interests. We then associate this with a unique identification number. This is then used to tailor the content and advertising that you see on our websites and in our apps, so it is more likely to be of interest to you. We don't share this personalised analysis with anyone outside Reach. In particular, it is not shared with advertisers or with the third-party advertising networks that we work with other than in highly aggregated form so that your personal data cannot be identified.
+We combine the information you give to us (for example, sign up information for newsletters and competitions) with the information we receive when you use our websites and apps, and analyse it in order to help us to understand your preferences and interests. We then associate this with a unique identification number. This is then used to tailor the content and advertising that you see on our websites and in our apps, so it is more likely to be of interest to you. We don't share this personalised analysis with advertisers or with the third-party advertising networks that we work with other than in highly aggregated form so that your personal data cannot be identified.
 **3.1.1 The data we collect and what we do with it**
 The data we use for this purpose is as follows:
 - The page you view, and associated information such as how long you spend on them.
 - The newsletters and marketing you have subscribed to, the promotions and competitions you have entered and the surveys you have completed.
 We will analyse this information to infer interests, preferences, and demographic characteristics, and associate it with an internal identification number. For example, if our website analytics tell us that you are located in the approximate area of Newcastle-upon-Tyne and you read our online title ChronicleLive (which is focused on local news for that area), and you sign up to receive an email newsletter about football from our national title The Mirror, then we could infer from that you are interested in things related to a local football club or to football generally.
 We then divide up our identification numbers into groups based on the inferences we draw about them. Those groups are called "audience segments" or "audiences". So, for example, an identifier associated with Newcastle, ChronicleLive and the football newsletter could be allocated to audiences likely to be interested in football, and events near Newcastle-upon-Tyne.
+We then use those "audiences" to do two things: first, to help us to recommend content which is more likely to be interesting (for instance, more articles about football), and second to help us to target advertisements when advertisers buy advertising space from us directly.
+We then use those "audiences" to help us to recommend content which is more likely to be interesting (for instance, more articles about football), to tailor marketing communications and to help us to target advertisements when advertisers buy advertising space from us directly.
 The advertiser would never see the actual data that we use - it remains with Reach at all times. All we would share with them would be the criteria we used to target their advert, how many times their advert was shown and how many people clicked on it (but not who), so that they know how well the advert did and we know how much to charge them.
+We work with partners such as Freestar and Google (Ad Manager) for the purposes of placing advertising on our sites, who will collect and use specific data for advertising purposes. To learn more about Freestar's and Google's data usage, click here: [Freestar](https://freestar.com/privacy-policy/) and [Google (Ad Manager)](https://policies.google.com/privacy)
+**Partners we work with**
+We work with partners such as Freestar and Google (Ad Manager) for the purposes of placing advertising on our sites, who will also collect and use specific data for advertising purposes. See [3.2 Targeting by third party advertising networks]().
+We also work with a subscription partner, Piano, to help us understand user journeys (e.g. pages our users are visiting the most and which pages lead to the greatest audience conversion), understand how long users spend on our website/app, and to test effectiveness of our marketing campaigns. This audience data is then used to provide a tailored experience on our website/app. To learn more about Piano's data usage, click here: [Piano.](https://piano.io/privacy-policy/)
+Please note you have the right to object to profiling for marketing purposes at any time. If you wish to opt-out of having your personal information profiled for personalisation purposes, you can do so via the Privacy setting link on the webpage.
 **3.1.2 Our legal basis**
 Your activity on our websites and in our apps can be managed by you using our "cookie banner" and related Consent Management Platform (CMP). The vast majority are used on the basis of your consent where you provide it. Some may use our Legitimate Interest and some are Essential - Please see our [Cookie Notice](https://www.mirror.co.uk/cookie-policy/) for further information or the 'cog' icon or link at the bottom of every webpage to manage your consents. When using our apps, if you want to change the settings, go to the 'My Account' Link at the bottom of the screen which includes 'My Privacy' and takes you to the CMP.
