Privacy Policy
Privacy & Data Protection
This information explains what personal data we use, how we use it, and why we use it.
We will try to keep this as plain English as possible, and have split the information into distinct notices based on our relationship with you.
Personal data is data that relates to you, either directly, or indirectly when combined with other information.
If you have any questions about the Privacy Notices or would like to exercise your data protection rights, please contact us at [email protected].
Website & Enquiries
Who we are
Compass Pathfinder Limited registered in England: 3rd Floor, 1 Ashley Road, Altrincham, Cheshire, WA14 2DT, United Kingdom.
Compass (referred to as “we,” “us,” or “our”) is the data controller responsible for the personal data we process about you, in accordance with this notice.
If you have any questions about this Privacy Notice, or if you wish to exercise your legal rights, please use the contact information under ‘Privacy & Data Protection’.
This information was last updated on 5 May 2026.
How we use personal data
We use personal data for a number of different purposes, sometimes the same data is used for different purposes. To use personal data we must have a lawful basis from Article 6 of the UK GDPR, and an additional lawful basis from Article 9 when we use special category data (which includes health, trade union, ethnicity, religion, and sexual orientation).
What data do you collect & use? | Purpose for which we use data. | How do you comply with the law? |
|---|---|---|
Personal identifiers (name, title) | If you use a contact form we will use this data to communicate | We have a legitimate interest to communicate with you. |
Contact information (address, email, telephone) | If you use a contact form we will use this data to communicate | We have a legitimate interest to communicate with you. |
Communication data (emails, instant messages) | We use this data to communicate with you. | We have a legitimate interest to communicate with you. |
Do you share data?
We share data with organizations working on our behalf, known as data processors, and other companies with the Compass Group. They can only use the data as we instruct them to, this includes;
- Companies within the Compass Group,
- Our suppliers who process data on our behalf, including IT service providers,
- We share data where law requires us to do so.
As part of our use of data, we share information outside the UK, with organizations within the Compass Group, and with our suppliers. Where we transfer data outside the UK we rely on the presence of adequacy decisions, and appropriate safeguards (standard data protection clauses under s46(2)(d) of the UK GDPR).
How long do you keep data?
We only keep data as long as necessary in relation for which it is used. To determine how long we keep data we consider nature, volume, the sensitivity of the data, and the risk of it being accessed without authorization, balanced with our legitimate interests, unless otherwise required by law.
Your rights
Under applicable data protection laws and in certain circumstances, you have the following rights concerning your personal data:
- Access: Request a copy of the personal data we hold about you.
- Correction: Correct any inaccurate or incomplete data we hold about you.
- Erasure: Request deletion of your personal data, where there is no valid reason for us to retain it.
- Objection: Object to the processing of your personal data for certain purposes, including marketing.
- Restriction: Ask us to suspend processing your data in specific situations.
- Complain: You can make a complaint if you believe we have infringed data protection law in relation to our processing of your personal data.
Contacting the Regulator
While we hope you won’t need to, you have the right to contact the data protection regulator for the UK, the Information Commissioner’s Office (ICO):
Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, United Kingdom.
Phone: 0303 123 1113 (local rate) or 01625 545 745 if you prefer to use a national rate number.
Contact the ICO for advice or to make a complaint on the ICO website.
Employees
Employees (UK)
Who we are
Compass Pathfinder Limited registered in England: 3rd Floor, 1 Ashley Road, Altrincham, Cheshire, WA14 2DT, United Kingdom.
Compass (referred to as “we,” “us,” or “our”) is the data controller responsible for the personal data we process about you, in accordance with this notice.
If you have any questions about this Privacy Notice, or if you wish to exercise your legal rights, please use the contact information under ‘Privacy & Data Protection’.
This information was last updated on 5 May 2026.
How we use personal data
We use personal data for a number of different purposes, sometimes the same data is used for different purposes. To use personal data we must have a lawful basis from Article 6 of the UK GDPR, and an additional lawful basis from Article 9 when we use special category data (which includes health, trade union, ethnicity, religion, and sexual orientation).
