The short version
- We collect your email address if you subscribe, and whatever you choose to tell us if you submit something.
- We send the newsletter only if you asked for it, and you can stop it from any email.
- Advertising cookies stay off until you switch them on.
- We do not sell your personal data, and we do not share it for anyone else's marketing.
- If you apply to join EBClub, that application goes to a separate company. Section 6 explains what passes and why, and EBClub has its own privacy notice.
- If you submit a listing to our provider directory, Section 7 explains what we do with it. It is held in the EU.
- Questions or complaints go to dpo@employerbranding.news, and we will acknowledge within 30 days.
1Who we are, and how to reach us
This notice covers employerbranding.news, the EBN newsletter, the podcast pages, the Exit Interview form, the Wiki, contributed articles, the jobs pages, the EBN provider directory and the public EBClub information pages.
It does not cover EBClub membership. EBClub is operated by Beyond Cloudnine Limited, a separate company registered in England and Wales under company number 16761069. Its notices are the EBClub Privacy Notice, Membership Terms, Community Guidelines, Cookie Notice and Provider Standards.
| Role | Who | Contact |
|---|---|---|
| Data Protection Officer | Mike Parsons | dpo@employerbranding.news |
| General enquiries | The EBN team | help@employerbranding.news |
| EU representative (Art. 27 GDPR) | Appointment in progress | This notice will be updated when appointed |
| UK representative (Art. 27 UK GDPR) | Beyond Cloudnine Limited | 33 Chapman Way, Haywards Heath, West Sussex, England, RH16 4UL |
Mike Parsons is our designated Data Protection Officer for the purposes of Singapore's Personal Data Protection Act. Beyond Cloudnine Limited is established in the United Kingdom and acts as our UK representative under Article 27 of the UK GDPR by written mandate.
2Which law applies to you
We are a Singapore company, so Singapore's Personal Data Protection Act applies to everything we do. Because we publish to readers in the United Kingdom and Europe, run a newsletter, and use analytics and advertising technologies, the UK GDPR and the EU GDPR also apply to us under Article 3(2). If you live in a US state with a comprehensive privacy law, that law applies to you too.
Rather than apply different standards to different readers, we apply the highest standard everywhere, then add the specific rights each law gives you. Section 9 sets out those rights.
3What we collect
| Category | What it includes | When |
|---|---|---|
| Contact | Name, email address | When you subscribe, contact us or submit something |
| Professional | Job title, employer, country, LinkedIn profile | Where you choose to give it |
| Subscription | Newsletter preferences, which emails you opened or clicked | While you are subscribed |
| Submitted content | Articles, Exit Interview responses, comments, questions, tips and pitches | When you submit them |
| Directory | Listing details, and the name and email of whoever submits a listing | When a listing is submitted |
| Technical | IP address, device and browser data, pages viewed, referrer, cookie identifiers | Automatically, subject to your cookie choices |
| Correspondence | Your messages to us and our replies | When you contact us |
We do not collect nationality, gender, date of birth, marital status, financial information or investment information. A previous version of this notice listed those categories. That was inherited template text and was never accurate. We have removed it.
4Why we use it, and our legal basis
| What we do | Legal basis |
|---|---|
| Send you the newsletter | Your consent |
| Run the website and deliver content | Our legitimate interest in operating a publication |
| Publish an article, Exit Interview response or comment you submitted | Performance of our agreement with you, and your consent where it identifies you |
| Publish and maintain the provider directory | Steps taken at your request before entering an agreement, and our legitimate interest in operating an accurate directory |
| Reply to you | Our legitimate interest in responding to correspondence |
| Measure how the site is used | Our legitimate interest in understanding how our content performs. Consent where cookie law requires it |
| Advertising and remarketing | Your consent |
| Pass your application to EBClub where you apply to join | Steps taken at your request before entering a contract |
| Show member content and send member communications | Our legitimate interest in operating a joined-up publication and community |
| Security and preventing misuse | Our legitimate interest in protecting the site |
| Meet legal, accounting and tax obligations | Legal obligation |
Under the PDPA we rely on your consent, or on an exception permitted by the Act, for the same activities. You can withdraw consent at any time as described in Section 9.
Where we rely on legitimate interests, we have considered whether our interest is outweighed by your rights. You can ask us for that assessment, and you can object at any time.