 We combine that information with the other things we know about you (like your newsletter subscriptions) on the basis of our legitimate interest in understanding our readership, both to serve you better and to make us more attractive to advertisers. This helps us to secure a future for news reporting and journalism in the age of social media, especially local news reporting and journalism.
 **3.1.5 Whether we send it outside the country of collection**
 Upland Software and Lotame are global businesses and so the data they host for us may be held outside of the country of collection. We have implemented the required safeguards as necessary (for example, standard agreements and frameworks approved by the relevant authorities).
 **3.2 Targeting by third party advertising networks**
+Digital advertising helps us to fund the news articles and content published on our sites and enables us to provide some of our content for free. We and our third-party ad partners may display digital advertising on our sites that is tailored to your interests and preferences so the online adverts you see are more relevant to you. We work with third party ad networks to fill unsold advertising space on our sites and in our apps by auctioning it automatically through a process called "real time bidding". These ad networks bid to show their ad to you when you visit our sites or use our apps.
+Digital advertising helps us to fund the news articles and content published on our sites and enables us to provide some of our content for free. We and our third-party ad partners may display digital advertising on our sites that is tailored to your interests and preferences, which are inferred from your browsing history, so the online adverts you see are more relevant to you. We work with third party ad networks to fill unsold advertising space on our sites and in our apps by auctioning it automatically through a process called "real time bidding". These ad networks bid to show their ad to you when you visit our sites or use our apps.
 The ad networks exchange information through cookies, which allow them to recognise you when you visit any site that they work with (not just Reach sites). Where we use cookies on our sites for advertising purposes, we collect the appropriate consent, depending on the country you are visiting us from. The cookie information will be used along with other information we hold about you to display digital advertising that is more relevant to you. It is important to note, however, that where you do not provide your consent for digital advertising you will still see digital advertising on our sites, but this will not be tailored to your interests and preferences.
 Where you provide consent to using your data to create a profile for digital advertising we may also sell or share limited data types to our partners with whom we have a legally binding relationship for similar purposes; typically data on the page content which you have shown an interest in and online identifiers, not direct identifiers such as your email address. Captify is one such partner. They may act as an independent controller of your data, and their privacy policy is shown here: [Captify Privacy Policy](https://www.captifytechnologies.com/privacy-notice/)
+We work with partners such as Freestar and Google (Ad Manager) for the purposes of delivering relevant advertising on our sites. They will collect and use specific data for advertising purposes, for example to create interest-based advertising segments or audiences, to allow us to tailor the ads we display. To learn more about Freestar's and Google's data usage, click here: [Freestar](https://freestar.com/privacy-policy/) and [Google (Ad Manager)](https://policies.google.com/privacy).
 **3.2.1 The data collected and how it is used**
 On your first visit to one of our sites or apps (and on other occasions to allow you to change your mind), you will be presented with a "cookie banner". This asks you if you consent to the use of cookies and related technologies for the purposes of, amongst other things, selecting and delivering ads. If you do, then the ad networks will be able to recognise your device according to a unique identification number.
 We then send out a "bid request" to the advertising networks we work with. What that bid request says is, essentially, "ID number ABC123 has landed on our website, do you want to show this user an advert?" The winner then gets to display their ad.
 The technology providers we use are global businesses. The data is located in Ireland with some being routed through AWS outside of the UK and EEA. We have implemented the required safeguards as necessary (for example, standard agreements and frameworks approved by the relevant authorities).
 **3.4 Website Notifications (Pop ups)**
 We provide news and updates about our sites via push notification messages or 'pop-ups'. This is a free service. Our legal basis is consent, as the notifications are only sent to you if you have clicked on a button to allow it (you may have accidentally selected to receive notifications).
+When you consent to receiving pop-up browser notifications from one of our websites, we collect the following information:
+- the URL of the page you were on when you were subscribed;
+- your country code;
+- your device type;
+- your browser name and version;
+- whether the notification was shown to you; and
+- the topics of the notification you have clicked on or interacted with.
 We have no control over your subscription to notifications as it is controlled by your browser and device. We do not store any recognisable data about you or your device in connection with the push notification service.
