BBSA Associates Limited ("BBSA") is the legal entity responsible for BASA Awards and is the data controller responsible for the personal information described in this Privacy Policy. In this Privacy Policy, the BASA Awards website, awards programs and associated services are referred to collectively as "BASA Awards", "we", "us" or "our". BASA Awards is committed to protecting privacy and handling personal information responsibly. This Privacy Policy explains how BASA Awards collects, uses, stores, shares and protects personal information when you visit basawards.com, submit or participate in an award entry, register or participate as a judge, subscribe to communications, purchase awards-related products, contact us, or otherwise interact with BASA Awards.

This Policy is intended to provide a clear global privacy framework for our activities in the United Kingdom, United States, Australia and Canada. Additional rights may apply according to where you live and the laws applicable to a particular interaction. This Policy should be read together with any specific privacy or collection notice presented when personal information is collected.

Who Is Responsible for Your Personal Information

For the purposes of applicable privacy and data protection laws, BBSA Associates Limited is the legal entity responsible for BASA Awards and, where applicable, acts as the data controller for the personal information described in this Policy.

BBSA Associates Limited is registered with the UK Information Commissioner's Office (ICO) under registration reference ZA415671. Contact details are provided at the end of this Policy.

II. Information We Collect

The personal information we collect depends on how you interact with BASA Awards and may include:

• name, business or organization name, job title or professional information;
• postal address, email address, telephone number and social media handles;
• account, registration and profile information;
• information supplied when requesting an entry kit, subscribing to newsletters, completing surveys or contacting us;
• billing, transaction and payment-related information, although BASA Awards does not store full payment-card details on its servers;
• information, documents, photographs, videos, logos, supporting materials and other content submitted in connection with an award nomination, entry, judging activity or inquiry;
• information about judges, including professional background and information relevant to judging eligibility and participation;
• communications with BASA Awards, including emails and our responses; and
• technical and usage information such as IP address, browser type, device information, referring pages, pages visited, date and time of visits and interactions with the website.

III. How We Collect Personal Information

We collect personal information directly from you when you submit information to BASA Awards, create or use an account, submit an award entry, participate as a judge, make a purchase, subscribe to communications, complete a form, or contact us.

We may also receive personal information from organizations or individuals submitting nominations or entries, authorized representatives, judges, our awards-management and technology providers, payment and e-commerce providers, and other service providers involved in administering BASA Awards. An award entry may therefore contain personal information about individuals other than the person submitting it. Where required by applicable law, we will provide or make available appropriate privacy information concerning personal information obtained from another source.

We also collect certain technical information automatically through cookies, server logs and similar technologies when you use our website.

IV. How We Use Personal Information

We may use personal information to:

• administer BASA Awards and process nominations and entries;
• verify eligibility and manage the judging process;
• make entry materials available to authorized judges for evaluation;
• assess judge eligibility, assign judging responsibilities and communicate with judges;
• communicate with entrants, nominees, winners, finalists, judges and other participants;
• provide customer support and respond to inquiries;
• process purchases and arrange fulfillment of awards-related products;
• maintain records relating to entries, judging, awards administration and transactions;
• operate, secure, analyze and improve our website, services and awards programs;
• prevent fraud, misuse and security incidents and enforce our applicable terms;
• comply with legal, regulatory, accounting and tax obligations; and
• send operational communications, deadlines, event information and other information relevant to participation.

Where permitted by the applicable award terms, submitted materials may also be used to promote BASA Awards and recognized entrants. Where consent is required by law for marketing, we will rely on consent or another lawful basis permitted by applicable law. You may unsubscribe from marketing emails at any time using the unsubscribe link or by contacting us.

V. Legal Bases for Processing - United Kingdom

Where the UK GDPR applies, BASA Awards processes personal information only where a lawful basis applies. Depending on the activity, this may include performance of a contract or steps requested before entering into a contract; compliance with a legal obligation; BASA Awards' legitimate interests in administering and protecting the awards, communicating with participants, maintaining records and improving its services, where those interests are not overridden by individual rights and freedoms; consent; or another lawful basis permitted by law.

