The plain-English version first.We collect information you give us to match you with research opportunities and pay you fairly. All information is stored securely. You can ask us to delete everything at any time. The legalese below says the same thing in more words.

1. Who we are

Sibyl + Sage ("we," "us," "our") is a women's research company operating globally. Our registered address and data controller details are available on request by emailing voices@sibyl-and-sage.com.

This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit sibyl-and-sage.com, complete our intake survey, or participate in research as a panel member.

2. What data we collect

Data you give us directly

• Name, email address, and phone number (if provided)

• Demographic information: age, location, household size, employment status, income range

• Health and medical information you choose to disclose in our intake survey or research studies

• Opinions, experiences, and stories you share through surveys, voice notes, video responses, or interviews

• Payment information for compensation purposes

Data we collect automatically

• IP address and general location (country/city level)

• Browser type and device information

• Pages visited and time spent on our website

• Survey completion data (whether a survey was started, completed, or abandoned)

3. How we use your data

• To operate the panel: matching you with relevant research opportunities based on your profile

• To conduct research: collecting and analysing your responses as part of commissioned studies

• To pay you: processing compensation for research participation through our payment platform

• To communicate with you: sending study invitations, community newsletters, and administrative emails

• To improve our services: understanding how our website and research instruments perform

• To comply with legal obligations: maintaining records required by applicable law

4. Legal basis for processing (GDPR)

For participants in the European Economic Area and UK, our legal bases for processing your data are:

• Consent: for health and sensitive personal data, and for all research participation

• Contract: for processing necessary to fulfill our obligations to compensate you

• Legitimate interests: for website analytics and service improvement, where this does not override your rights

5. Who we share your data with

We never share

• Your name with any research client

• Your identifiable data with any advertiser or marketing platform

• Your personal data for sale to any third party marketing or advertising firm

We may share

• Anonymized research outputs with clients who commissioned the research. These contain no names, locations, or identifying details.

• Legal authorities where required by applicable law; we will notify you where possible and permitted.

6. Health and sensitive data

We process health data, which is classified as "special category" data under GDPR and equivalent legislation. We take additional measures with this data:

• Explicit consent is obtained before any health data is collected

• Health data is stored separately from contact information

• Health data is encrypted at rest and in transit

• Access to identifiable health data is restricted to authorised Sibyl + Sage staff only

• We follow HIPAA-aligned practices for US participants and GDPR Article 9 requirements for EEA/UK participants

7. How long we keep your data

• Active panel members: for as long as you remain on the panel, plus 2 years after departure for legal record-keeping

• Research responses: retained for 5 years in anonymised form for longitudinal analysis; identifiable data deleted within 12 months of collection

• Payment records: 7 years as required by financial regulations in most jurisdictions

• Website analytics: 26 months

8. Your rights

Depending on your location, you have some or all of the following rights:

• Access: request a copy of the personal data we hold about you

• Correction: ask us to correct inaccurate data

• Deletion: ask us to delete your personal data ("right to be forgotten")

• Restriction: ask us to restrict how we process your data while a dispute is resolved

• Portability: receive your data in a machine-readable format

• Objection: object to processing based on legitimate interests

• Withdraw consent: at any time, for any processing based on consent — this does not affect the lawfulness of prior processing

To exercise any of these rights, email voices@sibyl-and-sage.com with the subject line "Data Rights Request." We'll respond within 30 days.

9. Cookies

Our website uses strictly necessary cookies (required for the site to function) and analytics cookies (to understand how people use our site). Analytics cookies are only set with your consent, which you can manage through the cookie banner on your first visit. We do not use advertising or tracking cookies.

10. International data transfers

Sibyl + Sage operates globally. Your data may be processed in countries other than your own. For transfers from the EEA or UK, we rely on Standard Contractual Clauses or other approved transfer mechanisms. We ensure all international data processing meets the standards required by your local data protection law.

11. Children

Our panel is open to women aged 18 and over only. We do not knowingly collect personal data from anyone under 18. If you believe a minor has submitted data to us, please contact us immediately at voices@sibyl-and-sage.com and we will delete it.

12. Changes to this policy

We may update this policy from time to time. We'll notify panel members of significant changes by email.

Privacy Contact
For any privacy-related questions, data rights requests, or concerns, please contact:
Sibyl + Sage Privacy Team · voices@sibyl-and-sage.com
Subject line: "Privacy" · We respond within 5 business days to all privacy enquiries.