 If you wish to unsubscribe from receiving notifications please follow the instructions here: [Airship](https://support.airship.com/hc/en-us/articles/4446152158619-How-to-opt-out-from-the-web-notification) and [One Signal](https://documentation.onesignal.com/v9.0/docs/unsubscribe-from-notifications).
 If you need additional assistance in relation to push notifications, please contact the team at [dataprotection@reachplc.com](mailto:dataprotection@reachplc.com) - with the Subject heading: Push Notifications
 We use your email address and the other information that you give to us as part of the account creation process to operate your account and provide those functions. When you are signed in with your Reach account, we will also have the ability to associate your account details with the information we gather through our analytics tools about how you use our sites.
 **4.1.1 The data we collect and what we do with it**
 When you create an account we may collect your name and email address.
+For services that provide local information (like InYourArea) we will also collect your postcode and any associated areas of local interest that you want to be updated about. If you subscribe to a paid version of our sites such as **Premium** or **Privacy Plus** we will collect your payment details, in order for us to fulfil your subscription. For more information on subscriptions see [9\. When you subscribe to our print or "Digital Edition" titles.]()
+For services that provide local information (like InYourArea) we will also collect your postcode and any associated areas of local interest that you want to be updated about. If you subscribe to a paid version of our sites such as **Premium** subscription offering or **Privacy Plus** we will collect your payment details, in order for us to fulfil your subscription. For more information on subscriptions see [9\. When you subscribe to our print or "Digital Edition" titles.]()
+Some of our sites allow you to log-in to your account quickly by using your existing social media accounts, such as Facebook, X (f/k/a Twitter), Apple or Google. When you choose this option, you are granting permission to such company to share your user information with us. This will include your name and email address plus any other information you have permitted them to share with third parties, and your account will be linked to your social media account. You can ask us to delete your personal data or de-link your account from your social media account by emailing [dataprotection@reachplc.com](mailto:dataprotection@reachplc.com).
 Some services may let you upload your own content to our sites, such as comments or pictures. Those things will, by the nature of the service, be generally visible on the site and may be attributed to user names. Your comments may be used in print, online or on the social pages for brands owned and published by Reach plc. We may also record what types of content you have commented on, and associate this with our profile of you. Please do not provide any personal data which you do not want to be published. Comments will be subject to moderation checks before publication.
 We use this information to operate your account and to enable you to log in and use our services; for example, on InYourArea we use your postcode to identify the correct local information to display to you.
 You may also be invited during the account creation process to subscribe to one or more of our newsletters, or to opt in to receive certain special marketing offers and promotions. You can read more about that by navigating to the appropriate section of this Privacy Notice via the 'Contents' list. [Click here to go back to 'Contents']().
 When you subscribe to our digital edition titles your subscription is also processed via our provider and this information is retained for as long as you maintain your subscription, and for a period thereafter, in case of disputes or problems.
 As part of the subscription process you may be asked if you want to receive other products or services from Reach. Where this is the case you will be asked to consent to each product or service type. Such activities are managed in accordance with the relevant sections elsewhere in this Privacy Notice.
 **Privacy Plus Subscription**
+On some of our websites we offer you a **Privacy Plus** subscription service. This **Privacy Plus** subscription provides a browsing experience, free of personalised advertising. For a monthly fee it enables you to access the same content without sharing your personal data for advertising purposes.
+On some of our websites we offer you a **Privacy Plus** subscription service. This **Privacy Plus** subscription provides a browsing experience, free of personalised advertising. For a monthly fee it enables you to access the same content without sharing your personal data for advertising purposes. We use our payment provider, [Stripe](https://stripe.com/gb/privacy), to process your payments on our behalf.
+For more information see our [T&Cs](https://www.mirror.co.uk/terms-conditions/)
+**Premium Subscription Offerings**
+In order to be able to offer you this service on our website, we will collect online identifiers such as device type, IP address, language settings, approximate location at the time of browsing, and your logged in user id. This will be used to enable us to verify you as a Privacy Plus subscriber, to technically run the service and for security and anti-fraud purposes.
+A number of our websites also offer a **Premium** subscription which allows readers to support local journalism with limited adverts and exclusive subscriber-only content.
