The Fundamental Media Group (“Fundamental Media”, “us” “we” or “our”) operates as a specialist media agency, with offices in London, Boston, Sydney, Hong Kong and Singapore. Our parent company, Fundamental Media Limited, is registered in England and Wales and is responsible for deciding how the group handles personal data. We operate as a specialist media agency providing our clients with media planning and buying expertise, together with media intelligence. Further detail about what we do together with our contact details are set our below.

This Policy applies to the personal data we process as part of our business. Whilst our group of companies will deal with your data in accordance with this Policy, it doesn’t apply to any other companies or organisations that we work with and you are therefore encouraged to check other privacy policies as they may apply to you.

We understand that the privacy and security of your personal information is extremely important. Therefore, this Privacy Policy (“the Policy”) explains how we use any personal data we collect about you, including via our website www.fundamentalmedia.com (and any other websites operated by our group of companies) (the “Website”), together with what we do to keep it secure. This Privacy Policy also includes an overview of the services we provide to our clients, where we process personal data on their behalf as their data processor. All personal data collected about you will be processed by us in accordance with this Policy and the applicable data protection legislation as is in force from time to time. “Personal data” (or “personal information” as the terms may be used interchangeably in this Policy) means information that identifies you as an individual or is capable of doing so.

Local data protection laws apply to our collection and use of personal data but include the General Data Protection Regulation (“GDPR”) and the Californian Consumer Privacy Act (“CCPA”) (in each case the “Applicable Data Laws”). The terms used throughout this Privacy Policy are taken from the GDPR. However, where local laws apply and use terms with a similar meaning, the terms used in this Policy shall, where the context so dictates, be substituted with those terms. For example, in relation to the CCPA, the terms “personal data” shall be read as “personally I information”, the term “data controller” shall be read as “business” and “data processor” shall be read as “service provider”.

Additional privacy information applies to certain services we provide (e.g. Fundamental Monitor and CPD Hub). This information is provided in the form of specific Privacy Notices, which you are invited to read when registering or subscribing for these services. This Privacy Policy does not cover our processing in connection with our recruitment, please see our separate Careers Privacy Notice for further information.

We may need to make changes to this Privacy Policy from time to time as Applicable Data Las evolve or due to changes in our business and technology. This Policy was last updated on 19 May 2020.

This section describes what we do as a business and the context in which personal data is processed.

Our clients work across the asset management, securities services, investment and corporate banking, reinsurance and private banking sectors within the finance industry and separately within high-profile education institutions promoting undergraduate, postgraduate and professional qualifications. The nature of the products and services we provide to our clients drives the nature of the personal data we process.

We provide our clients with media planning and buying services and media intelligence, this includes undertaking market research, event analysis, campaign data analytics and the procurement and placement of advertising on publisher and other websites and via various media platforms. We also offer our clients other online proprietary services. In order to provide these, we require limited personal information to grant access and monitor usage in accordance with fair usage policies (e.g. Fundamental Monitor).

We also use personal information in the day to day operation of our business, in order to maintain contact with our clients and potential clients as well as for administration, recruitment and employment purposes.

This section sets out the categories of personal data we collect in operating our business and providing services to our clients, together with the “lawful basis” upon which we do so. It also describes where the data is sourced and the purposes for which it is used.

We collect and use information about you when you enquire about Fundamental Media and/or our services and request information from us, to provide you with the services you have registered for and, with your consent, to contact you about other of our products and services which may be of interest to you. We also collect and use the information you provide where you participate in our market research, respond to our surveys or otherwise provide feedback to us.

We also collect and use information about your use of our Website using cookies and other similar technologies, using our cookie consent tool. Where a visitor accepts cookies we use that data to: (a) analyse how our site is used so that we can make improvements to it and (b) personalise content and advertising and provide social media features. Our cookie policy explains how cookies work and the information we collect in more detail. [Link to Cookie Policy]

Separately, we use information collected from websites you visit belonging to our clients and/or particular publishers or media owners via cookie or similar technology. This enables us, as a media agency, to advise our clients on the advertising of their products and service, including the placing and tracking of online advertising. The capacity in which we act in processing this data depends, on the solution we provide. This data is generated and used by us in an aggregated and anonymized form. We also collect or use information from other organisations who provide aggregated information. We do not pass or share this information with any third parties (other than our data management platform providers for the provision of the services). If you do not wish not to share information about your browsing activity, you can choose not to accept a cookie or other cookie-like technology on your device via our client’s or via publisher cookie consent tools on their digital properties (see section 4.5 Advertising Planning and Buying for more information).

