Privacy and Cookie Notice for The Spin Off app

Last updated: 31 October 2025

This Privacy and Cookie Notice (this “Notice”) describes how ITV Studios Global Partnerships Limited, including its parent, subsidiaries, affiliates and assigns (collectively, “we”, “us”, or “our”) collect, use and share your personal data as a controller in connection with your use of The Spin Off app (the “App”). This Notice also describes the rights and choices you have in relation to the processing of your personal data. We have also included information about our use of cookies and similar technologies.

This Notice does not apply to…

• some websites or applications which have their own privacy notice that we don’t control even though they may be branded similarly; and,
• third party websites or applications we may link to. Please read their priv
• acy notices carefully.

1. Personal data we collect about you or other people?

1.1. Personal information which you provide to us includes:

(a) “Registration Data”: Depending on the ITV service you use, we may collect all or some of the following when you register for, sign in, or update your account:

• first name and last name
• email address
• phone number
• date of birth
• county
• your chosen username and password

(b) Additional personal information you may choose to give us:

• Survey and research data: when you respond to a survey or participate in research,
• If you win a prize: we may collect additional information from you in order to fulfil your prize, which may include your address for physical prizes and your bank details for cash prizes,
• When you contact us:
• via Viewer Services or tell us about the problems you are experiencing on an ITV service,
• to leave feedback or complaints,
• and post to any ITV service or on our social media communities.

1.2. Personal data collected through your use of our App (we call this “Usage Data”) includes:

(a) Information about how you use our App including:

• information about the specific services you engage within our App,
• your activity within those services (including date and time), such as:

• how you access and use them, such as, your installation of the App, first time opening the App, your registration journey, login, and completed quizzes
• search queries,
• account settings,
• marketing communication preferences,
• interactions with other ITV users,
• your use of the App which may be provided via third party platforms of devices,
• our understanding of your interests and preferences based on your activity within our App,
• games, competitions, or prize draws you have entered,
• time you have spent playing our games, competitions or prize draws,
• which ads, if any, have been shown to you, for how long and if you viewed or clicked them,
• your cookie settings.

(b) We may collect the following technical information automatically:

• online identifiers (typically we do this through the use of cookies and similar technologies, please read section 6 “Cookies and similar technologies” for more information) such as a randomly generated client identifier or other user or device ID,
• your interaction with our website, such as what you click, the pages you view, and the duration of your visit,
• information about the devices you use, such as:
• device type (examples: laptop, computer, and other third party devices on your wifi network, etc.),
• browser type and application used, as well as browser or device-specific identifiers,
• language,
• operating system and version.

2. Why we use your personal data

Here is a general explanation of each potential ‘legal basis’ to help you understand what we mean:

• performance of a contract – to check your personal information before we start a new contract with you, and to perform a contract we have with you (which includes the App’s Terms or other applicable terms and conditions),
• legitimate interest – when ITV or a third party has an interest in using your personal information for a particular purpose. This purpose must be necessary and justified for our business considering any possible risks to you and others. For example, we have a legitimate interest in operating the App, promoting our services, personalising services for you, showing you ads we think you will like, measuring or analysing performance, improving our services for everyone and calculating visitor and session data for the App’s measurement reports,
• consent – we only seek your consent in a few limited circumstances. For example, when you opt in to receive direct marketing by email,
• compliance with legal obligations – we may need to use your personal information to comply with the law or regulatory codes.

We have set out in more detail each purpose, legal basis we rely on and the categories of personal information we use for each processing activity in the table below. Sometimes more than one legal basis will apply.