+When you sign up for one of the **Premium** subscriptions we may send your details to our third party provider Piano. They will use your details to process your payment and deliver the content you have subscribed to. Please see a link to their privacy notice for more information on how they process personal data. [https://piano.io/gb/privacy-policy/](https://piano.io/gb/privacy-policy/)
+For more information on both of these subscriptions, and how they work together, see our [T&Cs](https://www.mirror.co.uk/terms-conditions/)
+In order to be able to offer you this service on our website, we will collect online identifiers such as device type, IP address, language settings, approximate location at the time of browsing, and your logged in user id. This will be used to enable us to verify you as a paid subscriber, to technically run the service, and for security and anti-fraud purposes.
 **9.2 When you place a classified ad**
 When you place a classified ad in one of our print titles, we will collect your name and contact details, your payment information, and of course the content of your ad. We will use that information to publish and administer your ad, and to communicate with you about it. The content of your ad will be published and therefore accessible to the public. We do this on the basis that it is necessary to fulfil the contract agreed with you when you place your ad.
 We will retain the contact details of private individuals for up to 6 years from the point of last interaction, and trade contact details for as long as we have a business purpose. We do not store personally identifiable payment card information.
 - [12.2 Links to other websites and third-party affiliates]()
 - [12.3 Behavioural remarketing services]()
 - [12.4 Social media platforms]()
 - [12.5 WhatsApp Instant messaging platform]()
 - [12.6 Chatbots and other onsite data collection]()
 - [12.7 Discount codes, vouchers and cashback accounts]()
+- [12.8 Affiliate Sites, such as Mirror Bingo]()
+- [12.8 Affiliate Sites, such as Mirror Bingo and Mirror Switch & Save]()
 - [12.9 How we work with Group Companies]()
 - [12.10 Transfer as part of the sale of our business]()
 - [12.11 Award or charitable donation; nomination, voting and judging]()
 **12.1 Further data sharing by Reach**
+We may pass your information to our processors - companies that we use to provide services on our behalf, for example for home delivery services, event management, prize fulfilment agencies, market research or other purposes mentioned in this Privacy Notice such as analytics, direct marketing or online advertising. These processors can only use your information in accordance with our instructions and for no other purpose
+We may pass your information to our processors - companies that we use to provide services on our behalf, for example for home delivery services, event management, prize fulfilment agencies, sending gifts and coupons, market research or other purposes mentioned in this Privacy Notice such as analytics, direct marketing or online advertising. These processors can only use your information in accordance with our instructions and for no other purpose.
+In addition, further to the data sharing described elsewhere in this Privacy Notice, Reach will disclose your information and co-operate with appropriate bodies and authorities in good faith where we are required to by law, a court order, a regulatory authority, or otherwise, including with the police, trading standards, regulatory authorities, other relevant authorities, or credit reference agencies.
+In addition, further to the data sharing described elsewhere in this Privacy Notice, Reach will disclose your information and co-operate with appropriate bodies and authorities in good faith where we are required to by law, a court order, a regulatory authority, or otherwise, including with the police, trading standards, regulatory authorities, including the Information Commissioner's Office, other relevant authorities, or credit reference agencies.
 Where permitted by applicable laws, where you interact with us, we may monitor, record, and retain all associated data, correspondence, and communications, such as written letters, telephone call recordings, emails, text messages, social media messages, in person meetings and any other communications. We will do this to, (i) comply with our legal and regulatory obligations (ii), prevent, or detect crime (iii), maintain appropriate evidential records (iv), protect the security of our communications systems and (v) for training and quality purposes. Where necessary, we will also use your personal information to defend ourselves from any legal claims brought by you in connection with the provision of our products and services.
 We will also use personal information to manage and administer our business generally.
 We will share information with security consultants and IT security system providers, where necessary, to monitor and manage data security and the security of our sites and networks, and to develop security threat intelligence data.
 We may also share information to facilitate the sale of one or more parts of our business, including if we are approached by a potential buyer or the restructuring of one or more parts of our business and with auditing organisations such as the Audit Bureau of Circulation.
