Your career data, handled like regulated data.

01Who we are and what this covers

Regulatory Jobs is a job board for regulatory, quality and clinical professionals in the life sciences. It is operated by Regulatory Leadership Partners LLC, a Wyoming limited liability company (“we,” “us,” or “Regulatory Jobs”). This policy explains how we collect, use, share and protect personal information when you visit regulatoryjobs.com, create a candidate or employer account, apply for a job, post a job, subscribe to job alerts, use our tools and AI assistant, or contact us. For the EU and UK General Data Protection Regulations, we are the controller of that information.

When an employer receives your application or views your profile, the employer decides what to do with it under its own privacy policy. Our Terms of Use require employers to use candidate information only for recruiting.

02Information you give us

• Candidate accounts. Your name, email address and password, or the name, email address and profile picture that Google or LinkedIn shares when you sign in with them.
• Candidate profiles. Whatever you choose to add: phone number, location (stored with its map coordinates), photo, bio, résumé, work history, education, skills, tools, projects, languages, years of experience, industry focus, links to LinkedIn, X, Instagram, Facebook or a portfolio, the result of our career personality quiz, and whether you want to hear about consulting work. Profiles created before October 16, 2026 may also hold a gender their owner chose to add; we no longer ask for it, and it is never shown to employers. If you connect Google or LinkedIn to your profile, we store the access tokens those services issue so the connection works.
• Applications. The answers and files you submit on an application form, which the employer designs, and résumés sent to a company directly before October 16, 2026, when that option was retired.
• Employer accounts. Your name, email address and password, your company’s name and profile, the jobs you post, the colleagues you invite, any claim you make to hire for some or all of a listed company’s sites (your name, work email address and the sites you claim, which we check against the company’s website before approving), and your billing details. Card details are entered with Stripe and never reach our servers.
• Recruiting activity. Messages between candidates and employers, interview arrangements, and the notes and ratings employers record about candidates.
• AI assistant conversations. What you type into the Regulatory Jobs assistant and its answers. If you use it without an account, we also keep the email address and the profile details you give it.
• Job alerts. Your name, email address, and the industries and location you want alerts for, plus a record of your consent: the sentence the form showed, the time, the page and a scrambled (hashed) form of your IP address, never the address itself.
• Regulatory Jobs Weekly. Your email address and a consent record (the sentence, the time, the page and, where available, a hashed form of your IP address), and whether you have confirmed or unsubscribed.
• Contact and support. Your name, email address, the subject and message you send, and any files you attach. We email you one confirmation that your message arrived.

03Information collected automatically

Logs and security. Our servers, and Cloudflare, which protects and delivers the site, record standard request details: IP address, browser, the page requested and the time. We use them to run and secure the service. Cloudflare also keeps copies of public pages, such as job listings and articles, so they load quickly; pages for signed-in visitors are never stored that way.

Job page counts. When a job page opens, and when its Apply button sends you to the employer’s site, we count it, so employers can see how their listings perform. Each visitor counts once per job per day. To tell visitors apart we use a one-way code made from the IP address and browser with a key that changes every day; the IP address itself is not stored, no cookie is set, the code is deleted after two days, and what we keep is only the daily total for each job.

Error reports. When something breaks, an error report goes to Sentry. Reports from your browser carry no IP address or cookies; reports from our servers can include the request that failed, including its IP address. If you allow analytics, your browser also tells Sentry when a visit starts, so we can see what share of visits run into an error.

Essential cookies. Signing in sets a secure session cookie, and the site remembers your cookie choice. Each one is listed in our Cookies Policy.

Analytics, only with your consent. If you allow analytics, Google Analytics measures which pages are used and where visitors arrive from, Microsoft Clarity records how pages are used (clicks, scrolling and a replay of the visit), and PostHog counts page views, measures how quickly each page loads and responds (Core Web Vitals), may show a short on-site survey, and keeps its visitor ID in memory only. Google signals and ad personalization stay switched off. Reject, or browse with Global Privacy Control or Do Not Track switched on, and none of these tools loads.

Maps. Company pages show the company’s location on an embedded Google map, so your browser contacts Google when you open one.

04How we use it, and why

We use personal information only for the purposes below. The EU and UK GDPR ask us to name a legal basis for each; the same table tells everyone else what we do.

Where we rely on legitimate interests, we have weighed them against your rights, and you can object at any time (section 12).

