FOR UNITED KINGDOM AND EUROPEAN UNION/EEA RESIDENTS

Last Modified: June 4, 2025

The UK Data Protection Act of 2018 (DPA 2018) and the EU General Data Protection Regulation (GDPR) provide certain rights regarding the processing of personal data of EU/EEA/UK data subjects. This section of the Privacy Notice applies if you are in the United Kingdom or a country that is a Member of the European Union or EEA, and supplements the information in the Privacy Notice.

Company is the data controller for the processing of your personal data, as defined under the DPA 2018 and the GDPR, collected by the Company from visitors to the biblegateway.com site (the “Site”).

LEGAL BASIS FOR DATA PROCESSING

In addition to the purposes for which we collect and process your personal data as set out in the Privacy Notice we do so under the following legal bases:

• Your consent in order to customize your visits to and use of our Company affiliate sites and applications, and deliver content (including advertising) tailored to your interests and the manner in which you use our Company affiliate sites and applications (please also see the Interest-Based Advertising Section for more details). You have the right to withdraw your consent at any time.

  Purposes of Processing (why we use your data)	Legal Basis for the Use of Your Data
  Create profiles and select personalized content and/or advertising	Your consent
  Aggregate personal data and non-personal data to generate statistics of non-personally-identifiable data to measure content performance	Legitimate interests Your consent
  Aggregate personal data and non-personal data to generate statistics of non-personally-identifiable data to measure advertising performance	Legitimate interests Your consent
  Aggregate personal data and non-personal data to generate statistics of non-personally-identifiable data to understand audiences	Legitimate interests Your consent
  Develop and improve services	Legitimate interests Your consent
  Ensure security, prevent and detect fraud and fix errors	Legitimate interests

• To perform a contract. If you are a Company investor and have signed up for stockholder benefits such as Electronic Delivery Enrollment, certain of your personal data is necessary to provide you with those benefits.
• Our legitimate interests. We collect personal data such as your interactions with the Site as described in the Data You Provide to Company section of the Privacy Notice to conduct analytics to improve our Site. We only rely on legitimate interests if the reason for using your information is fair and lawful. We carry out a balancing test between our legitimate interests and your privacy rights where we want to rely on legitimate interest as a legal basis.
• To comply with legal requirements (for example, where we have a legal or regulatory obligation or to defend claims).

Where appropriate, we will ask for your consent to process the personal data. Where you have given consent for processing activities, you have the right to withdraw your consent at any time.

UK AND EU/EEA DATA SUBJECT RIGHTS

In addition to the rights of access, correction or rectification, deletion and data portability, as described in the Privacy Notice, UK and EU/EEA data subjects have other rights over how the data is processed and can exercise these rights at any point in time. Below is an overview of these rights, many of which are subject to exceptions under applicable law. You can exercise these rights by clicking here or by emailing privacypolicy@harpercollins.com, and indicating “GDPR Request” or “UK DPA Request” in the subject line.

The right to withdraw consent. You have the right to withdraw your consent to the processing of your personal data at any time by contacting us as noted above. This will not affect the lawfulness of the processing based on your consent before its withdrawal.

The right to object to or restrict processing. Under certain circumstances, you have the right to object to or restrict our processing of your personal data. For example, where we process personal data based on our legitimate interests, you may object to this. We will need to carefully consider your request, as there may be circumstances which require us, or allow us, to continue processing your data. However, you have an absolute right to object to our processing of your personal data for direct marketing purposes, and no exception applies to such a request.

The right to lodge a complaint with a Supervisory Authority. You have the right to lodge a complaint directly with the relevant Supervisory Authority about how we process your personal data.

RETENTION OF PERSONAL DATA

We will keep your personal data for as long as we need it to fulfill the purposes set out in our Privacy Notice or while there is a legitimate reason for doing so, and as otherwise required or permitted by applicable law, such as in relation to our record retention obligations.

We review the personal data we hold and delete it securely, or in some cases anonymize it, when there is no longer a legal, business or consumer need for it to be retained.

INTERNATIONAL DATA TRANSFERS

Personal data of our UK or EEA users may be transferred outside the UK or EEA to countries that may not have data protection rules that require the same level of protection, but we will make sure that there are appropriate mechanisms and controls in place to protect your data. This may include data transfer agreements, a copy of which you can obtain by contacting us at privacypolicy@harpercollins.com. We use these data transfer mechanisms—and not consent—as the legal basis for our own transfers of personal data from within the UK or EEA to outside the UK or EEA (even when other aspects of our handling of personal data take place on the basis of consent).

CONTACT US

If you have any data protection inquiries, you may contact the Bible Gateway Article 27 Representative, using the subject line “Bible Gateway Rep” at:

News UK & Ireland Limited
1 London Bridge Street
London, SE1 9GF
United Kingdom
dataprotection@news.co.uk