Privacy

Updated: July 3rd, 2025

This policy explains how we collect, use, and disclose your data, and how we use cookies. It covers all the data collection activities (online and offline) of two Harry Potter entities, Wizarding World Digital LLC and Wizarding World Digital Limited ("we", "us" or "our"). When you use our websites or apps, play our games, visit our studio tours, purchase our products or services, or otherwise interact with our businesses online or offline (collectively referred to as “Services”), we may collect information about you (“Information”), including information considered “personal information” or “personal data” under applicable privacy laws.

This Privacy Policy is not for Services or experiences directed to children. If you would like more information about how we handle children’s Information, please visit our Children’s Privacy Policy, which explains how we handle children’s data on child-directed Services and in child-specific experiences.

This Privacy Policy contains:

Who Are the Data Controllers?

This privacy policy is provided by Wizarding World Digital LLC and its subsidiary Wizarding World Digital Limited, which jointly control how your personal information is used. The contact us section later in this policy explains how you can contact us.

In some cases, third parties may act as independent controllers of your personal information, as explained further below.

What Information Do We Collect?

We collect Information when you interact with our Services online or offline. In general, the Information we collect is either (a) provided by you, (b) collected by us when you use our Services, or (c) given to us by third parties.  Where required by law, we get your consent to collect this Information. This Information includes:

  • Account and Contact Information: Name, phone number, postal address, email address, username, password, age, or birth date.

  • Payment, Purchase and Account Information: Credit, debit or other payment card information and Information about your subscription, account, purchases, or discounts.

  • Demographic Information: In limited cases, gender, physical or mental health, race, or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, or political affiliation.

  • Location Information: coarse location (i.e., Information derived from device information associated with your IP address, city or country code, or address) or precise location for limited services and/or region-specific offerings.

  • Device and Other Technical Information: Information about your hardware, operating system, browser type, browser settings, your mobile carrier or Internet Service Provider, and unique identifiers associated with your device, including IP address.

  • Photos, Videos, or Audio Information: Images or recordings from your device or that you otherwise post or submit to us or photos or recordings of you from live experiences or events.

  • Usage and Viewing Information: Films, TV shows, and videos that you view (including title and genre, watchlists you compile, and searches you conduct), webpages, apps, and ads you see and interact with, as well as the accounts you link together, including recordings of your interactions with our Services, which may include mouse clicks, mouse movements, keystrokes, and page scrolling. When you use our Service, you consent to the recording of your interactions with us.

  • Social Media Information: Information about your social media engagement and interaction with social media sites.

  • Wizarding Passport™. You may choose to register for one or more of our sites, which refers to both your account and certain of the information you provide or are allocated in connection with your account (such as your Hogwarts house, wand, patronus, pet etc.). Your account will identify you as user of the http://harrypotter.com sites and services and will serve as your credentials for logging into and using the sites and services and for other purposes. If you connect your http://harrypotter.com account to an account maintained by one of our business partners, then we will share certain information from your profile with that partner. We will tell you what information will be shared before you connect with another organization via http://harrypotter.com. When you do connect with that organization, we may receive certain information in return (e.g. achievements in a game).

  • Other Information You Provide: Information you provide when you use our Services or participate in our events, surveys, or promotions or when you interact with us or others on our channels, pages, and accounts on social media and other companies’ platforms. For instance, we may collect chats, comments, posts, customer service communications.  We may also collect data that could be considered biometric if you choose to participate in one of our interactive research studies or other initiatives that involve the collection of this data.

Depending on the country where you are based, some of the Information that we collect may be considered as ‘sensitive’ or ‘special category’ Information and may include ‘Payment, Purchase and Account Information’, ‘Demographic Information,’ ‘Location Information’ or ‘biometric Information’. We recognize the additional sensitivity of this type of Information and only use such information as described in this Privacy Policy or otherwise permitted by law.

What Are Our Sources of Information?

In addition to the Information we collect from you directly, Harry Potter may receive Information about you from a variety of sources, including other individuals and third-party businesses. For instance, we may receive Information about you from the following sources:

  • Friends and Other People. We may receive Information from people you know, such as when a friend invites you to participate in an offering, makes recommendations, or discloses content to you.

  • Companies You Direct to Disclose Information. We receive the Information you ask other companies to provide to us, such as your mobile carrier, your device carrier, or your cable or TV provider for authentication and personalization, to receive access to our content, or to participate in special events.

  • Information from Affiliates and Third Parties. We combine the information we process about you with information we receive from other organizations. This includes information from Warner Bros. Discovery and its affiliates, organizations sponsoring or co-branding our or our affiliates’ content, as well as inferences about your demographic, preferences, and other information from other business partners, advertising companies and research services. We may receive Information from third parties with which you have a subscription agreement that includes access to our content or services, such as a cable or smart device provider.

