Panel Privacy Notice
A legal disclaimer
Effective date: FEB 2025
Controller: Fathom Data Labs Pte. Ltd. (“Fathom”, “we”, “us”)
DPO: Mike Parsons - dpo@fathom.inc
1) What this notice covers
How we handle personal data for people who join the Fathom research panel (panelists). It does not cover client‑commissioned surveys where Fathom is a processor; see our Research Privacy Notice (Respondents).
2) Data we collect
-
Identity & contact: name, email, country/region.
-
Professional attributes: industry, seniority, function, company size (minimised).
-
Preferences & availability: topics of interest, preferred contact methods, language.
-
Operational metadata: sign‑up timestamps, source, device info, IP‑derived general location (fraud prevention).
We do not seek special category data for panel operations.
3) How we use your data
-
Create/maintain your panel profile, match you to research, and contact you with invitations.
-
Enforce frequency caps and manage unsubscribes/preferences.
-
Fraud prevention, security and quality (e.g., deduplication).
-
Fulfil incentives if we handle payouts directly (details collected separately and deleted after reconciliation, subject to legal retention).
-
Improve our services using anonymised/aggregated metrics (not identifying you).
4) Legal bases
-
Consent: to create a panel profile and send research invitations (captured via opt‑in).
-
Legitimate interests: for security, suppression lists, and fraud prevention (you may object at any time).
-
Where we rely on PDPA Legitimate Interests or Deemed Consent by Notification, we keep a written assessment and publish a summary where required.
5) Recipients and disclosure
-
Email/SMS providers, survey platforms, incentive processors, and secure hosting/analytics providers - all bound by contracts and safeguards. We currently use Alchemer as our survey platform.
-
Clients do not get access to your panel profile; they receive aggregated insights or de‑identified datasets.
-
Legal/safety disclosures where required by law or to protect rights.
6) International transfers
When data is transferred internationally, we apply safeguards such as EU SCCs (2021/914), UK IDTA/UK Addendum, and PDPA comparable protection (including ASEAN MCCs where appropriate).
7) Retention
-
Active panelists: reviewed annually. If no activity for 24 months, we close the profile and delete or anonymise within a further 3 months, unless law requires longer retention.
-
Suppression/opt‑out lists: kept for up to 5 years to honour preferences and prevent re‑recruitment, then minimised.
-
Anonymised/aggregated information may be retained for benchmarking and service improvement.
8) Your rights
Depending on applicable law (e.g., EU/UK GDPR or Singapore PDPA), you may have rights to access, rectify, erase, restrict, object, portability, and withdraw consent.
- How to exercise: email privacy@fathom.inc. We respond within one month where legally required.
- We do not re‑identify anonymised datasets in response to requests.
9) Cookies
Our panel sign‑up pages and portals may use cookies. Non‑essential cookies are off by default and enabled only with your opt‑in. Manage preferences via the cookie banner. See our Cookies Policy: https://www.fathom.inc/cookies-policy
10) Contact & complaints
-
Privacy/data rights: privacy@fathom.inc
-
DPO: dpo@fathom.inc
-
Compliance: compliance@fathom.inc
11) Updates
We may update this notice from time to time. The effective date shows the latest version.