Win Win Privacy Notice
Supplemental Privacy and Cookie Notice for Win Win
Last updated: 14 August 2025
This Privacy and Cookie Notice (this “Notice”) describes how ITV Consumer Ltd., including its parent, subsidiaries, affiliates and assigns (collectively, “we”, “us”, or “our”) collect, use and share your personal data as a controller in connection with your use of our website (the “Website”). This Notice also describes the rights and choices you have in relation to the processing of your personal data. We have also included information about our use of cookies and similar technologies.
This Notice supplements our general Privacy & Cookie Information, which also applies to your use of our Website, so you should make sure to refer to both to get all the information you need to know about how we process your personal data.
This Notice does not apply to…
some websites or applications which have their own privacy notice that we don’t control even though they may be branded similarly; and,
third party websites or applications we may link to. Please read their privacy notices carefully.
1. Personal data we collect about you or other people
1.1. Personal information which you provide to us includes:
(a) “Registration Data”: Depending on the ITV service you use, we may collect all or some of the following when you register for, sign in, or update your account:
full name
email address
mobile number
date of birth
address (including postcode)
(b) Additional personal information you may choose to give us:
Survey and research data: when you respond to a survey or participate in research,
If you win a prize: we may collect additional information from you in order to fulfil your prize, which may include your address for physical prizes and your bank details for cash prizes,
When you contact us:
via Viewer Services or tell us about the problems you are experiencing on an ITV service,
to leave feedback or complaints,
and post to any ITV service or on our social media communities.
1.2. Personal data collected through your use of our Website (we call this “Usage Data”) includes:
(a) Information about how you use our Website including:
information about the specific services you engage within our Website,
your activity within those services (including date and time), such as:
how you access and use them, such as, first time opening the Website, your registration journey, login, and completed quizzes
search queries,
account settings,
marketing communication preferences,
interactions with other ITV users,
your use of the Website which may be provided via third party platforms of devices,
our understanding of your interests and preferences based on your activity within our Website,
games, competitions, or prize draws you have entered,
time you have spent playing our games, competitions or prize draws,
which ads, if any, have been shown to you, for how long and if you viewed or clicked them,
your cookie settings.
(b) We may collect the following technical information automatically:
online identifiers (typically we do this through the use of cookies and similar technologies, please read section 7 “Cookies and similar technologies” for more information) such as a randomly generated client identifier or other user or device ID,
your interaction with our website, such as what you click, the pages you view, and the duration of your visit,
information about the devices you use, such as:
device type (examples: laptop, computer, and other third party devices on your wifi network, etc.),
browser type and application used, as well as browser or device-specific identifiers,
language,operating system and version.
2. Why we use your personal dataHere is a general explanation of each potential ‘legal basis’ to help you understand what we mean:
performance of a contract – to check your personal information before we start a new contract with you, and to perform a contract we have with you (which includes the Website’s Terms or other applicable terms and conditions),
legitimate interest – when ITV or a third party has an interest in using your personal information for a particular purpose. This purpose must be necessary and justified for our business considering any possible risks to you and others. For example, we have a legitimate interest in operating the Website, promoting our services, personalising services for you, showing you ads we think you will like, measuring or analysing performance, improving our services for everyone and calculating visitor and session data for the Website’s measurement reports,
consent – we only seek your consent in a few limited circumstances. For example, when you opt in to receive direct marketing by email,
compliance with legal obligations – we may need to use your personal information to comply with the law or regulatory codes.
We have set out in more detail each purpose, legal basis we rely on and the categories of personal information we use for each processing activity in the section below. Sometimes more than one legal basis will apply.
(a) To provide you access to the Website, including personalising its content for you, such as:
to identify you so that you can login and greet you by name,
remember your settings so you don't have to,
manage your account, including sending you service emails and messages,
to check you are complying with applicable Terms of Use and investigating any suspected breaches,
run and manage competitions, prize draws, polls, voting, events and other promotions,
detect and prevent fraud, as well as monitor fair use of our App,
understand and fix technical issues,
share information with our service providers and suppliers to enable us to provide our services.Legal basis that permits the purpose: performance of contract, legitimate interest and compliance with our legal obligations.