What data do you collect & use? | Purpose for which we use data. | How do you comply with the law? |
|---|---|---|
Personal identifiers (name, DOB, title) | We use this data as part of your recruitment, and employment if recruitment is successful. | We use the data to take steps prior to entering a contract of employment with you, and for successful candidates, to fulfill our contract of employment with you. |
Contact information (address, email, telephone) | We use this data as part of your recruitment, and employment if recruitment is successful. | We use the data to take steps prior to entering a contract of employment with you, and for successful candidates, to fulfill our contract of employment with you. |
Recruitment information (CV, job history, qualifications, references, cover letter) | We use this data as part of your recruitment, and employment if recruitment is successful. | We use the data to take steps prior to entering a contract of employment with you, and for successful candidates, to fulfill our contract of employment with you. |
Financial data (bank details, payroll records, expenses records) | We use this data to ensure you are paid correctly, and to refund expenses. | We use the data to fulfill our contract of employment with you. |
Share allocation | We use this data to ensure that any share allocations you hold are recorded. | We use this data to comply with a legal obligation (Companies Act 2006). |
Tax & pension data (tax data, national insurance number, pension data) | We use this data to ensure you are taxed correctly, to make pension contributions, and liaise with your pension provider as appropriate. | We use this data to comply with a legal obligation. |
Contract dates | We use this data as part of your employment. | We use the data to fulfill our contract of employment with you. |
IT communication data (emails, instant messages) | We use this data as part of your employment. | We use the data to fulfill our contract of employment with you. |
IT use data (user audits, network traffic,) | We use this data for our security purposes to monitor for unusual activity, to detect intrusion and other unlawful activity. | We have a legitimate interest in monitoring user activity to detect usage which does not comply with our acceptable use policies, and to detect potential intruders. |
Starting & leaving dates | We use this data as part of your employment. | We use the data to fulfill our contract of employment with you. |
Employment records (job role and history, annual leave, performance) | We use this data as part of your employment to assess your performance, set goals and objectives. | We use the data to fulfill our contract of employment with you. |
Right to work information (passport, birth certificate, residency permit) | We use this data to ensure that you have the right to work in the UK. | We use this data to comply with a legal obligation (Immigration, Asylum and Nationality Act 2006). |
Disciplinary & grievance data (statements, investigation documents, evidence, letters) | We use this data as part of your employment. | We have a legitimate interest in using data to promote the organization’s aims and ideals. |
Employee feedback surveys | We use this data to gather feedback from employees. | We have a legitimate interest in understanding ways in which we can improve our business and working life of employees. |
Promotional materials (photographs, audio, and video recordings) | We use this data for creating promotional materials. | We have a legitimate interest in using data to promote the organization’s aims and ideals. |
Data about your dependents (names, beneficiary information) | We use this data as part of our benefits package. | We have a legitimate interest in using this data to provide benefits packages to our employees and their dependents. We also have a legal obligation to share information with tax authorities (HMRC) in relation to taxable benefits. |
Data about your emergency contacts (name, contact details) | We use this data to contact designated individual(s) in the event of an emergency involving you. | We have a legitimate interest in using this data to provide benefits packages to our employees and their dependents. |
Data about your health, (allergies, diagnoses, disabilities, maternity) | We use this data to ensure that you are safe at work, so that we can make reasonable adjustments to working conditions where required, and to record maternity leave. | We use this data to comply with a legal obligation in areas of health and safety, and equality law during your employment. |
Data about your background (ID, finance, criminal record (basic)) | We use this data to conduct background checks for a limited number of employees with access to high-risk systems. | We have a legitimate interest in identifying whether individuals may pose a risk to security, and in preventing unlawful acts. |
Patent/inventorship records (name, contact data, job role & history) | We use this data as part of our intellectual property records, including patent & inventorship applications and records. | We have a legitimate interest in recording our intellectual property. |
Do you share data?