  • Linked Sites and Tools. We may receive Information from websites and tools offered by companies that are not affiliated with us, but that are linked to or integrated in our Services or provide links to our Services, such as third-party communities, forums, and social media sites, services, plug-ins, and applications. Your interactions with websites and tools offered by companies that are not affiliated with us are covered by the privacy policies of those companies, not this Privacy Policy. You should carefully read the privacy policies of websites and tools you use.

  • Publicly Available Sources. In limited cases, we may get Information from publicly available sources.

  • Technology and Service Providers. We may receive Information from our service providers and other technology partners we work with, such as companies that assist us with account validation, analytics, fraud prevention, or otherwise help us run our Services, including attractions, events, and exhibits such as a film premier or influencer event.

  • Advertising and Marketing Partners. We work with advertising and marketing partners, such as advertisers, app developers, publishers, and data providers that enable us to purchase or deliver ads as well as personalize, target, and measure the performance of those ads or campaigns.  These partners may provide Information about your preferences or interests or may provide Information that is inferred or derived based on your information, activity, or interactions from different businesses not associated with us.

  • Joint Venture, Promotional, or Strategic Partners. When we partner with other companies, we may receive Information from them.

We may combine this Information with Information we collect directly from you.

How Do We Use the Information We Collect?

We use Information only as permitted or required by law and as described in this privacy policy or otherwise disclosed at the time of collection.

There are certain circumstances where you may choose whether to provide your Information to us or not.  If you choose not to provide such Information or provide incomplete Information, we may not be able to provide you with our Services.

For more information on the legal grounds applicable to our processing of Information under GDPR and other comparable data protection laws around the world, see below.

(1) Basis: where necessary to perform a contract with you (or to take steps at your request before entering into a contract)

  • Purposes of processing:

    • To provide you with access to content, products, services and other features on or via the sites.

    • To process your registration for a site, competition, prize draw or contest, and to administer your account or entry in accordance with any related contractual terms.

    • To send you information about changes to our terms or policies.

    • To process your payment and to fulfil your purchase or other transaction, including related communications about those.

(2) Basis: where necessary for purposes of our or third parties’ legitimate interests

  • Purposes of processing (and related legitimate interests):

    • To respond to your inquiries, e.g. to send you information you have requested, and to offer customer/user support services (fulfilling your request and providing you with such assistance).

    • To assist with the security and safety of our sites and users, e.g. by trying to prevent unauthorized or malicious activities (making our sites safe for users).

    • To enforce compliance with our terms and policies and to help other organizations, such as copyright owners, to enforce their rights, including by sharing your information with relevant third parties to assist us or them in pursuing available remedies and/or limiting any loss or damage sustained (protecting our and others’ rights).

    • To detect and prevent fraud (tackling fraudulent activity).

    • To analyze and understand how our sites are used, including by aggregating data about categories of users and by informing surveys, so that we can develop, maintain, personalize, protect and improve our sites (researching site usage and compiling usage statistics with a view to operating our sites more effectively and enhancing them to improve your experience), including assessing features of an Service and options to encourage more engagement.

    • To send direct marketing to you and to tailor content, targeted advertisements, offers and surveys for you, where we do not need consent to do so (promoting content, products and services from us and/or our affiliates, direct or via our or their advertising partners, that we believe may be of interest to you). Information you provide on one Service may be used to provide targeted marketing and/or advertising on another Service.

    • To improve and develop our products and services, which may include recording and transcribing any feedback that is collected from you through telephone or other interviews that we conduct, or that are conducted by us or on our behalf by third parties.

(3) Basis: where you give us consent

  • Purposes of processing:

    • To send direct marketing communications to you at your request, where we need your consent (for example, marketing emails or push notifications).

    • To place cookies and to use similar technologies with your consent (where we need your consent to do so).

    • To collect your precise location with your consent (where we need your consent to do so).

    • To process your log-in to our sites using social media or other credentials or to facilitate your interaction within our sites and with social media or other third parties through our sites, where we need your consent to do so.

    • On other occasions where we ask you for consent, for a purpose which we explain at that time.

(4) Basis: where necessary for complying with our legal obligations

  • Purposes of processing:

    • In response to requests by government or law enforcement authorities conducting an investigation.

    • To comply with any other legal requirements.

We only keep Information for as long as we need it to fulfil the purpose we are using it for, as permitted by law.

Who Do We Disclose Your Information To?

