Its A) codified into a business contract, not the actions of a private individual B) the use of private metadata and C) the stipulation that BBC is the enforcement mechanism that is problematic here.

Otherwise the BBC would quickly find that when they are late paying the contractors who work on their website their credit cards mysteriously get charged for the services rendered.