We share data with organizations working on our behalf, known as data processors, and other companies with the Compass Group. They can only use the data as we instruct them to, this includes;
- Companies within the Compass Group,
- Our suppliers who process data on our behalf, including IT service providers, and payroll,
- We share data where law requires us to do so, for example sharing data with Tax authorities such as HMRC to ensure individuals are taxed correctly.
We also share data with organizations who provide employee benefits, you can find a full list of organizations here.
As part of our use of data, we share information outside the UK, with organizations within the Compass Group, and with our suppliers. Where we transfer data outside the UK we rely on the presence of adequacy decisions, and appropriate safeguards (standard data protection clauses under s46(2)(d) of the UK GDPR).
As part of our use of data, we share information outside the UK, with organizations within the Compass Group, and with our suppliers. Where we transfer data outside the UK we rely on the presence of adequacy decisions, and appropriate safeguards (standard data protection clauses under s46(2)(d) of the UK GDPR).
How long do you keep data?
We only keep data as long as necessary in relation for which it is used. To determine how long we keep data we consider nature, volume, the sensitivity of the data, and the risk of it being accessed without authorization, balanced with our legitimate interests, unless otherwise required by law.
Where your personal data is processed as part of studies and clinical trials, data will be retained for the duration of the study.
Your rights
Under applicable data protection laws and in certain circumstances, you have the following rights concerning your personal data:
- Access: Request a copy of the personal data we hold about you.
- Correction: Correct any inaccurate or incomplete data we hold about you.
- Erasure: Request deletion of your personal data, where there is no valid reason for us to retain it.
- Objection: Object to the processing of your personal data for certain purposes, including marketing.
- Restriction: Ask us to suspend processing your data in specific situations.
- Complain: You can make a complaint if you believe we have infringed data protection law in relation to our processing of your personal data.
Contacting the Regulator
While we hope you won’t need to, you have the right to contact the data protection regulator for the UK, the Information Commissioner’s Office (ICO):
Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, United Kingdom.
Phone: 0303 123 1113 (local rate) or 01625 545 745 if you prefer to use a national rate number.
Contact the ICO for advice or to make a complaint on the ICO website.
Employees (US)
Who we are
Compass Pathways Incorporated registered at 44 W. 37th Street, New York, NY 10018.
Compass (referred to as “we,” “us,” or “our”) is the data controller responsible for the personal data we process about you, in accordance with this notice.
If you have any questions about this Privacy Notice, or if you wish to exercise your legal rights, please use the contact information under ‘Privacy & Data Protection’.
This information was last updated on 5 May 2026.
How we use personal data
We use personal data for a number of different purposes, sometimes the same data is used for different purposes.
What data do you collect & use? | Purpose for which we use data. |
|---|---|
Personal identifiers (name, DOB, title) | We use this data as part of your recruitment, and employment if recruitment is successful. |
Recruitment information (CV, job history, qualifications, references, cover letter) | We use this data as part of your recruitment, and employment if recruitment is successful. |
Contact information (address, email, telephone) | We use this data as part of your recruitment, and employment if recruitment is successful. |
Financial data (bank details, payroll records, and tax status information | We use this data to ensure you are paid and taxed correctly. |
Share allocation | We use this data to ensure that any share allocations you hold are recorded. |
Tax & pension data (tax data, social security number, pension data) | We use this data to ensure you are taxed correctly, to make 401k contributions, and liaise with your 401k provider as appropriate. |
Contract dates | We use this data as part of your employment. |
IT communication data (emails, instant messages) | We use this data as part of your employment. |
IT use data (user audits, network traffic,) | We use this data for our security purposes to monitor for unusual activity, to detect intrusion and other unlawful activity. |
Starting & leaving dates | We use this data as part of your employment. |
Employment records (job role and history, annual leave, performance) | We use this data as part of your employment to assess your performance, set goals and objectives. |
Right to work information (passport, birth certificate, residency permit) | We use this data to ensure that you have the right to work in the US. |
Disciplinary & grievance data (statements, investigation documents, evidence, letters) | We use this data as part of your employment. |
Employee feedback surveys | We use this data to gather feedback from employees. |
Promotional materials (photographs, audio, and video recordings) | We use this data for creating promotional materials. |
Data about your dependents (names, beneficiary information) | We use this information as part of our benefits package. |
Data about your emergency contacts (name, contact details) | We use this data to contact designated individual(s) in the event of an emergency involving you. |
Data about your health, (allergies, maternity) | We use this data to ensure that you are safe at work, manage ill-health, make reasonable adjustments to working conditions where required, and to record parental leave. |
Data about your background (ID, qualifications, finance, criminal record (basic)) | We use this data to verify your qualifications and, for a limited number of employees, conduct background checks if you need access to high-risk systems. |
Patent/inventorship records (name, contact data, job role & history) | We use this data as part of our intellectual property records, including patent & inventorship applications and records. |
Do you share data?