Categories of personal data used: Registration Data and Usage Data.
(b) To handle your queries and complaints:
handling and tracking them through to resolution, including (when you call us) monitoring or recording your calls for quality assurance,
to improve our customer services, dispute resolution and fraud prevention and detection.
Legal basis that permits the purpose: performance of contract and compliance with our legal obligations.
Categories of personal data used: Registration Data, Usage Data and emails or chat transcripts.
(c) To understand, improve and enhance user experience (including testing different versions of our content or layout on our Website), and measure how people are using our service, to monitor and improve the operation, delivery, and general accessibility of our service, this may also include conducting internal research and development of our service.
Legal basis that permits the purpose: performance of contract and legitimate interests.
Categories of personal data used: Registration Data and Usage Data.
(d) To understand user journeys to and on our Website to determine whether users complete registration (and so we can remind you to complete your registration journey). Also, so that we can improve our services and keep you coming back for more!
Legal basis that permits the purpose: legitimate interests.
Categories of personal data used: Registration Data and Usage Data.
(e) To provide you with marketing communications by email or text (where the law requires us to get your consent).
Legal basis that permits the purpose: consent.
Categories of personal data used: Registration Data and sometimes we may use third party data sources to learn more about you so that these communications would be interesting to you.
(f) To provide you with other marketing, promotions or ads (where the law does not require consent):
when we use your personal information to show you ads or other marketing to promote ITV services and products,
working with third party platforms (such as Google and Facebook) and advertisers to show (or exclude) ads promoting ITV services and products,
sharing data with our service providers and partners to create audience segments, and similar audiences on our ITV services for us and advertisers,
for some email and text marketing messages (where the law does not require us to get consent)
Legal basis that permits the purpose: legitimate interest.
Categories of personal data used: Registration Data, Usage Data, sometimes we may use third party data sources to learn more about you so that these communications would be interesting to you, and survey and research data.
(g) To establish, exercise or defend legal claims.
Legal basis that permits the purpose: legitimate interest, performance of contract and compliance with a legal obligation.
Categories of personal data used: Registration Data and Usage Data.
We keep your personal data where we have an ongoing legitimate or lawful need to do so, as described above. When we no longer have a legitimate or lawful need to keep your personal data, we will delete it or anonymise it.
3. Sharing your personal data?
We may provide your personal data to companies that help us in providing our service. These companies are authorised to use your personal data only as necessary to provide these services.
We may share your personal data with:
with our affiliated companies for the purposes described in section 2 above,
with unaffiliated companies or individuals we may hire or work with that provide us with professional advice, business support, or perform services on our behalf, including customer support, web hosting, information technology, direct mail and email distribution, and analytics services. These service providers are allowed to use your information to help us provide our service and not for any other purpose,
when we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, or to comply with the applicable law or legal process, or to respond to legal claims,
in connection with a corporate change including a merger, acquisition, or sale of assets,
to any other party with your prior consent to do so.
We may combine all the information we collect from or receive about you for the outlined purposes. We may aggregate or de-identify your information and may use or share aggregated or de-identified information for any purpose, and such information is not subject to this Notice.
4. Sharing your information with People’s Postcode Lottery
Postcode Lottery Limited ("PPL") is a sponsor of Win Win, also known as People's Postcode Lottery. Accordingly, if you're a Win Win user who has consented to receiving email marketing from PPL and/or haven't objected to receiving postal marketing from PPL when creating your Win Win account (or at any point afterwards), we will share the following information with PPL to enable them to send you email and/or postal marketing:
Full Name
Mobile number
Address (including postcode)
Date of birth
ITV is relying on your consent to share your data with PPL for their email marketing; for PPL's postal marketing, we're relying on our legitimate interests to share the data above with PPL.