We may disclose Information to:

  • Service Providers. We WBD hires vendors and other companies to perform services for us such as creation, maintenance, hosting, delivery, and marketing of our Services. This may include processing payments, email and order fulfillment, administration of contests, customer service, or conducting research and analytics, including recording of mouse movements or clicks, keyboard strokes/touches, page scrolls, typed text or other interactions during a user session. We may also use service providers to enable our chat, comments, or survey features, to moderate comments and chat among our users or to verify disclosures from influencers we work with. These chat, comment, survey, or moderation service providers may obtain recordings of your comments, text, or voice communications for purposes of making the feature available, improving our services, or addressing potential abuses of our Terms of Use  or other concerns on behalf of our users.

  • Wizarding World Digital entities and affiliates. If one of us, i.e. Wizarding World Digital LLC or Wizarding World Digital Limited, separately collects any of your information in the first instance, then the collecting entity will share such information with the other (acting as a joint controller). If we establish any subsidiaries, we may share your information with them for use in accordance with this policy (e.g. as processors acting on our instructions). We also share information with Warner Bros. Entertainment Inc. and our parent Warner Bros. Discovery and its affiliates to use in accordance with their own privacy policies, including (with permission, where required) to provide, improve, offer, market and otherwise communicate with you about their own products.

  • Business Partners and Third Parties. We may disclose Information to business partners and third parties (e.g., other companies, retailers, distributors, social media networks, research organizations, publishers, and non-profit organizations) for their own purposes, including marketing products or services to you, showing you relevant advertising, or providing an enhanced experience that integrates with one of our Services. When required, we will ask for your consent or provide opportunities to opt-out.

  • Sponsors, Co-promotions, and Branded Programs. We may offer content or programs (e.g., competitions, sweepstakes, promotions, games, applications, branded community or panel programs or social media integrations) that are sponsored by or co-branded with third parties that may collect or obtain Information from participants. When you participate in branded community or panel programs your name and contact information may also be disclosed to other participants or made public.

  • Advertising and Marketing Companies. We may disclose Information with advertisers, ad agencies, ad networks and platforms and other companies to provide advertising to you based on your interests. When required, we will ask for your consent or provide opportunities to opt-out.

  • Legal and Law enforcement Purposes. We may disclose Information in response to legal process, for example in response to a court order or a subpoena, or in response to a law enforcement agency's request. We may disclose Information to third parties for fraud prevention, to investigate or prevent illegal activities or violations of the terms of use of our Services, to protect the rights and safety of others, or as otherwise required by law.

  • Change of Control. We may transfer Information in the event of an actual or potential business transaction, such as if one or more of our business units or assets are acquired by, sold to, or merged with another company or as part of a bankruptcy proceeding or a business reorganization.

  • Others. We may disclose Information at your direction or when you provide us with your consent to do so, for example, when we disclose information to a third party to link an account you have with us to the third party’s account.

What Do You Need to Know About Cookies and Other Identifiers?

A cookie or other tracking technology is a small piece of script or code that is stored on your browser or device to help websites and apps remember you and collect information about your use of the Service. We use cookies, web beacons, SDKs, pixels and other tracking technologies (collectively referred to as “cookies”) to make your experience on our Services better. These technologies help recognize your browser or device, maintain your preferences, and provide certain features (like storing a high score on a game or saving your location). We (including our affiliates) and third parties may use these technologies to collect information over time from apps, websites, and other digital products. We and third-party advertising companies may use this Information to help serve advertising tailored to your interests, both on and off the our Services. These technologies also help measure advertisements across our Services, marketing emails and other third-party websites, apps, devices, and services.

We may also work with third parties that collect data about your use of the Services and other sites or apps over time for non-advertising purposes. For example, we use Google Analytics and other third-party services to improve the performance of the Services and for other analytics purposes. These third parties are responsible for their cookies and identifiers, and may use them for their own purposes with your consent. For more information, see Google’s Privacy & Terms. To opt out of Google Analytics, visit https://tools.google.com/dlpage/gaoptout . On some Services, we also uses Nielsen to allow users to contribute to market research. For more information, visit the Nielsen Digital Measurement Privacy Policy

Please see the How Can You Control Your Information? for more information about your choices with respect to Information collected via cookies.

**How Can You Control Your Information?  **

There are a number of tools and options you can use to help control how your Information is collected, used, and disclosed.

  • Individual Rights: depending on the country where you are based, you may request certain rights, including the following:

    • Right to know: You have the right to know whether your Information is being processed by us and to receive certain information about that processing, including how we obtained your Information.

    • Right to access and rectification: you can request Information we hold and the correction of any errors of your Information. In certain circumstances, you may also request that we communicate any request for rectification to any third parties we have shared your Information with, unless this would prove impossible or involve disproportionate effort.

    • Right to erasure/deletion: the right, in certain circumstances, to ask for your Information to be deleted or de-identified. In specific cases, we may not be able to delete or de-identify some types of Information, in particular, where we have a legal obligation to keep that Information (e.g., for regulatory reporting purposes), or where you want us to continue to provide you with a Service and the processing of the Information is necessary for the provision of that Service. In certain circumstances, you may also request that we communicate any deletion request to any third parties we have shared your Information with, unless this would prove impossible or involve disproportionate effort.