We share data with organizations working on our behalf, and other companies with the Compass Group. They can only use the data as we instruct them to, this includes;
- Companies within the Compass Group,
- Our suppliers who process data on our behalf, including IT service providers, and payroll,
- We share data where law requires us to do so, for example sharing data with tax authorities where required by law.
We also share data with organizations who provide employee benefits, you can find a full list of organizations here.
How long do you keep data?
We only keep data as long as necessary in relation for which it is used. To determine how long we keep data we consider nature, volume, the sensitivity of the data, and the risk of it being accessed without authorization, balanced with our legitimate interests, unless otherwise required by law.
Where your personal data is processed as part of studies and clinical trials, data will be retained for the duration of the study.
Your rights
Under applicable data protection laws and in certain circumstances, you have the following rights concerning your personal data:
- Access: Request a copy of the personal data we hold about you.
- Correction: Correct any inaccurate or incomplete data we hold about you.
- Erasure: Request deletion of your personal data, where there is no valid reason for us to retain it.
- Objection: Object to the processing of your personal data for certain purposes, including marketing.
- Restriction: Ask us to suspend processing your data in specific situations.
- Complain: You can make a complaint if you believe we have infringed data protection law in relation to our processing of your personal data.
Third Parties
Third Parties (UK)
Who we are
Compass Pathfinder Limited registered in England: 3rd Floor, 1 Ashley Road, Altrincham, Cheshire, WA14 2DT, United Kingdom.
Compass (referred to as “we,” “us,” or “our”) is the data controller responsible for the personal data we process about you, in accordance with this notice.
If you have any questions about this Privacy Notice, or if you wish to exercise your legal rights, please use the contact information under ‘Privacy & Data Protection’.
This information was last updated on 5 May 2026.
How we use personal data
We use personal data for a number of different purposes, sometimes the same data is used for different purposes. To use personal data we must have a lawful basis from Article 6 of the UK GDPR, and an additional lawful basis from Article 9 when we use special category data (which includes health, trade union, ethnicity, religion, and sexual orientation).
Non-employees working with us
This information relates to the staff of our suppliers, and partners.
What data do you collect & use? | Purpose for which we use data. | How do you comply with the law? |
|---|---|---|
Personal identifiers (name, title) | We use this data to communicate and work with you. | We have a legitimate interest to communicate with you so that we can fulfill our contractual obligations with your employer. |
Job history & qualifications | We use this data to ensure you are sufficiently qualified for specialist roles (where relevant). | We have a legitimate interest in ensuring you are qualified for the role. |
Contact information (address, email, telephone) | We use this data to communicate with you. | We have a legitimate interest to communicate with you so that we can fulfill our contractual obligations with your employer. |
Communication data (emails, instant messages) | We use this data to communicate with you. | We have a legitimate interest to communicate with you so that we can fulfill our contractual obligations with your employer. |
IT use data (user audits, network traffic,) | If you use Compass Pathways systems, we use this data for our security purposes to monitor for unusual activity, to detect intrusion and other unlawful activity. | We have a legitimate interest in monitoring user activity to detect usage which does not comply with our acceptable use policies, and to detect potential intruders. |
Patent/inventorship records (name, contact data, job role & history) | We use this data as part of our intellectual property records, including patent & inventorship applications and records. | We have a legitimate interest in recording our intellectual property. |
Promotional materials (photographs, audio, and video recordings) | We use this data for creating promotional materials. | We have a legitimate interest in using data to promote the organization’s aims and ideals. |
Third party individuals
This information relates to individuals whose data are processed as part of their work with us, regardless of whether they operate as self-employed individuals, or as part of professional services companies.