 When we share information with third parties, we only permit them to process this data for specified purposes. We do not share more information with them than is necessary for the relevant purpose and we require them to treat this information with at least the same protection we do.
 **12.2 Links to other websites and third-party affiliates**
+Our websites may include links to third-party websites, plug-ins, and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and, when you leave our website, we encourage you to read the Privacy Notice of every website you visit. Please note that some of our third party/affiliate websites may have Reach branding, although they may not be operated by Reach.
+Our websites may include links to third-party websites, plug-ins, and applications. We work with companies like Skimlinks and AWin who have relationships with retailers and other publishers, to enable you to click a link on our site and go directly to their site. We do not drop cookies through our affiliate links. Instead we use a type of link that redirects users into the affiliates network. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and, when you leave our website, we encourage you to read the Privacy Notice of every website you visit. Please note that some of our third party/affiliate websites may have Reach branding, although they may not be operated by Reach. For more information on how Skimlinks and AWin use your data see here: [Skimlinks](https://www.skimlinks.com/privacy-policy/) and [Awin](https://www.awin.com/gb/privacy).
 We may monetise some of these links through the use of third-party affiliate programmes. These affiliate links help pay the costs of producing our websites and ensure that the content is free to you. However, it doesn't mean that we are in any way indebted to Amazon or any other company. Nor do they or any other company have any influence over editorial coverage, how we rate products, or whether they get a positive review. Notwithstanding such affiliate programmes, we are not responsible for the content or privacy policies of these websites or for third-party advertisers, nor for the way in which they use the information they collect about you. See more [Information on Affiliate Links](https://www.reachplc.com/affiliates).
 **12.3 Behavioural remarketing services**
 After you have visited our site, we may use remarketing services provided by companies such as Facebook and Google and Bing, to show you advertising on third-party websites, based on your browsing patterns and interactions. For this purpose, visitors are grouped by certain actions on our services, for example, by duration of visit. This enables us to understand your preferences and to show you personalised advertising even if you are currently on another website within the network.
 Reach is not responsible for the content or use of personal data on third party websites linked to from our sites which offer Discount Codes. When you navigate to and use these sites, for example to redeem a discount code, we would recommend that you check the Privacy Notice associated with that site for more information on how those sites process your information.
 Similarly if you create a Cashback account, as part of the registration your data will be shared directly by you with our cashback partner in line with their terms and conditions which are provided to you at the point of registration. The legal "controller" of your personal data is Reach plc, and we rely on the performance of a contract for the management of Cashback accounts. They are administered by Widilo, also as a data controller, and are subject to their terms and conditions which are provided at the point of registration. For more information on how cashback partners use your data we recommend you check their Privacy Notice for more information.
 For anything to do with how Widilo uses your personal data, please see their privacy notice [here](https://www.widilo.co.uk/privacy-policy).
+**12.8 Affiliate Sites, such as Mirror Bingo**
+**12.8 Affiliate Sites, such as Mirror Bingo and Mirror Switch & Save**
 [Reach Gaming Affiliates](https://www.reachgamingaffiliates.com/) is a website operated by Reach, to promote our Gaming Affiliate programs, and provide users with the ability to join the program. We provide direct links to our nationally recognised and trusted gaming brands on our Reach Gaming Affiliates webpage, such as Mirror Bingo, OK! Bingo and Express Wins. We also provide links to web pages where you can submit your information in order to join our Reach Gaming Affiliates Account.
 Please note that we do not directly collect any personal data, concerning your browsing behaviour or your participation in our affiliate program, on this website.
 When you navigate to these web pages, please note that our partner, Jumpman, will be the data controller for the personal data that you provide, and Reach will be the data processor. The information we share will be used in accordance with our partner's privacy policy, which you should read when you sign up with the partner. For more information about how your Affiliate data will be used, please see the Jumpman Privacy Notice [here](https://www.mirrorbingo.com/privacy-policy).
