Legal
Privacy Policy
1. Introduction
We, Whisper, are an independent television production company based in London, producing sports, unscripted and branded entertainment for global channels, series and brands worldwide.
We are committed to protecting and respecting the personal data that we process as a data controller. Personal data is any information relating to an identified or identifiable living person.
This privacy statement describes why and how we collect, store, transfer and use personal data and provides information about individuals’ rights. It applies to personal data obtained by or provided to us, by individuals themselves or by others or from other sources. The personal data that is obtained by or provided to us is either provided directly by the individual concerned or by a third party acting on behalf of an individual or obtained from a publicly available source (e.g. press articles, social media profiles, online searches). Where we receive personal data that relates to an individual from a third party acting on behalf of an individual, we request that this third party informs the individual of the necessary information regarding the use of their data. Where necessary, reference may be made to this privacy statement.
We may store, transfer and use personal data provided to us for the purposes described in this privacy statement or as made clear before collecting personal data.
2. Security
We take the security of your personal data seriously. We have implemented appropriate measures and safeguards to ensure that your personal data is kept safe and secure including the following:
- we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. Relevant staff are trained on data protection, confidentiality and security; and
- we have a framework of policies and procedures, which are reviewed regularly, to protect your personal data, including procedures to deal with any suspected personal data breach.
Please note that the transmission of information via the internet is not completely 100% secure and although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted by this means; any transmission is at your own risk. Once we have received your information, we will use our procedures and security measures to try to prevent unauthorised access.
3. Personal data that we process and hold
The data we process and the reasons why will depend on the nature of our interaction with you.
(a) Why do we process data?
We may process personal data for various purposes, including:
- responding to queries from members of the public;
- as part of and in connection with our programme-making and other activities including producing, exhibiting, exploiting, distributing, publicising, advertising and promoting our programmes by any media (now known or hereafter invented) throughout the world;
- operating and managing our business and this website effectively and lawfully (including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data); and
- making payments to individuals.
We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If you would like explanation as to how the processing for the new purpose is compatible with the original purpose, please contact us. Please note that we may process your personal data without your knowledge or consent, in compliance with the above rules, where this is required or permitted by law.
(b) What data is processed and what is the basis for that processing?
Below is a description of all the ways we plan to use your personal data, and the legal grounds (or “lawful basis”) we rely on to do so.
Members of the Public (who contact us by phone, e-mail or otherwise in writing, or online):
- your name, contact details and handwriting – to correspond with you and for administrative purposes (with such processing being necessary for the purposes of our legitimate interests); and
- cookie data (please refer to section 7 below).
Prospective Employees and Contractors:
- your age, gender, gender identity, ethnicity, disability and sexual orientation – for diversity analysis monitoring (with such processing being necessary for the purposes of our legitimate interests and the substantial public interest of identifying or keeping under review equality of opportunity or treatment);
- your name, contact details and handwriting – to correspond with you and for administrative purposes (with such processing being necessary for the purposes of our legitimate interests and for the performance of our contract with you or steps taken prior to entering into it);
- your image and the other information in your passport, driving licence and other official documents – to verify your identity and to ensure compliance with relevant laws (with such processing being necessary for the purposes of our legitimate interests and for the performance of our contract with you or steps taken prior to entering into it);
- information about your work history, qualifications and experiences – to assess your suitability to work with us and/or to comply with contractual and regulatory obligations (with such processing being necessary for the purposes of our legitimate interests);
- information about your personal, home and family life – to assess your suitability to work with us and/or to comply with our contractual and regulatory obligations (with such processing being necessary for the purposes of our legitimate interests and, in the case of special category data, we rely on your consent);
- information about you on social media and the internet including images of you and other information – to verify your identity and to assess your suitability to work with us (with such processing being necessary for the purposes of our legitimate interests);
- where relevant, information about your physical and mental health – to assess your suitability to work with us or take part in our programmes (with such processing being necessary for the purposes of our legitimate interests and for the performance of our contract with you or steps taken prior to entering into it, and undertaken with your consent) and/or to meet our health and safety and/or duty of care obligations to you and to others to create a safe production environment (with such processing being necessary for the purposes of complying with our legal obligations);
- information about any criminal convictions or cautions you have or any criminal activity or proceedings you have been involved in – to assess your suitability to work with us (with such processing being necessary for the purposes of our legitimate interests and/or for the performance of our contract with you or steps taken prior to entering into it, and undertaken with your consent) and/or to meet our health and safety and/or duty of care obligations to you and to others (with such processing being necessary for the purposes of complying with our legal obligations, and undertaken with your consent); and
- your financial details including your bank details – to pay or reimburse pre-approved costs or expenses (with such processing being necessary for the performance of our contract with you or steps taken prior to entering into it).