What data do you collect & use? | Purpose for which we use data. | How do you comply with the law? |
|---|---|---|
Personal identifiers (name, DOB, title) | We use this data as part of your engagement with you. | We use the data to fulfill our contract of services with you. |
Job history & qualifications | We use this data to ensure you are sufficiently qualified for specialist roles. | We use the data to take steps prior to entering a contract with you. |
Contact information (address, email, telephone) | We use this data as part of your engagement. | We use the data to fulfill our contract with you. |
Financial data (bank details, expenses records) | We use this data to ensure you are paid correctly, and to refund expenses. | We use the data to fulfill our contract with you. |
Contract dates | We use this data to record your dates of employment. | We use the data to fulfill our contract with you. |
Communication data (emails, instant messages) | We use this data to communicate with you. | We use the data to fulfill our contract of engagement with you. |
IT use data (user audits, network traffic,) | If you use Compass Pathways systems, we use this data for our security purposes to monitor for unusual activity, to detect intrusion and other unlawful activity. | We have a legitimate interest in monitoring user activity to detect usage which does not comply with our acceptable use policies, and to detect potential intruders. |
Patent/inventorship records (name, contact data, job role & history) | We use this data as part of our intellectual property records, including patent & inventorship applications and records. | We have a legitimate interest in recording our intellectual property. |
Promotional materials (photographs, audio, and video recordings) | We use this data for creating promotional materials. | We have a legitimate interest in using data to promote the organization’s aims and ideals. |
IR35 determination (working arrangements, location, IP rights) | We use this data to report to HMRC whether your working is within or without the IR35 rules. | We use this data to comply with a legal obligation. |
Shareholders & Investors
This information relates to individual shareholders and investors whose data are processed as part of their involvement.
What data do you collect & use? | Purpose for which we use data. | How do you comply with the law? |
|---|---|---|
Personal identifiers (name, DOB, title) | We use this data as part of our engagement with you. | We use the data to fulfill our contract of services with you. |
Contact information (address, email, telephone) | We use this data as part of our engagement with you. | We use the data to fulfill our contract with you. |
Share allocation | We use this data to ensure that any share allocations you hold are recorded. | We use this data to comply with a legal obligation (Companies Act 2006). |
Promotional materials (photographs, audio, and video recordings) | We use this data for creating promotional materials. | We have a legitimate interest in using data to promote the organization’s aims and ideals. |
Do you share data?
We share data with organizations working on our behalf, known as data processors, and other companies with the Compass Group. They can only use the data as we instruct them to, this includes;
- Companies within the Compass Group,
- Our suppliers who process data on our behalf, including IT service providers, and finance systems,
- We share data where law requires us to do so.
As part of our use of data, we share information outside the UK, with organizations within the Compass Group, and with our suppliers. Where we transfer data outside the UK we rely on the presence of adequacy decisions, and appropriate safeguards (standard data protection clauses under s46(2)(d) of the UK GDPR).
How long do you keep data?
We only keep data as long as necessary in relation for which it is used. To determine how long we keep data we consider nature, volume, the sensitivity of the data, and the risk of it being accessed without authorization, balanced with our legitimate interests, unless otherwise required by law.
Your rights
Under applicable data protection laws and in certain circumstances, you have the following rights concerning your personal data:
- Access: Request a copy of the personal data we hold about you.
- Correction: Correct any inaccurate or incomplete data we hold about you.