+Mirror Switch & Save have partnered with Quotezone.co.uk to help you compare insurance policies including:
+- [Home insurance](https://insurance.mirrorswitchandsave.co.uk/home/index.php)
+- [Travel insurance](https://insurance.mirrorswitchandsave.co.uk/travel/index.php)
+- [Pet insurance](https://insurance.mirrorswitchandsave.co.uk/pet/index.php)
+- [Van insurance](https://insurance.mirrorswitchandsave.co.uk/van/index.php)
+- [Car insurance](https://insurance.mirrorswitchandsave.co.uk/car/index.php)
+- [Bike insurance](https://insurance.mirrorswitchandsave.co.uk/bike/index.php)
+- [Breakdown insurance](https://insurance.mirrorswitchandsave.co.uk/breakdown/index.php)
+- [Bicycle insurance](https://insurance.mirrorswitchandsave.co.uk/bicycle-quote/index.php)
+When you navigate to these web pages, please note that our partner Quotezone will be the data controller for the personal data that you provide, and Reach will be the data processor. For more information about how your Affiliate data will be used, please see the Quotezone Privacy Notice [here](https://www.quotezone.co.uk/about/privacy-policy).
 **12.9 How we work with Group Companies**
 Reach receives information from, and shares information with, other companies within the Reach Group to help operate, provide, improve, understand, customise, support, and market our services and their offerings. This includes:
 - helping improve infrastructure and delivery systems;
 - understanding how our services or theirs are used;
 - promoting safety, security and integrity across the Reach Group e.g. securing systems and fighting spam, threats, abuse, or infringement activities;
+- performing analytics and analysis of how you interact with the group's products and services, to facilitate business efficiencies and develop products and services that would be relevant to you; and
+- performing analytics and analysis of how you interact with the group's products and services, to facilitate business efficiencies, to help us better understand our audiences and deliver relevant content, develop products and services that would be relevant to you; and
 - sharing information to deliver more relevant advertising from across the Reach Group network.
 We also share information to fulfil the service to you for example:
 - When you decide to place an advertisement on Marketplace Live, through our Bookanad website, the information that you have provided will be shared with Marketplace Live, so that the publication and administration of your advertisement may be effectively managed.
 - When you elect to place a notice on the InYourArea website, through our Bookanad website, the information that you have provided when creating an account, and a notice, will be shared with InYourArea so that they may manage and administer your online post.
+In addition, a key way we share data across systems and Group companies is for advertising and targeting purposes. This can be based on your online behaviour on our sites, for example:
+**Audience Analytics and Understanding**
+When you consent to our cookies via our CMP, we may use your information (cookie identifiers and usage data) to help us better understand our audiences. This may include linking engagement data across our websites and apps for the following purposes;
+- Content improvement, to analyse what content is popular with our audiences so we can prioritise content that matters to our readers.
+- Performance analysis, to assess how our platforms are performing, including traffic levels and audience engagement.
+- Analytics and insights, to ingest the data into our analytics platforms (Engine), which allow our teams to ask questions and gain insights that support better decision making.
+**Advertising Relevance and Effectiveness**
+Another key way we share data across our websites and apps, is for advertising and targeting purposes. When you consent to cookies via our CMP, we may use your information from your online behaviour across our group sites to deliver adverts that are relevant to your interests and to help measure the effectiveness of our advertising campaigns. For example:
 - When you go onto one of our sites we can track your behaviour on those sites, or any of our other sites across our Group companies, and use this to target advertising or email content to you. For example, if you use our ecommerce site yimbly.com, we can see if you later visited one of our other sites and you may see advertising for the products you looked at based on this. If you would prefer to opt out, you can do so via the consent management pop-up.
+- This also applies if you open an email from us and this takes you online as we can use the information from your online behaviour to later target marketing to you. So for example if you subscribe to marketing emails on one of our regional news sites and we see you looked at sporting content on our other sites we may provide you with sport related content in your marketing emails from the regional news site. You can unsubscribe from emails at any time.
+- This also applies if you open an email from us and this takes you online as we can use the information from your online behaviour to later target marketing to you. So for example if you subscribe to marketing emails on one of our regional news sites and we see you have looked at sporting content on our other sites we may provide you with sport related content in your marketing emails from the regional news site. You can unsubscribe from emails at any time.
