For California residents — CCPA / CPRA

California Privacy Notice

1. Who this notice applies to

This notice supplements the Farbridge Privacy Policy and applies solely to California residents — including consumers, business contacts, job applicants, and independent consultants in our network. It describes the personal information we collect, why we collect it, and the rights the CCPA gives you over it. Where this notice conflicts with the general Privacy Policy, this notice controls for California residents.

Farbridge Pharma Consulting is headquartered in San Diego, California. We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We have not done so in the preceding 12 months.

2. Notice at collection

The table below is our notice at collection: the categories of personal information we collect, the sources, the business purposes, who we disclose each category to, and how long we keep it. Category letters refer to Cal. Civ. Code § 1798.140(v)(1).

CategoryExamples we actually collectPurposeDisclosed toRetention
A. Identifiers Name, corporate email address, phone number, account ID, IP address Responding to enquiries, creating and securing accounts, service communications, fraud prevention Hosting and infrastructure providers Life of the account, then 24 months; enquiry records 36 months
B. Customer records (§ 1798.80(e)) Name, employer, job title, billing contact details. Card numbers are entered directly with our payment processor and never reach our systems. Contracting, billing, and course purchases Payment processor, accounting and tax advisors 7 years, to meet tax and accounting obligations
D. Commercial information Courses purchased, enrolment and transaction history, services enquired about Delivering purchased services, support, financial records Payment processor, hosting providers 7 years from the transaction
F. Internet or network activity Pages viewed on this site, GxP Academy lesson progress, browser and device type, server log entries Operating the site and LMS, tracking course completion, security and diagnostics Hosting provider Server logs 30 days; course progress for the life of the enrolment record
G. Geolocation data Approximate city or region inferred from IP address. We do not collect precise geolocation. Security, fraud prevention, and language routing Hosting provider 30 days
I. Professional or employment information Job title, employer, regulatory specialisms, CVs and résumés submitted to Careers or the consultant network Evaluating applications, matching consultants to engagements, scoping consulting work Nobody outside Farbridge, except the client with your consent when proposing you for an engagement Applicants 24 months; active consultants for the life of the relationship, then 24 months
J. Education information GxP Academy course completions, assessment results, certificates issued Issuing and verifying training certificates, which are compliance records Your employer, where the employer sponsors the training 10 years, reflecting GxP training-record retention expectations
Sensitive personal information Account log-in credentials. Content you submit to the QA Clinic may contain confidential business information, so please do not include personal health information or government identifiers. Authenticating you and securing your account only Nobody Life of the account

We do not collect categories C (protected classifications), E (biometric information), H (audio, visual, or similar sensory data), or K (inferences drawn to create a profile). We do not use automated decision-making or profiling to make decisions that produce legal or similarly significant effects.

Sources of personal information

  • Directly from you — contact, discovery call, QA Clinic, careers, newsletter, and account registration forms.
  • Automatically from your device when you use this site — server logs and LMS activity.
  • From your employer, where it sponsors your GxP Academy training or engages us for consulting work.
  • From our payment processor, which confirms the outcome of a transaction to us.

Use of sensitive personal information

We use sensitive personal information only for the purposes permitted by Cal. Code Regs. tit. 11, § 7027(m) — performing the service you asked for, and securing your account. We do not use or disclose it to infer characteristics about you. Because our use is limited to those permitted purposes, the right to limit does not apply, but we honour limit requests anyway rather than argue the point.

3. Your California rights

  • Right to know. Request the specific pieces of personal information we hold about you, plus the categories collected, the sources, the business purposes, and the categories of recipients. You may request information beyond the preceding 12 months, and we will provide it unless doing so proves impossible or would involve disproportionate effort.
  • Right to delete. Request deletion of personal information we collected from you, subject to the exemptions below.
  • Right to correct. Request correction of inaccurate personal information.
  • Right to opt out of sale or sharing. We do not sell or share personal information, so there is nothing to opt out of. If that ever changes, we will update this notice before it takes effect and publish a "Do Not Sell or Share My Personal Information" link.
  • Right to limit use of sensitive personal information. See above.
  • Right to non-discrimination. We will not deny you services, charge you a different price, or provide a different level of quality because you exercised a privacy right. We operate no financial incentive programmes.
  • Right to data portability. Receive the personal information you provided to us in a portable, readily usable format.

Global Privacy Control

We honour the Global Privacy Control (GPC) and other opt-out preference signals sent by your browser or extension. Because we do not sell or share personal information and run no advertising or analytics trackers on this site, a GPC signal requires no change in our processing — there is no sale or sharing to stop.

4. How to submit a request

Submit a request by either method below. Please put "California Privacy Request" in the subject line and tell us which right you are exercising.

Verification

To protect your information, we verify your identity before acting on a request to know, delete, or correct. For account holders, we verify by asking you to sign in. For everyone else, we match at least two data points you supply against our records — typically the email address you used with us plus the employer or enquiry details. We ask for more data points for requests covering specific pieces of information than for requests covering categories. We use the information you give us for verification only, and we delete it afterwards.

Authorized agents

An authorized agent may submit a request on your behalf. The agent must provide written permission signed by you, and we may still contact you to confirm the authorisation and to verify your identity directly. An agent registered with the California Secretary of State acting under a valid power of attorney does not need to provide separate written permission.

Our response times

We confirm receipt within 10 business days and respond substantively within 45 calendar days. If we need more time we will tell you why within that first 45 days and take up to 45 additional days. Requests are free unless they are manifestly unfounded or excessive, in which case we will tell you why before charging anything or declining.

When we may decline

We may decline a deletion or correction request where the law requires or permits us to keep the record — most often to complete a transaction you asked for, to comply with GxP and pharmacovigilance record-keeping obligations, to keep tax and accounting records, to detect security incidents, or to exercise or defend legal claims. Where we decline in part, we tell you which part and why, and we delete the rest.

5. Job applicants and consultants

If you apply for a role at Farbridge or join our consultant network as a California resident, the rights above apply to you in that capacity too. We use application and consultant data to evaluate you for the role or engagement, to match you to client projects, and to administer the relationship. We do not use it for any secondary purpose, and we do not sell or share it.

6. Other California disclosures

Shine the Light (Cal. Civ. Code § 1798.83)

We do not disclose personal information to third parties for their own direct marketing purposes. California residents may request confirmation of this once a year at info@farbridgepharma.com.

Minors (Cal. Bus. & Prof. Code § 22581)

This site and the GxP Academy are business services intended for professional adults. We do not knowingly collect personal information from anyone under 18, and we do not sell or share the personal information of consumers under 16. If a California resident under 18 has posted content here, write to us and we will remove it.

Cookies and tracking

This site sets no advertising, analytics, or cross-site tracking cookies. Local browser storage is used only to remember your theme and language preference, and signed-in users receive an authentication cookie needed to keep them logged in. Both are strictly necessary or preference storage, not tracking.

7. Changes and contact

We review this notice at least every 12 months and update the date below whenever it changes materially. For any question about this notice, or to raise a concern before or instead of a formal request, contact info@farbridgepharma.com.

Exercise Your Rights

California residents may request access, deletion, or correction of their personal information. We respond within 45 days and never charge for a first request.

Email Privacy Team

Or call +1 (619) 340-7933.