Please see below for more detail on how we use your personal data in each of the above areas, as well as in the day to day to day operation of our business, in maintaining contact with our clients and suppliers, as well as for administration, recruitment and employment purposes.

We are only able to process your personal data where we or our client (for whom we act as data processor) have a legal ground for doing so. We explain which legal ground we rely on in each case below, but in all cases, we rely on one of the four legal grounds below:

  • It being necessary in order to perform or take steps to perform a contract with you or your employer;
  • It being processed with your consent;
  • It being processed to comply with our legal obligations or
  • It being processed where we have a legitimate interest in doing so. Please see below to find out more about legitimate Interests.

What are Legitimate Interests?
“Legitimate Interests” is a term used in the GDPR and is a legal ground upon which a business may process personal data, where that processing is necessary to pursue interests pursued by the business (data controller or by a third party) provided always that the fundamental rights and freedoms of the data subject in question are not overridden as a result. Therefore, where we rely on this ground, we make sure to consider and balance any potential impact on you and your rights. If you have any concerns about any processing, we carry out based on our “legitimate interests”, you have the right to object to that processing. For more information on your rights, please see “Your Rights” section below.

We conduct specific media consulting projects for our clients from time to time which cause us to act as a data processor of your personal data. Where we do so, we only process your personal information in accordance with our client’s lawful written instructions and where our clients confirm that they have an appropriate legal basis to undertake the project in question.

In the event that you work for one of our clients, or suppliers, we may also process your employee business contact details (name, business email, job title, business telephone number) so that we may provide our services, undertake day to day management and administration of our clients’ and suppliers’ accounts with regard to the work undertaken, in each case as is necessary to perform our contractual obligations. We process this in the form of emails, client files, invoicing and account records which are securely hosted in the UK. In addition, we retain the same business contact details so as to maintain our business relationship with you, our clients and suppliers and potential clients and suppliers. This data is securely held in our CRM database in the UK. In each case we have a legitimate interest in processing your personal data for these purposes.

As part of our work for our clients we approach, negotiate and instruct media owners, publishers, creative agencies or other suppliers as part of the planning, negotiation and appointment process. During this process it may be necessary for us to share your business contact data (where you work for one of our clients) with such providers which, depending on the account in question, may be located outside of the EEA.

We plan and buy media space using media intelligence so that relevant advertising can be delivered appropriately on behalf of our clients within the financial industry and education sectors in which they operate. The advertising we place therefore tends to be across online and offline publications as well as out of home and experiential media. We may use targeted advertising as an advertising tool and track visits to our clients’ and suppliers’ websites and particular online campaigns to measure the effectiveness of the advertising placed. The exact nature of the targeting and tracking of advertising will vary depending on the requirements of our clients’ campaigns but an overview is below.

    • identifying and advertising on websites with audiences our clients’ wish to reach and dealing directly with publishers to establish a campaign;
    • matching that cookie ID to a pool or segment which our client is trying to reach and serving advertising in real time to websites with corresponding advertising space for sale
    • identifying a cookie ID that has previously visited a client site to serve relevant advertising based on their earlier activity on the client site.What is targeted advertising?
      We are able to deliver relevant advertising on behalf of our clients by using cookies (or similar technology). Cookies are tiny text files that are stored on your browser (where you agree) when you visit our clients’ websites or websites of publishers or media owners relevant to our clients’ activities. The cookies we use do not collect your name or any similar information, but instead comprise a unique identifier called a cookie ID: a string of characters that websites and servers associate with the browser on which the cookie is stored.By associating the cookie ID with the browsing activity undertaken we are able to build a profile and place that information into a “pool” or “segment” within the data management platforms we use, enabling us to show you (or rather the browser associated with the cookie ID) advertisements of interest. Find out more about “profiling” below.