- Erasure: Request deletion of your personal data, where there is no valid reason for us to retain it.
- Objection: Object to the processing of your personal data for certain purposes, including marketing.
- Restriction: Ask us to suspend processing your data in specific situations.
- Complain: You can make a complaint if you believe we have infringed data protection law in relation to our processing of your personal data.
Contacting the Regulator
While we hope you won’t need to, you have the right to contact the data protection regulator for the UK, the Information Commissioner’s Office (ICO):
Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, United Kingdom.
Phone: 0303 123 1113 (local rate) or 01625 545 745 if you prefer to use a national rate number.
Contact the ICO for advice or to make a complaint on the ICO website.
Third Parties (US)
Compass Pathways Incorporated registered at 44 W. 37th Street, New York, NY 10018.
Compass (referred to as “we,” “us,” or “our”) is the data controller responsible for the personal data we process about you, in accordance with this notice.
If you have any questions about this Privacy Notice, or if you wish to exercise your legal rights, please use the contact information under ‘Privacy & Data Protection’.
This information was last updated on 5 May 2026.
How we use personal data
We use personal data for a number of different purposes, sometimes the same data is used for different purposes.
Non-employees working with us
This information relates to the staff of our suppliers, and partners.
What data do you collect & use? | Purpose for which we use data. |
|---|---|
Personal identifiers (name, title) | We use this data to communicate and work with you. |
Job history & qualifications | We use this data to ensure you are sufficiently qualified for specialist roles (where relevant). |
Contact information (address, email, telephone) | We use this data to communicate with you. |
Communication data (emails, instant messages) | We use this data to communicate with you. |
IT use data (user audits, network traffic,) | If you use Compass Pathways systems, we use this data for our security purposes to monitor for unusual activity, to detect intrusion and other unlawful activity. |
Patent/inventorship records (name, contact data, job role & history) | We use this data as part of our intellectual property records, including patent & inventorship applications and records. |
Promotional materials (photographs, audio, and video recordings) | We use this data for creating promotional materials. |
Third party individuals
This information relates to individuals whose data are processed as part of their work with us, regardless of whether they operate as self-employed individuals, or as part of professional services companies.
What data do you collect & use? | Purpose for which we use data. |
|---|---|
Personal identifiers (name, DOB, title) | We use this data as part of your engagement with you. |
Job history & qualifications | We use this data to ensure you are sufficiently qualified for specialist roles. |
Contact information (address, email, telephone) | We use this data as part of our engagement with you. |
Financial data (bank details, expenses records) | We use this data to ensure you are paid correctly, and to refund expenses. |
Contract dates | We use this data to ensure record the dates of your contract. |
Communication data (emails, instant messages) | We use this data to communicate with you. |
IT use data (user audits, network traffic,) | If you use Compass Pathways systems, we use this data for our security purposes to monitor for unusual activity, to detect intrusion and other unlawful activity. |
Patent/inventorship records (name, contact data, job role & history) | We use this data as part of our intellectual property records, including patent & inventorship applications and records. |
Promotional materials (photographs, audio, and video recordings) | We use this data for creating promotional materials. |
Shareholders & Investors
This information relates to individual shareholders and investors whose data are processed as part of their involvement.
What data do you collect & use? | Purpose for which we use data. |
|---|---|
Personal identifiers (name, DOB, title) | We use this data as part of your engagement with you. |
Contact information (address, email, telephone) | We use this data as part of our engagement with you. |
Share allocation | We use this data to ensure that any share allocations you hold are recorded. |
Promotional materials (photographs, audio, and video recordings) | We use this data for creating promotional materials. |
Do you share data?
We share data with organizations working on our behalf, known as data processors, and other companies with the Compass Group. They can only use the data as we instruct them to, this includes;
- Companies within the Compass Group,
- Our suppliers who process data on our behalf, including IT service providers, and finance systems,
- We share data where law requires us to do so.
As part of our use of data, we share information outside the US, with organizations within the Compass Group, and with our suppliers.