Purpose	Legal basis that permits the purpose	Categories of personal data used
To provide you access to the App, including personalising its content for you, such as: to identify you so that you can login and greet you by name, remember your settings so you don't have to, manage your account, including sending you service emails and messages, to check you are complying with applicable Terms of Use and investigating any suspected breaches, run and manage competitions, prize draws, polls, voting, events and other promotions, detect and prevent fraud, as well as monitor fair use of our App, understand and fix technical issues, share information with our service providers and suppliers to enable us to provide our services.	performance of contract legitimate interest compliance with our legal obligations	Registration Data Usage Data
To fulfil any prizes you win whilst using our services, subject to the applicable terms and conditions of the competition, prize draw and/or game. This may include that we and/or our service provider operating the App, shares certain information with the prize provider (for instance, PrizeShark Limited)  so that they can deliver your prize.   Also, if you delete your account in our App and you’ve won a cash prize or if you still have unused entries for future draws, we will retain your information so that we can attempt to fulfil the prize and/or allow you to use those entries as per the applicable terms and conditions. In any case, this information will be retained for a maximum of 30 days.	performance of contract	Registration Data Additional information we, or our trusted service or prize providers, may need to deliver your prize.
To handle your queries and complaints: handling and tracking them through to resolution, including (when you call us) monitoring or recording your calls for quality assurance, to improve our customer services, dispute resolution and fraud prevention and detection.	performance of contract legitimate interest	Registration Data Usage Data Emails or chat transcripts
To understand, improve and enhance user experience (including testing different versions of our content or layout on our App), and measure how people are using our service, to monitor and improve the operation, delivery, and general accessibility of our service, this may also include conducting internal research and development of our service.	performance of contract legitimate interest	Registration Data Usage Data
To understand user journeys to and on our App to determine whether users complete registration (and so we can remind you to complete your registration journey) and we may also track these journeys using unique tracking links so that we pay commission to marketing affiliates who have helped to promote our service on their website or service (also known as affiliate marketing),   Also, so that we can improve our services and keep you coming back for more!	legitimate interest	Registration Data Usage Data
To provide you with marketing communications by email or text (where the law requires us to get your consent). For this purpose, we may rely on technical suppliers to manage the technical elements of issuing these communications, like, for example, Xtreme Push, which is a ‘customer relationship manager’ provider.	consent	Registration Data sometimes we may use third party data sources to learn more about you so that these communications would be interesting to you
To provide you with other marketing, promotions or ads (where the law does not require consent): when we use your personal information to show you ads or other marketing or in-product communications to promote ITV services and products, working with third party platforms (such as Google and Facebook) and advertisers to show (or exclude) ads promoting ITV services and products, sharing data with our service providers and partners to create audience segments, and similar audiences on our ITV services for us and advertisers, for some email and text marketing messages (where the law does not require us to get consent)	legitimate interest	Registration Data Usage Data sometimes we may use third party data sources to learn more about you so that these communications would be interesting to you survey and research data
To establish, exercise or defend legal claims	legitimate interest performance of contract compliance with a legal obligation	Registration Data Usage Data

We keep your personal data where we have an ongoing legitimate or lawful need to do so, as described above. When we no longer have a legitimate or lawful need to keep your personal data, we will delete it or anonymise it.

3. Sharing your personal data?

We may provide your personal data to companies that help us in providing our service. These companies are authorised to use your personal data only as necessary to provide these services.

We may share your personal data with:

• with our affiliated companies for the purposes described in section 2 above,
• with unaffiliated companies or individuals we may hire or work with that provide us with professional advice, business support, or perform services on our behalf, including customer support, web hosting, information technology, direct mail and email distribution, and analytics services. These service providers are allowed to use your information to help us provide our service and not for any other purpose,
• when we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, or to comply with the applicable law or legal process, or to respond to legal claims,
• in connection with a corporate change including a merger, acquisition, or sale of assets,
• to any other party with your prior consent to do so.

We may combine all the information we collect from or receive about you for the outlined purposes. We may aggregate or de-identify your information and may use or share aggregated or de-identified information for any purpose, and such information is not subject to this Notice.