5Who we share it with
We do not sell your personal data and we do not share it with third parties for their own marketing.
| Recipient | Purpose | Where |
|---|---|---|
| Ghost Pro | Hosts the site, member records and newsletter delivery | Amsterdam, Netherlands |
| Tinybird, through Ghost | First-party, cookie-free website analytics | European Union |
| Directify (WebTouch Ltd) | Hosts and serves the EBN provider directory | Germany, with EU storage and email from Ireland |
| Cloudflare | Network security and delivery | Global edge network |
| Search Console, and advertising measurement where you consent | United States and EU | |
| Advertising and measurement, with your consent only | United States and Ireland | |
| CookieYes | Records and manages your cookie preferences | CookieYes Limited, United Kingdom |
| YouTube and Podbean | Host video and podcast content you choose to play | United States |
| Beyond Cloudnine Limited | EBClub membership applications and directory listings | United Kingdom |
| Professional advisers and authorities | Where legally necessary | As applicable |
6How EBN and EBClub work together
Employer Branding News and EBClub are operated by two different companies. Fathom Data Labs Pte Ltd publishes EBN. Beyond Cloudnine Limited operates EBClub. Each is a controller of the personal data it holds.
- If you only read EBN or subscribe to the newsletter, your data stays with us and EBClub receives nothing.
- If you apply to join EBClub from an EBN page, the information you give in that application passes to EBClub, which becomes the controller of your membership. From that point the EBClub Privacy Notice applies to it.
- Where you become an EBClub member, EBClub tells us your membership status so we can show you member content and send you member communications. Where you are a Provider, we display your directory listing on EBN.
- We also build and run the membership operations system that EBClub uses. When we do that we act on Beyond Cloudnine Limited's instructions as its processor, and we are not permitted to use EBClub membership data for our own purposes.
This sharing happens under a written data sharing agreement between the two companies. Our legal basis is our legitimate interest in operating a joined-up publication and community. You can object at any time by emailing dpo@employerbranding.news.
7The provider directory
The EBN provider directory at directory.employerbranding.news lists agencies, consultancies, platforms and specialists serving the employer branding profession. We operate it on a directory platform called Directify.
If you submit a listing
- The submission form asks for your name and email address, along with information about the organisation you are listing. We use your name and email to process the submission, to come back to you with questions, and to let you manage the listing afterwards.
- Our lawful basis is steps taken at your request before entering an agreement, and our legitimate interest in operating an accurate directory.
- Most listing content is about an organisation rather than a person, and organisational information is not personal data. Where a listing names an individual, for example a sole trader or a named contact, that is personal data and this notice applies to it.
- Submitting a listing does not guarantee publication. We review submissions before they appear.
- A listing is not an endorsement. We do not vet the quality of anyone's work and will not describe a listed organisation as approved or recommended unless we say so explicitly.
- You can ask us to correct or remove a listing at any time by emailing dpo@employerbranding.news, or by signing in to the business account you created when you submitted it.
If your listing came through EBClub
Where you hold EBClub Provider membership, your directory listing reaches us from Beyond Cloudnine Limited under the data sharing agreement described in Section 6, because a listing is part of what you paid them for. Ending your EBClub membership ends the listing. The Provider Standards set out what a listing must contain and what it must not claim.
Where the directory data is held
Directify is operated by WebTouch Ltd, a company registered in Bulgaria. It acts as our processor and holds directory data in the European Union: the application and database run in Nuremberg, Germany, uploaded files and backups are held in EU object storage, and transactional email is sent from Ireland.
8International transfers
Your personal data is transferred outside Singapore, and in some cases outside the United Kingdom and the European Economic Area, because our providers operate internationally.
| Where the data sits | Services | Position |
|---|---|---|
| European Economic Area | Ghost Pro (Amsterdam), Tinybird analytics, Directify (Germany and Ireland) | Covered by adequacy. No additional safeguard needed |
| United Kingdom | CookieYes, Beyond Cloudnine | Covered by adequacy |
| United States | Google, LinkedIn, YouTube, Podbean | Standard Contractual Clauses with the UK Addendum |
Where we transfer personal data out of the UK or EEA to a country without an adequacy decision, we rely on the European Commission's Standard Contractual Clauses together with the UK International Data Transfer Addendum. Under the PDPA, we take steps to ensure your personal data continues to receive a standard of protection comparable to that provided under the Act. You can request a copy of the safeguards we rely on.