How long do you keep data?
We only keep data as long as necessary in relation for which it is used. To determine how long we keep data we consider nature, volume, the sensitivity of the data, and the risk of it being accessed without authorization, balanced with our legitimate interests, unless otherwise required by law.
Your rights
Under applicable data protection laws and in certain circumstances, you have the following rights concerning your personal data:
Access: Request a copy of the personal data we hold about you.
Correction: Correct any inaccurate or incomplete data we hold about you.
Erasure: Request deletion of your personal data, where there is no valid reason for us to retain it.
Objection: Object to the processing of your personal data for certain purposes, including marketing.
Restriction: Ask us to suspend processing your data in specific situations.
Complain: You can make a complaint if you believe we have infringed data protection law in relation to our processing of your personal data.
Research
Research Participants
Who we are
Compass Pathfinder Limited registered in England: 3rd Floor, 1 Ashley Road, Altrincham, Cheshire, WA14 2DT, United Kingdom.
Compass (referred to as “we,” “us,” or “our”) is the data controller responsible for the personal data we process about you, in accordance with this notice.
If you have any questions about this Privacy Notice, or if you wish to exercise your legal rights, please use the contact information under ‘Privacy & Data Protection’.
This information was last updated on 05/05/2026.
What data do you collect & use?
We collect personal data when you register an interest in the study. This includes;
- Identity data (name, date of birth, unique study ID number)
- Demographic data
- Contact information (email address, telephone number, postal address, postcode / ZIP code)
- Health data, like your medical history, heart rate, blood pressure, temperature, ECG (electrical signals from your heart), questionnaire response.
- Video and audio recordings of your participation in the study
The Information & Consent Form contains a granular list of data collected.
How do you use the data you collect?
We use data to undertake the research defined in the study protocol, and to ensure that you are safe and cared for.
How do you comply with the law?
To use personal data organizations have to have is called a 'lawful basis'.
The lawful basis we rely upon for this study is a legitimate interest. Compass has a legitimate interest to use the data to determine if you are eligible for participation in the study.
UK law requires an additional legal basis for the use of health data, which is that it is for the purpose of scientific research. On occasion we may be required to provide access to data by a regulator where there is a legal obligation.
If you want to know the legal references, they are; UK GDPR, Article 6(1)(f), UK GDPR Article 9(2)(j), and the Data Protection Act 2018, schedule 1, paragraph 4.
Where we are required to share information because the law requires it, we rely on UK GDPR Article 6(1)(c), and Article 9(2)(j), and the Data Protection Act 2018, schedule 1, paragraph 4.
How long do you keep my data for?
We will retain your data for a minimum of 25 years in line with law and guidelines from clinical trial regulators. Where possible we will anonymize data so that you cannot be identified from it.
Do you share data?
We share data with organizations working on our behalf, known as data processors, and other companies with the Compass Group. They can only use the data as we instruct them to, this includes;
- Companies within the Compass Group,
- Healthcare organizations who normally provide care for you.
- Our suppliers who process information as part of the collection of data, this includes clinical research organizations, and website providers
- Regulators, such as the US Food & Drug Administration (FDA), the UK Health Research Authority (HRA, UK Medicines & Healthcare Products Regulatory Agency (MHRA), and Health Canada.
As part of our use of data, we share information outside the UK, with organizations within the Compass Group, and with our suppliers. Where we transfer data outside the UK we rely on the presence of adequacy decisions, and appropriate safeguards (standard data protection clauses under s46(2)(d) of the UK GDPR).
Your rights
Under applicable data protection laws and in certain circumstances, you have the following rights concerning your personal data:
- Access: Request a copy of the personal data we hold about you.
- Correction: Correct any inaccurate or incomplete data we hold about you.
- Erasure: Request deletion of your personal data, where there is no valid reason for us to retain it.
- Objection: Object to the processing of your personal data for certain purposes, including marketing.
- Restriction: Ask us to suspend processing your data in specific situations.