4. What rights do I have as a data subject and how can I use them?

We are committed to respecting the rights that individuals are entitled to under data protection laws in the UK. These are:

• the right to be informed of the personal information we collect and process about you and how we do that (this Notice does this),
• the right to request a copy of the personal information we hold about you. To do this, please email us using the email address set out below making clear that you are requesting a copy of your personal information and including full details of what you require. You may also be required to submit a proof of your identity.
• the right to object to your personal information being processed where the legal basis for the processing is our own legitimate interests as a business (see section 3 above). We will comply with such a request unless there is a lawful reason for not doing so, such as when we need to continue to process your information to defend a legal claim,
• the right to rectification. You may request that we correct any inaccurate and/or complete any incomplete personal information,
• the right to withdraw consent. Where we are processing your personal information on the basis that you have given us your consent to do so, you may withdraw your consent at any time.
• the right of erasure. Where permitted by applicable data protection laws, you may request that we erase your personal information and we will comply, unless there is a lawful reason for not doing so,
• the right to data portability in certain circumstances,
• the right to lodge a complaint with the supervisory authority. If you wish to make a complaint about how we use your information, please contact us at myprivacy@itv.com and we will do our best to help. If you remain unsatisfied with our response, you can contact the Information Commissioner's Office via their website (https://ico.org.uk).

5. Changes to how we use your information

We may change this Notice from time to time and we will notify you by revising the “Last Updated” date at the top of this Notice. If we change this Notice in a way that we believe materially affects how we process your personal data, we will provide you with advance notice such as via email or by posting a notice on our App, if applicable.

6. Cookies and similar technologies we may use

This section describes how cookies and similar technologies are used to support the App.

What are cookies and similar technologies?

• cookies are small text files stored by your browser (a browser is the software on your device which enables you to access the internet). The cookie stores a unique identifier (a string of random characters) so that your browser can be singled out from other browsers to show you the information you want (for example, the episode of the programme you want to watch on our streaming service), 

• other types of storage, such as local or “HTML” storage. Some of our services use local storage technologies that are similar to cookies but enable larger amounts of data to be stored. This means we can store information like your preferences on your device rather than on our own systems, and

• pixels are embedded code to recognise your browser and record your interactions with emails, online content or ads.

From now on we will refer to these technologies collectively as ‘cookies’. Cookies are typically used by websites or where apps have embedded web browsers which allow them to access the internet.

Why do we use cookies and what types of cookies do we use?

Essential: these cookies are necessary for our service to work. Without these cookies, we can’t provide you with our core functionalities and associated services such as login and security, and help to improve your experience and so these are not optional. They may also help with the following:

• when you visit our website, we’ll remember your cookie consent preferences, so you don’t have to select them again the next time you visit,

• to keep the App and your personal data secure,
• we may test different versions of the App to understand which performs best for user experience,

• we may collect data on how you use our services in order to make improvements and to identify and fix any technical issues.

Performance and Functionality: these are used to produce reports to help us improve our site and measure how well new features or functionalities perform.

We use Google Analytics which is an analytics and measurement service provided by Google. Google Analytics sets a cookie in order to evaluate use of our service, where we have implemented it, and compile a report for us. Google Analytics records visits to our website to help us know:

• the date and time of visits,
• how many active users we have at any given time,
• what browsers are used (so we can maximise compatibility),
• the country or region where our users are located,
• we may also use this cookie to derive demographics and interests data for analytics purposes only.

You can find out more about how Google uses dataat https://policies.google.com/technologies/partner-sites?hl=en-GB.

We also use Appsflyer as a tool that measures the effectiveness of our digital marketing campaigns.

How do I manage cookies?

Please be informed that you have the following controls on our App:

• cookie settings: these enable you to choose what data is stored on or collected from your device and control how this data may be used.

You can also choose how cookies (across all websites) are handled on your device via your settings including to block or delete all cookies or just third party cookies. Each manufacturer is different, so check the "Help" menu of your browser to learn how to change your cookie preferences.

7. Contact us

Contact us about your data protection queries or requests: Email: myprivacy@itv.com. In the subject line of your query or request, please mention “Spin Off.”

Write to: ITV UK Data Protection Officer, ITV plc, ITV White City, 201 Wood Lane, London, W12 7RU.