05What employers see

Regulatory Jobs works by connecting candidates with employers, so you should know exactly who sees what:

• Your profile is hidden from employer search unless you turn it on. In Settings, Privacy & matching, you can let employers on Regulatory Jobs find your profile. They then see it without your email, phone, links or résumé, and can contact you only after you apply. It is off by default, and nobody is counted in the anonymous talent figures our assistant gives employers unless it is on.
• When you apply on Regulatory Jobs, that employer receives your profile and your application, and can keep its own notes and ratings, which no other employer sees, and export its applicant list. If you withdraw the application in your dashboard, the employer no longer has it or the files you sent with it, and is told you withdrew; its own notes and ratings about you stay until your account is deleted.
• Never shown to any employer: your gender, the exact map coordinates of your location (employers see city, region and country), and your consulting preferences.
• When a job sends you to the company’s site, you leave Regulatory Jobs and apply in the employer’s own system, under its privacy policy. We do not see that application.
• Your application tracker is yours alone. Entries you add to it, including applications you finish on a company’s site, with your notes, contacts, next steps and the names of the documents you sent, are never shown to employers and never used in any aggregate. Only you can read them, and your own Regulatory Jobs assistant when you ask it to. For an application made on Regulatory Jobs, the tracker shows the status the employer set; your notes on it stay in your tracker.
• Imported listings. Many listings are collected from employers’ public career pages and posted on company pages we maintain. If you apply on Regulatory Jobs to one of those listings, your application is received by Regulatory Jobs, not passed automatically to the employer.

Employers must use candidate information only for recruiting, and must not use it to discriminate (Terms of Use). If you think an employer has misused your information, tell us.

06AI features and matching

• Profile from résumé. If you ask us to build your profile from your résumé, the file is sent to Anthropic (Claude), which extracts the details for you to review. Employers can generate a company profile the same way.
• The Regulatory Jobs assistant is powered by OpenAI. To answer a candidate, it can read that candidate’s profile, résumé, applications, application tracker and interviews, and add to or update the tracker when the candidate asks. To answer an employer, it can read that employer’s jobs, the profiles of candidates who applied to them, and the profiles candidates chose to make visible (without contact details). It can also help employers draft job descriptions.
• Job quality screening. Every new job posting is checked by TypeSafe AI, which receives only the job’s title, description and skills, to keep the board focused on regulatory, quality and clinical roles. It receives no candidate information.
• Matching. We compare a profile with a job using fixed rules on function, level, location, skills, sector and certifications; no AI scores anyone. Employers see a band (Strong, Possible or Low) for their own applicants to help sort them; candidates see the reasons a role was recommended, never a score. When you build your profile from a résumé, Anthropic also proposes your function, level, sectors, where you may work and your certifications, and you can change them in Settings. Matching never rejects anyone automatically; every hiring decision is made by a person at the employer.
• AI usage records. For each AI request we keep how many tokens it used, which feature it was for and an estimated cost, so spending stays under control. These records hold your account id (or, for visitors without an account, a one-way code made from the email they typed), never your messages, and are deleted after 400 days.

Under their API terms, Anthropic and OpenAI do not use the data we send them to train their models, and neither do we.

07Service providers

These companies process personal information for us, under their contracts and security obligations, to run the parts of the service named:

08Other disclosures

We never sell personal information and never share it with advertisers. Beyond employers (section 05) and the providers above, information leaves our hands only:

• With your agreement, for example when you ask us to introduce you to an employer.
• With professional advisers such as accountants and lawyers, under confidentiality.
• When the law requires it, in response to valid legal process. Where we lawfully can, we will tell you.
• In a business transfer, if Regulatory Jobs is merged, acquired or reorganized, under the protections described here.

09Emails, job alerts and the weekly newsletter

We send account emails (verification codes, password resets, application and interview updates) because the service needs them. We send no other email unless you ask for it below. In Settings, Notifications you can turn off the emails about messages, about your applications and the interview reminders; interview invitations, cancellations and new-time notices always go, because they carry the calendar entry.

Job alerts. When you set up an alert on our job alerts page we first email you a confirmation link, and nothing else is sent until you click it. After that you get at most one email a day, the morning after new roles match your industry and country, listing them all. A candidate can instead turn on a job alert in their dashboard: it also follows the function and level in their profile, and needs no confirmation email because it goes to the address their account already verified. Alerts set up before October 14, 2026 continue without a new confirmation.

Tracker reminders go out the morning a next step you set in your application tracker is due (US Eastern time), one email per step. Turn them off in the tracker or with the link in any reminder.

Regulatory Jobs Weekly is our newsletter: one email on Thursday mornings with about ten hand-picked roles, new company pages and one article, plus at most one clearly labeled “Featured” role that an employer paid to promote. It is sent from [email protected], only after you confirm your address by email, and every issue is reviewed by a person before it goes out. Readers of our earlier mailing list (people who signed up on regulatoryjobs.com before October 13, 2026) were moved to it; its first issue tells them why and how to leave. The Weekly is a separate list from job alerts and from any other newsletter we publish. We record whether each issue is delivered, opened or clicked, to see what readers find useful.

Stopping them. Every job alert and every newsletter carries a one-click unsubscribe link, and mail apps that show an “Unsubscribe” button can use it. Leaving the Weekly does not stop your job alerts, and the reverse. You can also email [email protected] with the subject “Unsubscribe” and we will remove you. The salary calculator and article pages do not collect email addresses.

10How long we keep it

11How we protect it

The site is served only over HTTPS with strict transport security. Passwords are stored only as salted hashes, sign-in uses a secure, HTTP-only session cookie, and access to our servers and database is restricted to the people who run the service. Card details never touch our servers.

