Privacy Policy

1. Introduction

Kore Platform Ltd ("Kore", "we", "us", "our") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.

We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Kore Platform Ltd is the data controller for your personal data.

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address, phone number, password
• Profile Information: Professional bio, services offered, qualifications, photos
• Payment Information: Bank details for payouts (processed securely by Stripe)
• Communications: Messages, reviews, support requests
• Compliance Data: Insurance details, self-employment declarations, ID verification

2.2 Information Collected Automatically

• Device Information: IP address, browser type, operating system
• Usage Data: Pages visited, features used, booking patterns
• Location Data: Approximate location based on IP (for local search)
• Cookies: See our Cookie Policy

3. Legal Basis for Processing

We process your personal data based on:

• Contract: To provide our Services and fulfill bookings
• Legitimate Interests: To improve our Platform, prevent fraud, and market our services
• Legal Obligation: To comply with UK law (e.g., tax records, anti-money laundering)
• Consent: For marketing communications and cookies (where required)

4. How We Use Your Information

• Provide, maintain, and improve our Services
• Process bookings, payments, and payouts
• Send transactional communications (confirmations, receipts)
• Provide customer support
• Verify Professional compliance and qualifications
• Detect and prevent fraud and abuse
• Comply with legal obligations
• Send marketing communications (with consent)
• Analyze usage to improve the Platform

5. Data Sharing

We may share your information with:

• Other Users: Profiles visible to facilitate bookings (name, services, reviews)
• Payment Processors: Stripe for secure payment processing
• Service Providers: Hosting, email (Resend), analytics
• Legal Authorities: When required by law or to protect rights

We do not sell your personal data to third parties.

6. Data Retention

We retain your data for:

• Active accounts: For the duration of your account
• Deleted accounts: Up to 30 days for recovery, then permanently deleted
• Financial records: 7 years (UK legal requirement)
• Dispute records: 3 years after resolution

7. Your Rights (GDPR)

Under UK GDPR, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data ("right to be forgotten")
• Portability: Receive your data in a machine-readable format
• Restriction: Limit how we use your data
• Objection: Object to processing based on legitimate interests
• Withdraw Consent: For processing based on consent

To exercise these rights, go to Settings → Privacy → Data Management in your dashboard, or contact us at privacy@kore.uk.

8. Data Security

We implement appropriate technical and organizational measures to protect your data, including:

• Encryption in transit (HTTPS/TLS) and at rest
• Secure password hashing (bcrypt)
• Access controls and authentication
• Regular security assessments
• PCI-DSS compliant payment processing (via Stripe)

9. International Transfers

Your data is primarily stored in the UK/EEA. Where we transfer data internationally (e.g., to cloud service providers), we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions.

10. Children's Privacy

Our Services are not intended for users under 18 years of age. We do not knowingly collect personal data from children. If we learn we have collected data from a child, we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes via email or through the Platform. The "Last updated" date at the top indicates the most recent revision.

12. Contact Us

For privacy-related inquiries or to exercise your rights:

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.