Last Updated: 2nd October 2025
Privacy Notice – Broadlab UK Limited (as a Data Vendor)
This Privacy Notice explains how Broadlab UK Limited (“Broadlab”, “we”, “our” or “us”) processes personal data as a data vendor, under the instructions of data controllers such as advertisers, publishers (including CTV publishers), or media agencies.
Broadlab is a registered vendor under the IAB Europe Transparency and Consent Framework (TCF) v2.2.
TCF Vendor ID: 1448
Who We Are
Broadlab UK Limited is a Connected TV (CTV) advertising data vendor based in the United Kingdom. We provide services to advertising clients and partners, including:
- Data enrichment and audience segmentation
- Campaign analytics and measurement
- Delivery of personalised and non-personalised advertising
- Integration with platforms such as the Microsoft Universal Pixel and Amazon Ads Pixel
We do not determine the means or purposes of the data we process independently. Instead, we act under instruction from data controllers—including CTV publishers, advertisers, and media agencies—who determine the legal basis and purposes of processing, and who are responsible for obtaining user consent where required.
Our Legal Basis for Processing
Under the TCF v2.2 framework, Broadlab only processes personal data:
- Where a valid legal basis of Consent has been provided by a data controller
- For specific purposes declared in the Global Vendor List (GVL)
We do not rely on Legitimate Interest for standard advertising purposes (e.g., personalised ads, audience profiles, performance measurement). We do rely on Legitimate Interest only for certain Special Purposes as defined below.
Purposes Processed on the Basis of Consent:
- Purpose 1: Store and/or access information on a device
- Purpose 2: Use limited data to select advertising
- Purpose 3: Create a personalised ads profile
- Purpose 4: Select personalised ads
- Purpose 7: Measure ad performance
- Purpose 9: Generate audience insights
- Purpose 10: Develop and improve products
Special Purposes Processed on the Basis of Legitimate Interest:
- Special Purpose 1: Ensure security, prevent and detect fraud, and fix errors
- Special Purpose 2: Deliver and present advertising and content (non-personalised)
- Special Purpose 3: Save and communicate privacy choices
Users may object to processing under Legitimate Interest via a Consent Management Platform (CMP) where supported.
What Personal Data We Process
We may process the following categories of personal data:
- Mobile Advertising IDs (GAID, IDFA)
- Cookie IDs
- IP addresses (truncated or hashed, where applicable)
- Device information (browser type, OS, model)
- Location data (derived from IP or with consent via GPS)
- Advertising engagement and event data
Broadlab does not knowingly process personal data relating to children under 16 years of age or any special-category data (such as health, political or biometric information)
Purposes of Processing
We process this data for the following reasons:
- Storing and/or accessing information on a device
- Creating and applying audience profiles
- Delivering ads (personalised or not)
- Measuring advertising performance
- Performing market research and generating insights
- Developing and improving advertising products
Features and Special Features
Features Used:
- Feature 1: Match and combine offline data sources
- Feature 2: Link different devices
Special Features:
- Special Feature 1: Use precise geolocation data
- Special Feature 2: Actively scan device characteristics for identification
These are only activated with appropriate user consent.
Website Cookies and Tracking
Our website (https://broadlab.tv) uses a range of cookies and tracking technologies, as disclosed in our Cookie Policy:
- Functional cookies: Necessary for site operation (e.g., Jetpack, WordPress, Complianz)
- Statistical cookies: Anonymous site usage metrics (e.g., Automattic/Jetpack tk_ai)
- Marketing cookies: Used in embedded services (e.g., Google Maps, Google Fonts)
Consent is managed via our live Consent Management Platform (CMP), which appears when you first visit the site. You may update your preferences at any time via the CMP interface.
In addition, when advertisers use conversion tracking pixels (e.g., from Microsoft or Innovid) as part of campaign delivery, those third-party platforms may drop cookies or device identifiers on advertiser-owned websites. These are operated by the respective third-party vendors and governed by their own privacy policies. Broadlab does not operate these cookies; however, we may receive limited data collected via them (such as IP addresses or event-level identifiers) through the reporting tools provided by third-party platforms like Microsoft or Innovid.
Data Sharing and Recipients
We may receive data from, or share data with:
- Supply-side platforms (SSPs)
- Demand-side platforms (DSPs)
- Ad exchanges
- Ad verification and measurement vendors
- Cloud infrastructure providers (e.g., AWS)
All transfers occur under encrypted transmission and access controls.
International Data Transfers
Where personal data is transferred outside the UK or EEA, we ensure safeguards are in place, including:
- Standard Contractual Clauses (SCCs)
- UK International Data Transfer Agreement (IDTA)
- Vendor-specific data protection addenda
Data Retention
We retain personal data only as long as necessary for its purpose:
| Purpose | Retention Period |
| Device storage, basic access | Up to 13 months |
| Personalised ads (3, 4) | Up to 13 months |
| Ad performance measurement | 180 days (event-level), 13 months (aggregate) |
| Insights & product dev | 6–13 months depending on controller |
| Special Purposes (1–3) | Up to 180 days |
Security Measures
We maintain industry-standard protections including:
- Data encryption (in transit and at rest)
- Role-based access control
- Secure storage via ISO/IEC 27001 certified platforms (e.g., AWS)
- Access control, activity logging and a documented incident response procedure aligned with ISO 27001 standards
Your Rights and Choices
Depending on your jurisdiction, you may have rights under GDPR, UK DPA, CCPA, or similar laws, including:
- Access your personal data
- Request correction or deletion
- Restrict or object to processing
- Withdraw consent
- Opt out of personalised advertising
To exercise your rights, use the CMP available on the site or contact us at: privacy@broadlab.tv
Further information about Broadlab’s governance, security and data protection measures can be found in the Broadlab Privacy and Data Protection Compliance Programme, available to clients on request.
Contact Information
Broadlab UK Limited
1st Floor Gallery Court, 28 Arcadia Avenue
London, N3 2FG, United Kingdom
Company Number: 14585427
Email: privacy@broadlab.tv
Data Protection Officer: Brian Jentz (brian.jentz@broadlab.tv)
Policy Updates
We review this policy regularly and update it to reflect changes in our operations, legal obligations, or registration status under the TCF. Last reviewed: 2nd October 2025