Privacy policy

This site is a directory compiled from public federal records. Most of it can be read without giving us anything at all: there is no signup wall and no account needed to search PharmaceuticalCompanies.com.

What we collect

Only three things, and only when you choose to do them.

• Claiming a company profile. Your email address, and optionally your name, role and a note. We store a one-way hash of your IP address to catch abuse. We never store the raw IP.
• Sending a sourcing request. Your contact details and whatever you write about the project: services needed, molecule type, stage, volumes, timeline, budget and message. Only what you type into the form.
• Signing in. A short-lived sign-in token and a session cookie (pc_session). The cookie is strictly functional: it keeps you logged in and does nothing else. There is no password to store, so there is no password to leak.

What we do not collect

• No advertising pixels, retargeting tags or conversion trackers.
• No fingerprinting, and no data-broker enrichment of your visit.
• No purchase of contact lists to seed the site.

Measurement

We measure traffic with two tools, and neither is used for advertising.

• Vercel Web Analytics, for aggregate page counts. It is cookieless and builds no profile of you.
• Google Analytics 4, so we can see which parts of the register are actually useful. It sets first-party cookies (names beginning _ga) to tell a returning visitor from a new one, and it truncates IP addresses before they are stored. We have not enabled Google Signals, ad personalisation or any advertising integration, so your visit is not used to target you elsewhere.

If you would rather not be counted, Google publishes a browser opt-out add-on, and any tracker blocker or “do not track” extension will stop both tools. Nothing on this site is withheld from you for blocking them.

A commitment about other people’s data

The FDA publishes a named contact and email address for every one of the roughly 10,000 registered drug establishments. That is public record and we ingest it, but we never display it. Republishing several thousand individuals’ work email addresses would turn this site into a scraping target and is a poor way to treat people named in a regulatory filing. No page on this site renders those fields, and the code that reads facility records deliberately omits the columns.

Who your data is shared with

• Suppliers you asked us to contact. If you send a sourcing request, we pass it to companies whose FDA registrations match what you described. That is the entire purpose of the form.
• Our infrastructure providers. Vercel (hosting and analytics), Neon (database), SendGrid (transactional email) and Google (Analytics). They process data on our behalf and do not have permission to use it for their own purposes.

We do not sell your data. We do not pass it to data brokers. We do not add you to a marketing list because you used a form, and any newsletter would be a separate, explicit opt-in.

How long we keep it

Sourcing requests and profile claims are kept while they are commercially relevant and reviewed periodically. Sign-in tokens expire after fifteen minutes and sessions after thirty days. Ask us to delete something and we will.

Your rights

Wherever you are, you can ask us what we hold about you, ask for it to be corrected, or ask for it to be deleted. If you are in the UK or EU those are rights under the UK GDPR and GDPR; if you are in California they are rights under the CCPA/CPRA, including the right not to be discriminated against for exercising them. We honour the same requests from everyone regardless of where you live, because operating two standards is not worth the complexity.

Email hello@pharmaceuticalcompanies.com and we will action it. No form to fill in.

Company profiles

Company pages describe businesses, not individuals, and are compiled from public federal records. If a page about your company is wrong, you can claim it and edit the descriptive fields, or email us. We do not remove accurate regulatory facts drawn from the federal record, and we do not accept payment to do so.

Changes

If this policy changes materially we will update the date at the top and, where the change affects data you have already given us, tell you directly.