Privacy and Cookies Policy

Privacy and Cookies Policy –

The Blair Partnership (the “Company”) with its registered office at 71 Queen Victoria Street, London, United Kingdom, EC4V 4BE is the “data controller” in respect of your personal information. Please note that this registered office address is not an address to which you should send fan mail. This Privacy and Cookies Policy sets out the basis on which any of your personal information we collect from you or third parties, or that you provide to us, will be processed by us in relation to the website (the “site”) and J.K. Rowling Website Ltd (which operates the site).

Please read the following carefully to understand our practices regarding your personal information and how it will be treated.


It is not the Company’s intention to collect any personal information about you, however, the Company may incidentally collect personal information from you when you:

  • contact us or request information from us in any other way;
  • use our website; or
  • communicate with us via social networking websites, third party apps or similar technologies.

We will indicate where any personal information we have requested is mandatory or optional. We will also explain the consequences should you decide not to provide information which we have indicated is mandatory. In some circumstances this may mean we are unable to provide you with a certain service.

We may also collect information about you from third party sources, such as from your use of other websites which we operate, and from related third parties such as sub-contractors or publishing companies with whom we work.


We may collect and process personal information about you which you provide to us, such as your contact details (e.g., your name, address, country, or email address); and demographic information (e.g., your age and/or other information that may identify you as an individual)

If you contact us with a complaint or query, we may keep a record of the correspondence.


We may process your personal information for the following purposes:

  • to provide you with the information and services you have requested;
  • for system administration purposes and for internal operations to ensure that content is presented in the most effective manner for you and for your device;
  • to carry out social media engagement and promotional activities;
  • to provide customer support and ensure we provide a good level of customer service;
  • to notify you of any changes to our services;
  • for security and fraud prevention and to ensure that our website and digital properties are safe and secure; and
  • to comply with applicable laws and regulations.


We will only process your personal information where we have a legal basis to do so. The legal basis will depend on the purposes for which we have collected and use your personal information. In almost every case the legal basis will be one of the following:

  • Consent: For example, where you have given us your permission to use your personal information as part of our social media activity.
  • Our legitimate business interests: Where it is necessary for us to process your personal information as part of the normal operation of our business, provided in each case that this is done in a legitimate way which does not unduly affect your privacy and other rights. For example, where you contact us about the site and it is necessary for us to handle your personal information as part of our customer service.
  • Performance of a contract with you (or in order to take steps prior to entering into a contract with you).
  • Compliance with law: Where we are subject to a legal obligation and need to use your personal information in order to comply with that obligation.


The personal information that we collect may be transferred to, and stored at, a destination outside the UK and/or European Economic Area (the “EEA”), including countries, which have less strict, or no data protection laws, when compared to those in Europe and the UK.

Whenever we transfer your information as described in the paragraph above, we will take steps which are reasonably necessary to ensure that adequate safeguards are in place to protect your personal information and to make sure it is treated securely and in accordance with this Privacy and Cookies Policy. In these cases, we rely on approved data transfer mechanisms (such as the EU “Standard Contractual Clauses” and the EU-US “Privacy Shield”) to ensure your information is subject to adequate safeguards in the recipient country. If you are located in the EEA or the UK, you may contact us for a copy of the safeguards which we have put in place to protect your personal information and privacy rights in these circumstances.


We take steps to ensure that the personal information that you provide is retained for only as long as it is necessary for the purpose for which it was collected. After this period it will be deleted or in some cases anonymised. For example, we may keep a record of any correspondence with you (for example if you have made a complaint) for as long as is necessary to protect us from a legal claim.


If you are under the age of 13, you may only use the site and provide personal information if you have the consent of, and are supervised by, a parent or guardian. We maintain reasonable procedures to protect the confidentiality, security, and integrity of personal information collected from children, and we do not ask for more personal information than is necessary for a child to participate in an activity.

Upon proper identification, a parent or legal guardian may access and review the personal information we have collected about his/her child, request deletion, or refuse to allow further collection or use of the information.

Please contact us at to access or delete your children’s information or with any questions regarding this Privacy Policy and your child’s privacy.


We maintain reasonable technical and organisational measures to protect personal information from loss, misuse, alteration, or unintentional destruction. Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal information, we cannot guarantee the security of your information as it is transmitted to us.


We may disclose your personal information to the following categories of third parties:

  • within our group of companies (i.e. our subsidiaries, our ultimate holding company and its subsidiaries, as defined in section 1159 of the UK Companies Act 2006);
  • with our suppliers, business partners (including publishing companies with whom we work), social media networks, and service providers, where they are helping us to promote the site and its content as well as providing our services to you;
  • with business reorganisation parties, in the event that we sell any business or assets, in which case we may disclose your personal information to the prospective buyer of such business or assets;
  • if we or substantially all of our assets are acquired by a third party, in which case personal information held by us about our customers and visitors to our websites will be one of the transferred assets;
  • with authorities or similar third parties (e.g., auditors) requesting mandatory disclosure in compliance with applicable law, if we are under a duty to disclose or share your personal information in order to comply with any legal or regulatory obligation or request; or
  • with other companies and organisations for the purposes of fraud protection to protect the rights, property or safety of us or our users, or others, and in order to enforce or apply our terms and conditions (this includes exchanging information).