      We can do this in a variety of ways, depending on our clients’ advertising strategy, but may include:

    We use Google DoubleClick and Oracle BlueKai cookies and their data management platforms to deliver targeted advertising on behalf of our clients. Where we assemble cookie IDs as part of one of our solutions we act as a data controller. Where we collect cookie IDs to service a specific client’s instructions we do so as a data processor on behalf of our client, the data controller.

    Just to reiterate that as part of this process, we do not obtain your name, contact details or any similar information. However, we are able to make inferences from your browsing activity and help our clients to plan their advertising based on this information. For example, if you browse on one of our clients’ websites, you may see an advert from them on another website. We do not profile or pool or segment any information based on or linked to “special category information” being data identifying racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic and or biometric data for the purpose of uniquely identifying an individual and data concerning an individual’s health, sex life or sexual orientation.

    If you do not wish to share information about your browsing activity, you can choose not to accept a cookie or other cookie like technology on your device via client or publisher consent management tools (as applicable). Alternatively, you may adjust your browser setting. You can learn how to do this by viewing the browser’s help menu, or you can do to the Digital Advertising Alliance’s consumer choice page http://www.youronlinechoices.com. If you do this however, it does not mean that you will stope receiving advertising, just that you will stop receiving advertising which reflects your browsing and/or interests. Additionally, you may also clear your browser cache or reset your cookies, but you should remember that this does not present cookies from being place on your device in the future. In any case, you should review the privacy policy of the website you are visiting.


  • What is “Profiling”?
    Generally, profiling is an activity which automates some or all of the processing of personal data to evaluate certain features relating to an individual, such as behavior. Profiling, like other processing, can only be carried out where there is a legal ground to do so. We undertake profiling based on the cookie data we receive with consent to place targeted advertising on behalf of our clients as described in this policy.

    We also advise on and conduct social media campaigns (e.g. LinkedIn, Facebook, Twitter) on behalf of our clients. This may involve us specifying the type of user we want to see our client’s advertising which the social media platform then matches with its database and permissions or using cookies within that platform. Although we are provided with information regarding the success of such a campaign, this is only provided to us in an aggregated format, and no individual can be identified. We may also seek to make contact through social media on behalf of our clients (e.g. by Inmail via LinkedIn.) However, we shall only do so where our client has an appropriate legal ground to do so. We do not seek to obtain any personal data from you as part of our use of social media for our advertising activities undertaken on behalf of our clients.

  • Why do we do this?
    Our clients (and we as their agency working on their behalf) are seeking to understand what products and campaigns interest you, and to measure the effectiveness of various marketing strategies. By understanding your interests, we can work with our clients to promote relevant products (and avoid advertising products that may not be suited to you). From your browsing activity we may be able to avoid promoting products which, by their regulated nature, may not be available to you and therefore helps our clients serve advertising compliantly. As set out above, please alter your browser settings or do not accept advertising cookies if you would prefer for your data to not be used in this way.
We advise our clients on data analytics and may implement recommended strategies so that our clients may learn more about the effectiveness of their campaigns. Analytics tools (e.g. Google Analytics) using cookie technology are able to identify the number of users, their location, number of previous visits and so on, but do not identify individuals. We use various tools, including Google Data Studio which pulls together data from social media, analytics tools (e.g. Google Analytics), Doubleclick and other sources such as MOAT (a tool which verifies advert visibility) to reflect and visualise that data. No personal data is used as part of this process. As set our above, please alter your browser settings or do not accept analytics cookies or if you would prefer for your data to not be used in this way.

We conduct primary research and proprietary research analysis in the financial and business education sectors amongst, for example, financial services professionals, (investors and advisors) together with educational specialists, prospective students, students and alumni, allowing us to support and advise our clients effectively with their media planning and buying needs. The personal data we use to undertake our research is sourced directly or via third parties from publicly available sources, including business directories and websites and comprises: name, business name, business address, email, business telephone number, job title, age and languages spoken. We also make contact via business-led platforms such as LinkedIn. We have a legitimate interest in undertaking primary research as part of our work as a media agency, providing media insights and intelligence to our clients and in processing this data for these purposes.