- Complain: You can make a complaint if you believe we have infringed data protection law in relation to our processing of your personal data.
Contacting the Regulator
While we hope you won’t need to, you have the right to contact the data protection regulator for the UK, the Information Commissioner’s Office (ICO):
Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, United Kingdom.
Phone: 0303 123 1113 (local rate) or 01625 545 745 if you prefer to use a national rate number.
Contact the ICO for advice or to make a complaint on the ICO website.
Trial Site Staff
Who we are
Compass Pathfinder Limited registered in England: 3rd Floor, 1 Ashley Road, Altrincham, Cheshire, WA14 2DT, United Kingdom.
Compass (referred to as “we,” “us,” or “our”) is the data controller responsible for the personal data we process about you, in accordance with this notice.
If you have any questions about this Privacy Notice, or if you wish to exercise your legal rights, please use the contact information under ‘Privacy & Data Protection’.
This information was last updated on 15 June 2026.
How we use personal data
We use personal data for a number of different purposes, and sometimes the same data is used for different purposes. To use personal data, we must have a lawful basis from Article 6 of the UK GDPR, and an additional lawful basis from Article 9 when we use special category data (which includes health, trade union, ethnicity, religion, and sexual orientation).
What data do you collect & use? | Purpose for which we use data. | How do you comply with the law? |
|---|---|---|
Personal identifiers (name, title) | We use this data to communicate and work with you. | We have a legitimate interest to communicate with you so that we can fulfill our contractual obligations with your employer. |
Job history & qualifications (CV, licences) | We use this data to ensure you are sufficiently qualified for specialist roles (where relevant). | We have a legitimate interest in ensuring you are qualified for the role. |
Contact information (address, email, telephone) | We use this data to communicate with you. | We have a legitimate interest to communicate with you so that we can fulfill our contractual obligations with your employer. |
Communication data (emails, instant messages) | We use this data to communicate with you. | We have a legitimate interest to communicate with you so that we can fulfill our contractual obligations with your employer. |
Financial disclosure information | We use this data as part of our responsibilities to identify conflicts of interest. | We have a legitimate interest in using data to comply with US Law (21 CFR s.54), and good clinical practice. |
Training records | We use this data to ensure site staff are adequately trained. | We have a legitimate interest to ensure that site staff are adequately trained. |
Video & audio recordings | We use this data to ensure the safety of trial participants. | We have a legitimate interest to ensure the safety of trial participants. |
How long do you keep my data for?
We will retain your data for up to 25 years after completion of the trial.
Do you share data?
We share data with organizations working on our behalf, known as data processors, and other companies with the Compass Group. They can only use the data as we instruct them to, this includes;
- Companies within the Compass Group,
- Our suppliers who process information as part of the collection of data, this includes clinical research organizations, training platforms, and website providers.
As part of our use of data, we share information outside the UK, with organizations within the Compass Group, and with our suppliers. Where we transfer data outside the UK we rely on the presence of adequacy decisions, and appropriate safeguards (standard data protection clauses under s46(2)(d) of the UK GDPR).
Your rights
Under applicable data protection laws and in certain circumstances, you have the following rights concerning your personal data:
- Access: Request a copy of the personal data we hold about you.
- Correction: Correct any inaccurate or incomplete data we hold about you.
- Erasure: Request deletion of your personal data, where there is no valid reason for us to retain it.
- Objection: Object to the processing of your personal data for certain purposes, including marketing.
- Restriction: Ask us to suspend processing your data in specific situations.
- Complain: You can make a complaint if you believe we have infringed data protection law in relation to our processing of your personal data.
Contacting the Regulator
While we hope you won’t need to, you have the right to contact the data protection regulator for the UK, the Information Commissioner’s Office (ICO):
Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, United Kingdom.
Phone: 0303 123 1113 (local rate) or 01625 545 745 if you prefer to use a national rate number.
Contact the ICO for advice or to make a complaint on the ICO website.
You may also contact regulatory authorities in your country of residence responsible for privacy.
Unlocking pathways to be