Peacock Privacy Policy

This document is Peacock's (NBCUniversal's) primary privacy policy governing data collection, use, and disclosure across the full suite of NBCUniversal Services, including streaming, theme parks, studio visits, events, and business-to-business relationships, with legal bases articulated for GDPR-applicable jurisdictions including the EU, UK, and Brazil. The agreement states that NBCUniversal collects an exceptionally broad range of data categories including biometric identifiers, health data, precise geolocation, wellness and fitness data, keystroke activity, and inferences derived from combining first-party, third-party, and commercially sourced data, and the terms authorize sharing this information with advertising partners, social media platforms, related businesses, third-party partners, and audience measurement companies such as Nielsen. The policy asserts the right to aggregate or de-identify personal information and use, share, rent, or sell such data for any purpose without restriction, and separately acknowledges that disclosures to advertising partners and related businesses may constitute a 'sale' under applicable state law, while also reserving the right to use sensitive personal information including precise location for targeted advertising to the extent permitted by law. The policy engages CCPA and state privacy laws across at least 19 U.S. states, GDPR and UK GDPR, Brazil's LGPD, COPPA for services directed at children under 13 in the U.S. and under 16 in the EU, and Nielsen audience measurement frameworks, with opt-out mechanisms available primarily through brand-level footer links that are device- and browser-specific. Material compliance considerations include the breadth of sensitive data categories collected, the acknowledgment of joint controller status with Facebook Ireland under GDPR, data flows to Versant as a former affiliate, and the assertion that de-identified data falls entirely outside the scope of this policy.