We undertake our research through surveys and polls. Once an individual has participated in our research, we hold their responses (including any comments or opinions on relevant market information), together with additional details where relevant (such as the type of assets under management, business size/number of clients and whether any incentive has been received to participate). All responses are held only with the consent of the respondent, and used in an anonymous, aggregated format. From time to time as part of our service offering, we may pass our research findings to our clients, but we only ever do so in a fully anonymised and aggregate way where ensuring that no personal data is disclosed.

When we seek to recruit participants, we provide the opportunity to decline participation and/or to be contacted again for these purposes (where we hold minimal details for suppression purposes). You also have the right to object to our processing of your data for these purposes. We do not ask for any special category (sensitive) personal data (e.g. data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic and or biometric data for the purpose of uniquely identifying an individual and data concerning an individual’s health, sex life or sexual orientation) to be submitted as part of any response; nonetheless we ask for explicit consent to enable us to retain responses for our market research purposes.

We hold the personal data we use for these purposes securely. We work with third parties, such as Qualtrics LLC, who assist us with contacting respondents and storing the resulting data. Qualtrics is required to hold this data securely in their data center in the EEA. We also work with panel providers who distribute our surveys to their panelists based on their data and permissions (which is not shared with us). We ask all panel providers to confirm that the personal data they use for these purposes is compliant with all applicable data protection and privacy legislation. We may pass your contact information on to an incentive provider (as set out in our email to you), but only where you agree to take part in the research in question and only for the purpose of providing the incentive in question.

Where we undertake market research specifically for a client using client data, we act as a data processor and process that data in compliance with the requirements of the client data controller.

Fundamental Monitor, our proprietary web-based tool, provides digital and media insights on the fund management industry to our clients. Access to the application requires that clients/users register, providing limited personal information prior to use. Where registration is applicable to you, please read the Fundamental Monitor dedicated privacy compliance statement before use, see www.fundamentalmonitor.com for more information. However, by way of overview, limited personal information is processed by the application including name, company name, job title, telephone number, email address and billing address (it being necessary for us to collect client business and user contact data for registration and administration purposes and to enable us to monitor usage in accordance with Fundamental Monitor’s Terms of Use and Fair Usage Policy). This personal data is securely stored on servers located within the EEA (Germany) and processed as a necessary part of providing the services and performing our contract for Fundamental Monitor with our client and you, where applicable, as a user.
We process the personal data of our employees in connection with their employment with us. A full description of the types of personal data we hold, how it is used and who it is shared with is set out in our Employee Privacy Notice available to all employees as part of our Employee Handbook and as shared with all employees on induction and afterwards on a periodic basis. Please see our Recruitment Privacy Notice for details of how we use your data as part of the recruitment process.
SHARING YOUR INFORMATION This section describes the basis upon which we may share information. We may share your personal data within the Fundamental Group or with third party suppliers or other third parties where we have reason for doing so as described in this Policy. Where third parties are appointed to process any of your data on our behalf they are appointed in writing under contract and required to process only in accordance with our written instructions, and not for their own purposes. We only transfer personal data outside of the EEA where appropriate legal safeguards are in place or we have consent to do so.
We may share your personal data within the Fundamental Media Group to provide our services to you, maintain our business relationship with our clients and potential clients and where you agree, so that our group companies may offer you their products and services. Our Group Data Protection Policy sets out the standards to which we as a business work and to which our employees are expected to adhere. It applies to companies and employees across the Fundamental Group so as to ensure consistency in our approach and it emphasises the legal requirement that, where we process personal data (for our own purposes or on behalf of clients), we do so lawfully, fairly and transparently.
We may share your personal information with:
  • our suppliers, as described above, under contract where it is necessary for their provision of services to us and/or to provide our services to you;
  • prospective partners or professional advisors in the event of any business reorganization, merger, sale, joint venture or similar, under strict confidentiality obligations;
  • third parties where it is (or we reasonably believe, it is) necessary for legal or regulatory purposes, or we are under a duty to disclose your personal information to comply with a legal obligation or process or to enforce or apply our terms and conditions, or other agreement or protect the rights or safety of clients, employees, or others. This includes exchanging information with other companies, governmental departments and organisations for fraud protection and credit risk reduction; and
  • our clients or media partners (but only in an aggregated non-personally identifiable form) where we provide research, data analytics, or advertising placement.
We only transfer personal data to countries outside the European Economic Area (EEA) where appropriate legal safeguards are in place or where we have consent to do so. We do not sell your personal data.