No system is perfectly secure, and we will not pretend otherwise. If a breach affects your information, we will tell you, and the regulators who must be told, as the law requires.

12Your rights

Depending on where you live, including the EEA, the United Kingdom and a growing number of U.S. states, you have the right to:

• know what personal information we hold about you and receive a copy, in a portable format where applicable;
• have it corrected, or deleted along with your account;
• restrict or object to how we use it, including use based on legitimate interests;
• withdraw consent at any time, without affecting what was done before; and
• not be treated differently for exercising any of these rights.

We honor these requests from anyone, wherever you live. You can edit most of your profile yourself in your account, and in Settings, Your data you can download a copy of your data and delete your account. For anything else, email [email protected] from the address on your account. We will confirm receipt and complete the request within one month, or within 45 days where a U.S. state law sets that period. You may use an authorized agent; we may ask for proof of their authority.

If we decline a request, we will explain why. You can ask us to reconsider by replying with the word “appeal”, and we will answer within 45 days. In the EEA or the UK you can also complain to your data protection authority; in the U.S., to your state attorney general.

13Notice for U.S. state residents

Privacy laws in California, Colorado, Connecticut, Virginia and other states ask businesses to describe what they collect in standard categories. In the last 12 months we have collected:

We collect these from you, from your browser, and from Google or LinkedIn when you sign in with them, for the purposes in section 04, and keep them as section 10 describes. We do not use or disclose sensitive personal information for any purpose that would give you a right to limit it.

Sale and sharing. We do not sell personal information and do not target advertising. One nuance, stated plainly: if you allow analytics, Microsoft Clarity sets cookies that Microsoft documents as also serving its own advertising purposes, which some state laws could treat as “sharing.” It happens only after you opt in, you can withdraw at any time on our Cookies Policy page, and a browser that sends Global Privacy Control is treated as opted out.

14International transfers

Our servers are hosted by DigitalOcean in Singapore, and most of our service providers are in the United States. Wherever you are, your information is transferred to and processed in those countries, where privacy law may differ from yours. Where European or UK law requires a transfer mechanism, we and our providers rely on the European Commission’s Standard Contractual Clauses (with the UK addendum) or, for U.S. providers certified under it, the EU–U.S. Data Privacy Framework. Wherever it is processed, we protect your information as this policy describes.

15Age limit

Regulatory Jobs is for working professionals. You must be 18 or older to create an account, and we do not knowingly collect personal information from anyone under 18. If you believe a minor has given us information, tell us and we will delete it.

16Changes and revision history

When our practices change, this policy changes first, and the effective date above always shows the current version. If a change materially affects information you have already given us, we will say so prominently here, and tell you directly where the law requires it.

1. October 20, 2026You can turn off message, application-update and interview-reminder emails in Settings, Notifications, and sign out of every other device in Settings. You can withdraw an application made on Regulatory Jobs: the employer no longer has it or the files you sent with it. Your tracker can list the documents you sent (names only).
2. October 19, 2026Interviews now use only a Zoom meeting we create or the employer’s own meeting link; the outside booking service we no longer connect to is removed from section 07 and from connected accounts (section 02).
3. October 16, 2026You can download your data and delete your account yourself, in Settings, Account; deleting it removes your profile, résumés, applications, messages, interviews, AI conversations, tracker and alerts. When a résumé file is uploaded to our AI provider for reading, we now ask it to delete the file once read (section 10). We no longer ask for gender, and no employer sees gender, exact map coordinates or consulting preferences. An employer’s notes and ratings are visible only to that employer. Sending a résumé straight to a company was retired.
4. October 14, 2026Employers find your profile only if you turn that on in Settings (it is off by default), and never see your contact details before you apply. Matching is rule-based: bands for employers, reasons for candidates. The résumé tool also proposes your function, level and certifications. Job alerts can follow your function and level. AI usage records added to section 06. Added the application tracker: candidates can track applications made anywhere, private to them and their own assistant (sections 05 and 06), with optional next-step reminder emails, export and deletion (section 10). Added Regulatory Jobs Weekly, our confirmed-subscription newsletter, and its providers (Vercel and Convex); job alerts now need email confirmation and arrive as one daily email; one-click unsubscribe in every alert and newsletter. Candidates can turn on a job alert in their dashboard that follows their function and level; the separate “new job matches” email has stopped. Added the job page counts (section 03), company claims by employers (section 02) and Cloudflare’s copies of public pages; the U.S. state notice now lists match bands, not scores.
5. October 13, 2026Removed the mailing list and Mailchimp: the salary calculator and article pages no longer collect email addresses. The contact form now sends one confirmation email.
6. October 12, 2026Full rewrite: what employers can see, AI features and match scores, every service provider by name, legal bases, emails and alerts, retention, a U.S. state notice and transfers. Analytics now loads only after consent, and Global Privacy Control is honored.
7. April 26, 2025Previous version.

17Contact

Questions, requests and concerns about privacy go to one inbox, and a person reads every message:

Regulatory Jobs, operated by Regulatory Leadership Partners LLC
30 N Gould St Ste N, Sheridan, Wyoming 82801, USA
[email protected]