    • Right to restriction of processing: the right, in certain circumstances, to restrict further processing of your Information.

    • Right to portability: the right in some cases to receive your Information in a digital format or to have it transmitted directly to another controller (where technically feasible)

    • Right to object: The right to object (on grounds relating to your particular situation) to the processing of your Information on the basis of our legitimate interests, including for direct marketing purposes or the right to object to being subject to a decision based solely on automated processing.

    • Right to withdraw consent: you can withdraw your consent at any time in respect of any processing of Information which is based upon a consent. However, the withdrawal of your consent shall not affect the lawfulness of our processing of your Information prior to such withdrawal.

    • Right to claim compensation and to lodge a complaint before the supervisory authority for data protection in your country, if you consider that your rights under the applicable privacy legislation have been infringed.

To exercise any rights that apply where you live, including those listed above, please submit a request by navigating to the appropriate portal.

  • If you are based in the US, please submit a request via the Privacy Center. Residents of some US states have specific rights relating to access, deletion, and correction requests. Please visit the US State Supplement page for a description of those state-specific rights.

  • If you are not a US resident, please submit a request via the Harry Potter Individual Rights Request Portal.

  • Marketing Communications. If you would like to stop receiving email or text marketing communications from us, follow the “unsubscribe” instructions provided in the relevant email or respond “STOP” to the relevant text. In certain Services, you may also be able to opt out via the settings when you log into your account.

  • Third-Party Targeted Advertising. You can also opt out of targeted advertising on websites by third parties that participate in self-regulatory programs via the following links:

  • Browser and Device Settings. You may have more options depending on your mobile device, operating system, or browser. Please review the support materials and/or the privacy settings for the respective devices and systems to learn more about these features and how they apply to targeted advertisements. Blocking cookies may also prevent you from accessing some of our content or Service features.

  • Precise Location Information. To disable collection of mobile device precise location information through our apps, please access your device settings and choose to limit that collection.

  • Cookies. See What Do You Need to Know About Cookies and Other Identifiers? for more choices about managing other technical and usage information.

Please note some of the rights detailed above are not absolute, might not all be available in your country, and may not be applicable in certain scenarios. If you have any particular questions about your data protection rights, feel free to reach out to us by email at wbdprivacy@wbd.com.

International Transfers

Wizarding World Digital LLC is a company located in the USA, and Wizarding World Digital Limited is a company located in the UK. When you use our http://www.harrypotter.com sites and services, Wizarding World Digital LLC and Wizarding World Digital Limited collect or receive your data in the USA and UK respectively. This means that personal information we collect will be processed by us or on our behalf in the UK and the USA. Data protection and privacy regulations in the USA may not offer the same level of protection as in other parts of the world, such as the EEA.

Please see our Affiliates & Controllers List for the countries where your Information may be transferred.

Whenever we transfer your Information outside of a country or region, such as the European Economic Area, we will ensure that appropriate safeguards are in place in compliance with applicable law. Usually, this includes using contractual mechanisms (such as standard contractual clauses), but sometimes we may use other legal mechanisms. For further information about the mechanisms we use to protect your Information when it is transferred outside of your country or region, please contact us through one of the methods described below.

How Do We Secure Your Information?

We have implemented appropriate technical and organizational measures for the security of your Information, in line with legally required standards. However, despite our best efforts, events outside of our reasonable control could occur that may result in the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to your Information.

What Happens If We Change or Revise This Policy?

From time to time, we may update this Privacy Policy and post the updated Policy here. We encourage you to periodically check back and review this Policy so that you always know our current privacy practices.

How Can You Contact Us?

Wizarding World Digital LLC, a limited liability company registered in the United States, and Wizarding World Digital Limited, a private company limited by shares registered in England and Wales, jointly control how your information is used. We work together to make decisions about use of information and to respond to queries, or to respond to requests to exercise personal data rights.

In respect of UK or other EEA-located users, Wizarding World Digital Limited has been appointed as the representative in the EEA of Wizarding World Digital LLC. If you have any questions about this Privacy Policy you can contact us and our Data Protection Officer:

  • by email at wbdprivacy@wbd.com;

  • by post (marked for the attention of the Wizarding World Digital Data Privacy Team) at:

    • Privacy Office, 4000 Warner Blvd., Bldg. 700, Burbank, CA 91522, USA; or

    • Warner House, 98 Theobalds Road, London WC1X 8WB, UK.

Complaints will be handled internally in an expeditious manner but depending on the country where you are located in, you may have the right to lodge a complaint directly with the regulator.