Where we rely on consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

VI. Award Entries and Judging

Information and materials submitted as part of an award entry may be made available to authorized judges through our official awards-management platform for the purpose of evaluating entries and administering judging. BASA Awards takes reasonable steps to vet judges and requires judges to accept a judge agreement and comply with applicable confidentiality and judging obligations. Judges are required to use entry information only for their authorized judging responsibilities. Individual judges remain responsible for complying with those obligations. To the fullest extent permitted by applicable law, BASA Awards does not accept responsibility for unauthorized acts, omissions or misuse of information by an individual judge outside the scope of the judge's authorized role or in breach of the judge agreement.

If an entry contains personal information about another individual, the entrant or submitting organization is responsible for ensuring that it has an appropriate basis to provide that information to BASA Awards and for providing any notice required of it by applicable law.

VII. Service Providers and Other Recipients

BASA Awards uses trusted third-party service providers to operate its website, administer entries and judging, communicate with participants, process transactions and fulfill awards-related products. Current providers may include BBSA-Marketing.com, IthacaGallery.com, Ithaca Art, HubSpot, Leadpages, Mailjet, Shopify, Zapier and Zealous.co, where applicable.

These providers may process personal information only as necessary for the services they provide to BASA Awards and are expected to protect that information in accordance with applicable privacy and data protection requirements. Providers may change as our operational requirements evolve, and this Policy will be updated where a material change requires it.

We may also disclose personal information where required by law, regulation, court order or legal process, or where reasonably necessary to protect legal rights, investigate fraud or security incidents, enforce applicable terms, or protect users or the public.

We do not sell or rent personal information to third parties for their own marketing purposes. We may share aggregated or anonymized information that does not identify an individual with sponsors, partners or other organizations.

VIII. International Transfers of Personal Information

BASA Awards operates internationally and uses service providers that may process or store personal information in countries other than the country in which it was collected. These providers include, where applicable, Zealous.co, Ithaca Art, Shopify, HubSpot, Leadpages, Mailjet, Zapier and other technology or operational providers. This may involve transfers of personal information between the United Kingdom, United States, Australia, Canada and other locations in which our service providers operate.

Where applicable law requires safeguards for an international transfer, BASA Awards will use an appropriate lawful transfer mechanism or other required protection. Depending on the jurisdiction, this may include contractual safeguards, adequacy arrangements or other mechanisms recognized by applicable privacy law. Personal information processed in another country may also be subject to lawful access by courts, law-enforcement bodies or public authorities in that country.

IX. Payments

Credit-card payments are managed through Shopify. BASA Awards does not store full credit or debit card details on its servers and does not have access to customers' full payment-card details. Payment-card information is processed through Shopify's payment facilities in accordance with Shopify's applicable privacy and security obligations.

X. Cookies and Similar Technologies

Our website uses cookies, server logs and similar technologies to operate the website, remember preferences, maintain appropriate functionality and security, understand website use, analyze traffic and improve user experience. Depending on the technology used, information may include IP address, device and browser information, pages visited, referral information and interactions with the website.

Where applicable law requires consent before non-essential cookies or similar technologies are used, BASA Awards will request that consent. You can also manage cookies through your browser and any cookie controls made available on our website. Disabling certain cookies may affect website functionality.

XI. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including administering awards, maintaining appropriate records of entries and judging, providing services, meeting legal, tax and accounting obligations, resolving disputes, preventing fraud, maintaining security and protecting our legal rights.

Retention periods may differ according to the category of information and the reason it is held. When personal information is no longer required, we will delete, anonymize or otherwise handle it in accordance with applicable law.

XII. Security and Data Breaches

BASA Awards takes reasonable technical, administrative and organizational measures designed to protect personal information against unauthorized access, use, disclosure, alteration, loss or destruction. Access is limited to people and service providers who require the information for legitimate functions. No internet transmission or electronic storage system can, however, be guaranteed to be completely secure.

If we become aware of a personal-data breach or security incident, we will investigate and take appropriate steps to contain and address it. We will notify affected individuals and relevant regulatory authorities where notification is required by applicable law.