 - We may also upload emails (in hashed, pseudonymous form) straight to the advertising data system and this enables us to identify the same non-identifiable user across devices. So we know, for example, that the person who looks at Reach lifestyle content on their phone and then Reach fashion content on their desktop, is in fact the same non-identified person. You can unsubscribe from emails at any time.
 - We may also use the other data you have provided to us, combined with your online behaviour, to personalise your email campaigns. For example, if you signed up an account when browsing 'football' content on our news sites, we may classify you as a 'football intender'. Later when you go online we may see you are also interested in content on films and classify you as a 'football and films intender'. As a result you may see advertising content related to football and films, when you visit our sites.
 **12.10 Transfer as part of the sale of our business**
 If we sell part or all of our business, personal information may be one of the transferred business assets. If this happens, your information may be disclosed to any successors of our business for them to use for the purpose set out in this Privacy Notice.
 To exercise this right please use our [other rights request form](https://docs.google.com/forms/d/1l5UU-bfte8NUvRWG5BTUV0076O78C6ZDxpazy5n_Kpk/viewform).
 **15.3 Your right to have your information erased in some circumstances**
 You may have the right to have some or all of your information deleted, principally if the information you want deleted is no longer needed or if we don't have a legal basis to continue using it (for example, if we are using it on the basis of your consent and you withdraw your consent).
+Accounts on this site can be deleted at the users request. Contact [dataprotection@reachplc.com](mailto:dataprotection@reachplc.com) or complete the form below. Please note, account deletion will lead to the deletion of all personal data and it cannot be recovered.
 To exercise this right please use our [right to erasure request form](https://docs.google.com/forms/d/1FPYI30k_YxTZTRMeJFKOifbszAvNBcKv4mXE2hJbCSU/viewform).
 **15.4 Your right to withdraw your consent**
 If we're relying on your consent to do something with your information (for example, to send you newsletters) then you have the right to withdraw that consent at any time.
 California residents may request and obtain a list of any third parties that we have disclosed personal information to over the previous calendar year for the purposes of sending you direct marketing about the third party's own products and services. If you would like to request this information please contact us using the [rights request form](https://docs.google.com/forms/d/e/1FAIpQLSe_S4UU9agFYuaYgp0IJr_OmXICpKF8oS8N2AaP-ybt29L-rw/viewform) or by emailing privacyofficer@reachplc.com quoting 'California Privacy Rights-(insert name of Reach Group brand)' in the subject header and state which right(s) you wish to exercise.
 **[\*\*\* Click here to go back to 'Contents' \*\*\*]()**
 **16.2 Residents of US states with applicable privacy legislation**
+This section applies solely to individual residents of States with applicable privacy legislation including, but not limited to Virginia, Colorado, Connecticut, Utah, Oregon, Texas, Montana, Delaware, Iowa, Nebraska, New Jersey, New Hampshire, Tennessee and Minnesota. It describes how we collect, use and share Personal Information of residents when operating our business, and their rights with respect to that Personal Information. This section should be read in conjunction with the rest of this Privacy Notice which provides further details on the nature of our data processing.
+This section applies solely to individual residents of States with applicable privacy legislation including, but not limited to Virginia, Colorado, Connecticut, Utah, Oregon, Texas, Montana, Delaware, Iowa, Nebraska, New Jersey, New Hampshire, Tennessee, Minnesota and Maryland.. It describes how we collect, use and share Personal Information of residents when operating our business, and their rights with respect to that Personal Information. This section should be read in conjunction with the rest of this Privacy Notice which provides further details on the nature of our data processing.
 **16.2.1 Personal Information We Collect**
 We may collect the following types of Personal Information about you as described below:
 **A. Personal Information You Provide to Us**
 **16.2.5 Our Response Time to Your Request**
 We will make every effort to respond to your request within forty-five (45) days from when you contacted us. If you have a complex request, the legislation allows us up to ninety (90) days to respond. We will still contact you within forty-five (45) days from when you contacted us to let you know we need more time to respond and the reason for the extension. For particular states where the time frame for response may be shorter, we will adhere to the required legal timeframe.
