Privacy Policy
Last updated: 10 September 2026
Who we are
Clinical Research Insider is run by James, trading as a sole trader. This policy explains what personal data is collected when you use this website, why, and what your rights are. Questions about anything here: cri.clinicalresearchinsider@gmail.com — it comes straight to me.
What we collect, and why
When you buy a product. Payments are processed by Paddle.com, acting as the merchant of record. Paddle collects your email address, billing country and payment details; I never see or store your card details. Paddle shares your email and order details with me so I can deliver what you bought and honour the refund policy.
When you send your CV for review. The CV review form collects your email address, the role you're targeting, where you're based, your CV file, and any notes you choose to add. This is the most personal data this site handles, and it's used for exactly one thing: producing your CV review, targeting shortlist and revision pass. It is never used for marketing, never shared with employers or recruiters, and never sold.
When you subscribe to the newsletter. Your email address, handled by Substack, used to send you the newsletter. Every email includes an unsubscribe link.
When you browse the site. The site uses the Meta Pixel, an advertising tool that sets cookies and records how you found and used the site (pages viewed, checkout started). This helps measure whether advertising works and to show relevant ads on Facebook and Instagram, including remarketing to previous visitors. Our hosting provider, Cloudflare, also processes technical data such as IP addresses in server logs as part of serving and securing the site.
The legal bases
Clinical Research Insider operates from Australia and serves customers worldwide, including the UK and EU. For UK and EU customers, under data protection law (GDPR) the bases relied on are: performance of a contract for order delivery and the CV review; consent for the newsletter; and legitimate interests for advertising measurement and site security. You can object to processing based on legitimate interests at any time — see "Your rights" below.
Who else handles your data
These services process data on this site's behalf:
- Paddle — payments, as merchant of record · privacy policy
- Tally — the CV review form and file upload · privacy policy
- Substack — the newsletter · privacy policy
- Meta — advertising measurement and remarketing (Meta Pixel) · privacy policy
- Cloudflare — website hosting · privacy policy
Some of these providers process data outside the UK and EEA. Where they do, they rely on recognised safeguards such as adequacy decisions or standard contractual clauses.
Cookies and advertising choices
The Meta Pixel sets cookies in your browser. You can control this: block or delete cookies in your browser settings, adjust your ad preferences at facebook.com/adpreferences, or use your device's tracking controls. The site works fully with cookies blocked.
How long data is kept
CV files and review correspondence are kept only as long as needed to complete your review and revision pass, and are deleted no later than 12 months after your review completes. Order records are kept as long as required for tax and accounting. Newsletter data is kept until you unsubscribe.
Your rights
You have the right to access the personal data held about you, to correct it, to have it deleted, to restrict or object to its processing, and to receive a copy in a portable format. To use any of these rights, email cri.clinicalresearchinsider@gmail.com. If you're unhappy with how your data has been handled, you can complain to your data protection authority — in Australia, the Office of the Australian Information Commissioner (oaic.gov.au); in the UK, the Information Commissioner's Office (ico.org.uk); or your local EU authority.
Changes to this policy
If this policy changes materially, the date at the top will be updated and significant changes will be flagged on this page.