XIII. Your Privacy Rights

Privacy rights vary by jurisdiction. Depending on the law applicable to you, you may have rights to request access to personal information, correction of inaccurate information, deletion, restriction or limitation of processing, objection to certain processing, withdrawal of consent, data portability, information about our handling of personal information, and the right to complain to a privacy regulator.

To exercise a privacy right, contact awards@basawards.com. We may need to verify your identity before completing a request and may retain information where required or permitted by law. We will respond within the timeframe required by the law applicable to the request.

XIV. United States Privacy Rights

Privacy rights in the United States may vary by state. Where a U.S. state privacy law applies to BASA Awards and to a particular individual or processing activity, we will honor the rights required by that law.

California residents may have rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act, where that legislation applies to BASA Awards. Applicable rights may include rights to know or access, correct and delete certain personal information, and rights concerning the sale or sharing of personal information and the use or disclosure of sensitive personal information. BASA Awards does not sell or rent personal information to third parties for their own marketing purposes. We will not unlawfully discriminate against an individual for exercising an applicable privacy right.

XV. Australian Privacy Rights

Where the Australian Privacy Act 1988 and the Australian Privacy Principles apply to BASA Awards, we will handle personal information in accordance with applicable Australian privacy requirements. Individuals may request access to or correction of personal information and may raise a privacy complaint with BASA Awards.

If you are not satisfied with our response and applicable law permits, you may be able to complain to the Office of the Australian Information Commissioner. Because BASA Awards uses international service providers, personal information may be disclosed or transferred outside Australia as described in the International Transfers section of this Policy.

XVI. Canadian Privacy Rights

Where Canadian federal, provincial or territorial privacy legislation applies, BASA Awards will handle personal information in accordance with the applicable requirements. Depending on the law that applies, individuals may have rights to access and correct personal information, withdraw consent subject to legal or contractual restrictions and reasonable notice, and challenge BASA Awards' compliance with applicable privacy obligations.

Canadian residents may contact BASA Awards with privacy questions or complaints using the details at the end of this Policy. Where applicable, you may also have the right to complain to the Office of the Privacy Commissioner of Canada or the relevant provincial or territorial privacy regulator.

XVII. United Kingdom Privacy Rights

Where the UK GDPR and Data Protection Act 2018 apply, individuals may have rights including access, rectification, erasure, restriction, objection, data portability and rights relating to consent, subject to applicable conditions and exemptions. You also have the right to complain to the UK Information Commissioner's Office. BASA Awards encourages you to contact us first if you have a concern so that we can address it.

XVIII. Children

BASA Awards' website and services are intended for individuals aged 13 and over. We do not knowingly collect personal information directly from children under 13. If we become aware that personal information has been collected from a child in circumstances in which applicable law requires deletion or parental authorization, we will take appropriate steps in accordance with that law.

XIX. Do Not Track and Browser Privacy Signals

Some browsers and devices provide privacy preference signals, including Do Not Track or other browser-based controls. Legal requirements concerning such signals vary by jurisdiction and technology. BASA Awards will respond to legally recognized privacy preference signals where applicable law requires us to do so. Browser settings do not affect personal information that you voluntarily provide directly to BASA Awards.

XX. Links to Other Websites

Our website may contain links to third-party websites, services or platforms. Those services operate independently and have their own privacy practices. BASA Awards is not responsible for the privacy or security practices of third-party websites that it does not control. We encourage you to review the privacy information provided by those services.

XXI. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in law, technology, our business operations, our service providers or the way BASA Awards handles personal information. The revised Policy will be published on our website, and the last updated date will be changed. Where applicable law requires additional notice or consent for a material change or a new use of personal information, we will provide that notice or obtain that consent as required.

XXII. Contact and Data Controller Information

For the purposes of applicable privacy and data protection laws, the organization responsible for the personal information described in this Policy is:

BBSA Associates Limited

207 Regent Street, 3rd Floor – Office 127, London W1B 3HH, United Kingdom

Email: awards@basawards.com

ICO Registration: ZA415671

BASA Awards is a trademark registered in the United States of America and England and Wales.

Last updated: October 2026