As stated above, upon receipt of this data PPL will be the data controller of your information. PPL is the sole controller, instigator, and sender of this marketing. Therefore, ITV does not determine or influence the content, form, timing, or any other aspect of PPL's marketing activities.
You can unsubscribe from PPL’s marketing by contacting them directly at: data.protection@postcodelottery.co.uk or, in the case of email marketing, by clicking the unsubscribe button within their emails. If you have any questions in relation to PPL's activities, please contact them at: data.protection@postcodelottery.co.uk.
Please see the PPL Privacy Notice for information about all other uses of personal information collected and processed by PPL, how to exercise your rights with PPL, and the controls available to you regarding PPL's email and/or postal marketing. For information about exercising your rights with ITV, please see section 5.
We will keep your information to ensure we are able to fulfil our contractual obligations with PPL and others where we have another lawful need to keep it. The information contained in this section relates only to the sharing of information from ITV to PPL.
5. What rights do I have as a data subject and how can I use them?
We are committed to respecting the rights that individuals are entitled to under data protection laws in the UK. For more information about your rights and how you can exercise them, please see ITV’s People Privacy Notice.
6. Changes to how we use your information
We may change this Notice from time to time and we will notify you by revising the “Last Updated” date at the top of this Notice. If we change this Notice in a way that we believe materially affects how we process your personal data, we will provide you with advance notice such as via email or by posting a notice on our Website, if applicable.
7. Cookies and similar technologies we may use
This section describes how cookies and similar technologies are used to support the Website.
What are cookies and similar technologies?
cookies are small text files stored by your browser (a browser is the software on your device which enables you to access the internet). The cookie stores a unique identifier (a string of random characters) so that your browser can be singled out from other browsers to show you the information you want (for example, the episode of the programme you want to watch on our streaming service),
other types of storage, such as local or “HTML” storage. Some of our services use local storage technologies that are similar to cookies but enable larger amounts of data to be stored. This means we can store information like your preferences on your device rather than on our own systems, and
pixels are embedded code to recognise your browser and record your interactions with emails, online content or ads.
From now on we will refer to these technologies collectively as ‘cookies’. Cookies are typically used by websites or where apps have embedded web browsers which allow them to access the internet.
Why do we use cookies and what types of cookies do we use?
Essential: these cookies are necessary for our service to work. Without these cookies, we can’t provide you with our core functionalities and associated services such as login and security, and help to improve your experience and so these are not optional. They may also help with the following:
when you visit our website, we’ll remember your cookie consent preferences, so you don’t have to select them again the next time you visit,
to keep the Website and your personal data secure,
we may test different versions of the Website to understand which performs best for user experience,
we may collect data on how you use our services in order to make improvements and to identify and fix any technical issues.
Performance and Functionality: these are used to produce reports to help us improve our site and measure how well new features or functionalities perform.
We also use Google Analytics which is an analytics and measurement service provided by Google. Google Analytics sets a cookie in order to evaluate use of our service, where we have implemented it, and compile a report for us. Google Analytics records visits to our website to help us know:
the date and time of visits,
how many active users we have at any given time,
what browsers are used (so we can maximise compatibility),
the country or region where our users are located,
we may also use this cookie to derive demographics and interests data for analytics purposes only.
You can find out more about how Google uses data at https://policies.google.com/technologies/partner-sites?hl=en-GB.
How do I manage cookies?
Please be informed that you have the following controls on our Website:
cookie settings: these enable you to choose what data is stored on or collected from your device and control how this data may be used.
You can also choose how cookies (across all websites) are handled on your device via your settings including to block or delete all cookies or just third party cookies. Each manufacturer is different, so check the "Help" menu of your browser to learn how to change your cookie preferences.
8. Contact us
Contact us about your data protection queries or requests: Email: myprivacy@itv.com. In the subject line of your query or request, please mention “Win Win.”
Write to: ITV Group Data Protection Officer, ITV plc, ITV White City, 201 Wood Lane, London, W12 7RU.