This site does not use cookies or similar technologies (such as pixels, web beacons, hashed emails, tags) outside of “essential cookies.”

Cookies are small files saved to your browser or device, and can be divided into four categories: essential, functional, analytical, and advertising. The only cookies we use are essential cookies, which enable core functionality, security, and accessibility (e.g., how a webpage looks and operates in relation to the device or browser you are using). These essential cookies are “session cookies” and are deleted at the end of a browser session (normally when a user exits his/her browser).

You can object to such cookies through your browser settings, however, please note that without essential cookies, some features or activities may be limited or not available to you. For more information on how to control cookies on your browser, or about cookies generally, please see

We also use a local storage mechanism (LSM), in place of cookies, to improve and customise your experience on our website. The LSM acts like a functional cookie but adds an additional layer of privacy in that the LSM cannot be read by our servers, only you! This means that the LSM cannot be used for tracking you online. Browser settings will not allow you to manage LSMs, you may be able to manage them by alternative means. To learn more, see


Given the divergent practices of organisations that offer browsers and the lack of a standard in the marketplace, we do not respond to DNT signals at this time.


You have certain rights in relation to your personal information. These include: the right to object to the processing of your information for certain purposes, the right to access your personal information, and the ability to erase, restrict or receive a machine-readable copy of your personal information.

We will handle any request to exercise your rights in accordance with applicable law and any relevant legal exemptions. If you wish to exercise any of these rights please conduct us using the contact details below.

You may also have the right to complain to a data protection authority if you think we have processed your personal information in a manner which is unlawful or breaches your rights. If you have such concerns we request that you initially contact us (using the contact details below) so that we can investigate, and hopefully resolve, your concerns.

Our website and other digital properties may, from time to time, contain links to and from third party websites and services (including third party social media platforms). If you follow a link to any of these websites and/or services, please note that they have their own privacy policies and we do not accept any responsibility or liability for them. Please check any such third party privacy policies before you submit any personal information to these websites or services.

California law requires that we describe the personal information that we have collected about California consumers in the past 12 months, by identifying specific categories of personal information. We have collected the following:

    • Identifiers;
    • Internet or other electronic network activity information; and
    • Characteristics of protected classifications under California or Federal law, such as age or national origin;

For more details on what is collected, or for information regarding the sources of such personal information, please see sections “How and When We Collect Personal Information About You” and “What Personal Information Do We Collect About You” above. For information regarding how we may use or disclose such personal information, please see sections “Purposes for Processing Your Personal Information” And “Disclosing Your Information” above.

California law also mandates that we specify certain disclosures, as some disclosures constitute a “sale” of data under California law, even if no money is exchanged. We do not sell personal information. However, we may have disclosed the following personal information to the following categories of third parties for our operational “business purposes” as defined by California law, in the last 12 months:

  • J.K. Rowling Website Limited and The Blair Partnership LLP
  • Our suppliers, business partners, social media networks, and service providers.
Characteristics of protected
classifications under California or federal law, such as age or nation origin
  • J.K. Rowling Website Limited and The Blair Partnership LLP
  • Our suppliers, business partners, social media networks, and service providers.

In addition to the right to access the personal information that we collect, use, disclose, and sell, and the right to deletion, as described above, California residents also have the right to access specific pieces of information we hold about them, and the right to opt-out of the sale of their personal information. However, we do not sell personal information, nor do we have any actual knowledge of any sale of personal information of minors under 16 years of age.

You have the right to not be denied goods or services for exercising your rights.

If you wish to exercise any of these rights or have any questions or concerns regarding the processing of your personal information, please contact us at We will respond to your request consistent with applicable law.

Please note, however, before we will be able to process your request for access or deletion of personal information, we will need to properly verify your identity for security purposes. Where we possess appropriate information about you on file (e.g., name, email address), we will attempt to verify your identity using that information. We will be able to confirm the precise information we require to verify your identity in your specific circumstances if and when you make such a request.

To use an authorised agent to make a request on your behalf, you will need to directly confirm with us that you provided the authorised agent permission to submit the request, provide the company with signed permission for the authorised agent to act on your behalf, and you will need to verify your identity, directly with the company.


We may change this Privacy and Cookies Policy at any time. The new Privacy and Cookies Policy will be displayed on our website. The date this Privacy and Cookies Policy was last updated appears at the bottom. If any changes occur, that materially impact previously collected information about you, we will make reasonable efforts to notify you.


Questions and comments regarding this Privacy and Cookies Policy should be sent to The Blair Partnership, P.O. Box 7828, London, W1A 4GE. This address should not be used for fan mail.

This Privacy and Cookies Policy was last updated on 26th May 2020