(c) How long do we hold data for?
We retain personal data for as long as reasonably necessary for the purpose(s) for which it was collected. We may retain your personal data for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation in respect to our relationship with you.
To determine the appropriate retention period for personal data, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal, regulatory, tax, accounting or other requirements.
Personal data that is no longer required will be deleted/destroyed in a secure manner.
4. Sharing personal data
We will only share personal data with others when we are legally permitted to do so. When we share data with others, we put contractual arrangements and security mechanisms in place to protect the data and to comply with our data protection, confidentiality and security standards.
Your personal data is processed by our employees and staff and we use third parties to support us in providing our services. We may share your personal data with the parties set out below:
- contracting/commissioning parties involved in our business activities, e.g. broadcasters, sales agents, distributors, financiers;
- production partners involved in our business activities, e.g. post production houses, coproducers;
- insurance companies, health and safety advisors, IT services, legal advisors, government advisors, regulatory authorities and accountancy services who are providing services to us;
- third parties to whom we may choose to sell, transfer or merge parts of our business or our assets. Alternatively, we may seek to acquire other businesses or merge with them. If a change happens to our business, then the new owners may use your personal data in the same way as set out in this privacy policy; and
- others – we may share your data with other third parties on an ad-hoc basis, however as and when this happens, we will inform you if and when this happens.
We may receive requests from third parties with authority to obtain disclosure of personal data, such as to check that we are complying with applicable law and regulation, to investigate an alleged crime, to establish, exercise or defend legal rights, e.g. Ofcom and other broadcasting regulators, the police or other regulatory bodies.
We may share special category personal information about you with members of the production team, and with the parties set out above, and (to the extent you provide such information as part of your contribution to a programme and the same is incorporated in a programme and/or we include details of your biography background and past experiences in a programme) with the public on transmission of the programme in which you appear.
This website may include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy policy of every website you visit.
5. Locations of processing
Although based in the UK, our business is global which means that the data that we collect from you may be transferred to and stored at a destination outside the UK or European Economic Area (“EEA”). Where that is the case, we will ensure that a similar degree of protection is afforded to your personal data in accordance with applicable data protection laws, including, where appropriate, implementing adequate safeguards to ensure the safety and security of your personal information.
6. Individual’s rights
Depending on your jurisdiction, data protection laws provide you with certain rights in relation to your personal data, including the following:
- the right to request access to your personal data held by us as a data controller;
- the right to request that we rectify any inaccurate personal data that we hold about you;
- the right to request that we erase your personal data;
- where we process personal data based on consent, the right to withdraw your consent at any time;
- the right to restrict or object to our processing of personal data and the right to data portability; and
- the right to request information about any automated data processing that we may undertake.
If you wish to exercise any of these rights, please send an email to legalnotices@wearewhisper.com.
In most circumstances, you will not have to pay a fee to exercise any of these rights. However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we could refuse to comply with your request in these circumstances.
We may need to request specific information from you to help us confirm your identity. We may also contact you to ask for further information to help us fulfil your request.
We aim to respond to all legitimate requests within one month. Occasionally it could take us longer if your request is particularly complex or if you have made a number of requests. In this case, we will notify you and keep you updated.
7. Cookies and similar tracking technology
We, as well as our service providers and third parties, collect information about you using cookies and similar technologies (such as tracking pixels or web beacons) with your consent, in order to:
- perform functions necessary to provide our services such as keeping our content secure;
- enhance your user experience by remembering your preferences, such as preferred language; and
- monitor, evaluate and optimise the use and operation of our websites through analytics or performance cookies, for instance, checking for bugs and glitches, recognising and counting the number of visitors to our website and monitoring how visitors move around our website when they are using it. This helps us to improve the way our website works, for example, by ensuring that users are finding what they are looking for easily.
Cookies and tracking pixels, among other tracking technologies, may generally be disabled or removed by tools available as part of most commercial browsers, and in some instances blocked in the future by selecting certain settings. Browsers offer different functionalities and options so you may need to set them separately.
8. Complaints
We hope that you won’t ever need to, but if you do want to complain about our use of personal data, please send an email with the details of your complaint to legalnotices@wearewhisper.com. We will review and respond to any complaints we receive.
You also have the right to lodge a complaint with the UK data protection regulator, the Information Commissioner’s Office (“ICO”). For further information on your rights and how to complain to the ICO, please refer to the ICO website: ico.org.uk.
9. Data Controller and contact information
If you have any questions about this privacy statement or how and why we collect, process, store and transfer personal data, please contact us at legalnotices@wearewhisper.com.
10. Changes to our privacy statement
We may update or amend this privacy statement from time to time. Updates to this privacy statement will appear on this website. This privacy statement was last updated in October 2026.