The previous version of this notice said that we generally do not transfer personal data outside Singapore. That was not correct, and it has been replaced with the accurate description above.
9How long we keep it
| Data | Retention |
|---|---|
| Newsletter subscription | Until you unsubscribe, then a suppression record kept indefinitely so we do not email you again |
| Published contributed content | For as long as it remains published |
| Unpublished submissions and pitches | 12 months |
| Exit Interview responses | 36 months, or as stated on the form |
| Directory listings and submitter accounts | For as long as the listing is published, then removed from live systems without undue delay and from backups within 30 days |
| Correspondence | 24 months from last contact |
| Analytics data | 14 months |
| Cookie consent records | 12 months where you accepted, 6 months where you declined |
| Accounting and tax records | As required by law |
10Your rights
Depending on where you live, you have some or all of the following rights. We will never charge you or treat you differently for using them.
| Right | What it means |
|---|---|
| Access | Ask for a copy of the personal data we hold about you |
| Correction | Ask us to correct anything inaccurate or incomplete |
| Deletion | Ask us to delete your data where there is no good reason for us to keep it |
| Restriction | Ask us to pause using your data while a question about it is resolved |
| Objection | Object to processing based on our legitimate interests, and to direct marketing at any time |
| Portability | Ask for a copy of the data you gave us, in a machine-readable format |
| Withdraw consent | Withdraw consent at any time where we rely on it. This does not affect what we did before |
| Opt out of sale or sharing | Where you are in a US state that provides it, opt out of sharing for cross-context behavioural advertising |
| Non-discrimination | Not be treated worse for exercising your rights |
Under the PDPA you also have the right to withdraw consent to our collection, use or disclosure of your personal data, and to request access to and correction of it. We will process a withdrawal within ten business days and respond to an access or correction request within thirty days.
To exercise any right, email dpo@employerbranding.news. We will respond within one month. You can also unsubscribe directly from any newsletter, and change your cookie choices at any time from the cookie button on any page.
If your request concerns your EBClub membership rather than EBN, contact EBClub directly at dpo@ebclub.app. If you are not sure which, write to either and we will pass it on.
11How to complain
If you are unhappy with how we have handled your personal data, tell us at dpo@employerbranding.news. We will acknowledge your complaint within 30 days and handle it through our documented complaints process. In the United Kingdom, raising a complaint with the organisation first is a required step before escalating to the regulator. Coming to us first is not a barrier; it is the route.
If you are not satisfied with our response, you can complain to:
- Singapore: the Personal Data Protection Commission, pdpc.gov.sg
- United Kingdom: the Information Commissioner's Office, ico.org.uk
- EU or EEA: the data protection authority in the country where you live or work
- Elsewhere: your local privacy or data protection regulator
12Cookies and analytics
Our Cookie Notice explains every cookie we use, what it does, how long it lasts and how to change your choices. Advertising cookies are off until you turn them on, and you can withdraw consent at any time using the cookie button on any page.
We also use the analytics built into Ghost, provided in partnership with Tinybird. These use no cookies and no persistent browser storage, count unique visitors within 24-hour windows only, and store data in the European Union. Because nothing is stored on your device, they do not require your consent. If you are signed in as a member we record your member identifier and whether your membership is free or paid, so we can understand which content is useful. We do not share this with third parties and we do not use it for advertising.
The EBClub community platform sets its own cookies and is covered by the EBClub Cookie Notice.
13Security
We use encryption in transit and at rest, restrict internal access to those who need it, and assess our providers' security before we use them. No system is completely secure. We have a process for identifying and responding to personal data breaches and will notify you and the relevant authority where the law requires it.
14Children
Employer Branding News is intended for working professionals and is not directed at anyone under 18. We do not knowingly collect personal data from children. If you believe we have, email dpo@employerbranding.news and we will delete it.
15Changes to this notice
We will update this notice when what we do changes. The version number and effective date are at the top. Where a change is significant we will tell subscribers by email. Previous versions are available on request.
Employer Branding News Privacy Notice, version 2.0, effective 18 August 2026.
EBClub is operated by Beyond Cloudnine Limited, registered in England and Wales, company number 16761069, 33 Chapman Way, Haywards Heath, West Sussex, England, RH16 4UL. Employer Branding News is published by Fathom Data Labs Pte Ltd, registered in Singapore, company number 202410787C, 160 Robinson Road, #14-04, Singapore 068914.