Storing, Securing and Retaining your personal data
We employ appropriate security measures to protect your personal information from unauthorised access, accidental loss, disclosure and destruction. We require that our suppliers and service providers also use appropriate security measures when processing your personal information on our behalf and that they only do so in ways and for the purposes we’ve agreed; not for their own uses. We reserve the right to check their security measures and processing activities.

We may need to transfer your personal information to other companies within the Fundamental Media Group, suppliers or service providers based outside of the UK and outside of the EEA. We will only do this where we need to do this, for example where our servers or service providers are based outside of this area and where appropriate safeguards are in place to protect your data or we have your consent to do so. A transfer outside of the EEA will also occur if you access any of our online applications, such as Fundamental Monitor, from outside of the EEA. Personal data is shared within the Fundamental Group of companies under the EC Model Clauses.
Unless we explain otherwise to you, we’ll hold your personal information based on the following criteria:

  • for as long as we provide our services to you and then for as long as someone could bring a claim against us related to those services; and/or
  • for as long as we have reasonable business needs to do so, such as providing our services to our clients, maintaining our relationships with our clients and potential clients, for as long as our research projects remain live and their results relevant, and a period thereafter in which we may need to validate the findings and for managing our business operations; and/or
  • in line with legal and regulatory requirements or guidance.
YOUR PRIVACY RIGHTS We may share your personal data within the Fundamental Group or with third party suppliers or other third parties where we have reason for doing so as described in this Policy. Where third parties are appointed to process any of your data on our behalf they are appointed in writing under contract and required to process only in accordance with our written instructions, and not for their own purposes. We only transfer personal data outside of the EEA where appropriate legal safeguards are in place or we have consent to do so.
You have the right to be provided with transparent and clear information about the personal data we hold about you and how we use it. You also have the right to request access to that information, request changes to be made where it is incorrect or incomplete, request for it to be deleted or blocked (if you believe we shouldn’t be processing that information, or are processing it incorrectly) and, in some circumstances, the right to request that we move, copy or transfer your personal information (where we process it based on your consent). You are also legally entitled to withdraw your consent for processing at any time. In each case we will promptly review your request in accordance with applicable law. In addition, you have the right to object to any of our processing where we do so based on our legitimate interests. If our processing relates to any direct marketing or profiling, we will stop processing at your request (providing that in relation to profiling we are able to identify you from the data we hold). If you object to targeted advertising, we encourage you to revisit your browsing choices and decline cookies or change your browser settings (please refer to section 4 above). In all other cases, where processing is based on our legitimate interests, if you raise an objection we will stop processing your personal data unless very exceptional circumstances apply (in which case we will inform you of this).

If you are a Californian resident, you may request that we disclose or delete the personal data we hold about you (where we do so in our capacity as a “Business” as that term is described in the CCPA). In particular, you may request that we

  • disclose to you the following information covering the 12 months preceding your request:
    • the categories and specific pieces of personal information we collected about you and the categories of personal information we sold (if any);
    • the categories of sources from which we collected such personal information
    • the categories of third parties to whom we sold or otherwise disclosed personal information.
  • delete personal information we collected from you; or
  • opt-out of any future sale of personal information about you. NB. We do not sell your personal data.

To make enquiries, exercise any of your rights set out in this Privacy Policy and/or make a complaint please contact us, our contact details our set out below.

If you're not satisfied with the way any complaint you make in relation to your personal information is handled by us, then you may be able to refer your complaint to the relevant data protection regulator. In the UK, this is the Information Commissioner's Office, see www.ico.org.uk.

By Email: [email protected]

By post:

The Privacy Manager
Fundamental Media Limited
31-41 Worship Street