 **16.2.6 Right to Appeal**
+Residents of certain states, including Virginia, Colorado, Connecticut, Oregon, Texas, Delaware, Iowa, Nebraska, New Hampshire, New Jersey, Tennessee and Minnesota may appeal a refusal to take action on a request by contacting us by emailing [privacyofficer@reachplc.com](mailto:privacyofficer@reachplc.com).
+Residents of certain states, including Virginia, Colorado, Connecticut, Oregon, Texas, Delaware, Iowa, Nebraska, New Hampshire, New Jersey, Tennessee, Minnesota and Maryland may appeal a refusal to take action on a request by contacting us by emailing [privacyofficer@reachplc.com](mailto:privacyofficer@reachplc.com).
 **[\*\*\* Click here to go back to 'Contents' \*\*\*]()**
+**16.3 Residents of other states and territories with applicable legislation**
+**16.3 Residents of other states and countries with applicable legislation**
+Residents may be covered by other local state data protection or privacy legislation. To exercise these rights please use the [rights request form](https://docs.google.com/forms/d/e/1FAIpQLSe_S4UU9agFYuaYgp0IJr_OmXICpKF8oS8N2AaP-ybt29L-rw/viewform), to submit a request in relation to your data rights.
+Residents may be covered by other local state or country data protection or privacy legislation. To exercise these rights, for example a deletion request, please use the [rights request form](https://docs.google.com/forms/d/e/1FAIpQLSe_S4UU9agFYuaYgp0IJr_OmXICpKF8oS8N2AaP-ybt29L-rw/viewform), to submit a request in relation to your data rights.
 **16.3.1 Nevada Privacy Rights**
 Reach does not currently sell your personal data, as defined by Nevada Law, for monetary compensation to third parties for their own purposes. Nevada residents, however, may request that we include their name on a do-not-sell list in the event Reach were to do so in the future. Please email us at privacyofficer@reachplc.com if you want to place your name on the do not sell list.
 **16.3.2 Canadian Residents**
 To exercise these rights please use the our [rights request form](https://docs.google.com/forms/d/e/1FAIpQLSe_S4UU9agFYuaYgp0IJr_OmXICpKF8oS8N2AaP-ybt29L-rw/viewform) or contact us by emailing [privacyofficer@reachplc.com](mailto:privacyofficer@reachplc.com).
 **16.3.3 Spanish Speaking Consumers of [The Mirror US ES](https://www.themirror.com/es/)**
 If you are a Spanish speaking consumer of https://www.themirror.com/es/ please email the Data Protection Officer at [privacidad@reachplc.com](mailto:privacidad@reachplc.com) stating the country in which you live and which data protection right you would like to exercise. Alternatively fill in the US [rights request form](https://docs.google.com/forms/d/e/1FAIpQLSe_S4UU9agFYuaYgp0IJr_OmXICpKF8oS8N2AaP-ybt29L-rw/viewform) or go to [UK and EU residents: your rights and how to exercise them]().
+**16.3.4 Rights under the LGPD**
+In certain circumstances, for example if you are a Brazil resident, you may exercise the rights available to you (with some exceptions and restrictions) under the Brazil general data protection law ("**LGPD**"). These rights may include the rights of information, access, portability, deletion, correction, revoke consent for direct marketing and opt-out of online behavioural advertising.
+To exercise these rights please use the our [rights request form](https://docs.google.com/forms/d/e/1FAIpQLSe_S4UU9agFYuaYgp0IJr_OmXICpKF8oS8N2AaP-ybt29L-rw/viewform) or contact us by emailing [privacyofficer@reachplc.com](mailto:privacyofficer@reachplc.com).
 **16.4 Other Notices**
 **Video Services Notice**
 Your video content viewing and associated media consumption activities (collectively "Viewing Activities") may be collected and shared by Reach when you use the Services. By watching video content on or through the Services, you are consenting to share your personal information, together with your Viewing Activities, with third parties, including, without limitation, service providers with whom we partner to provide our Products to you, as well as our advertising, social media and other business partners.