Privacy Policy

Last Updated: June 2026

1. Our Commitment to Privacy

  • KORE highly respects the privacy of its users and is fully committed to protecting their personal data. This Privacy Policy is constructed and implemented in strict compliance with the Saudi Arabian Personal Data Protection Law (PDPL), its executive regulations, and other relevant data protection frameworks applicable within the Kingdom of Saudi Arabia.

2. Categories of Data Collected

We collect and process personal data necessary for delivering our technical assessment capabilities, including:

  • Personal & Professional Attributes: Full name, email address, telephone number, job title, and employer or affiliated corporate entity.
  • Account Operational Data: Access credentials, encrypted passwords, and user-defined profile settings.
  • Assessment & Behavioral Data: Test answers, psychometric indicators, psycholinguistic records, and generated analytical reports.
  • Technical & Usage Metadata: Internet Protocol (IP) address, browser specifications, operating system attributes, navigation flow, and cookies.

3. Purposes and Lawful Basis for Data Processing

Personal data is processed strictly for the following operational and lawful objectives:

  • Creating, maintaining, and verifying user accounts.
  • Executing behavioral, role-fit, and organizational dynamic testing models.
  • Generating individualized profiles, performance indicators, and group alignment scores.
  • Providing continuous technical assistance, debugging services, and customer care.
  • Optimizing service delivery, evolving platform features, training core algorithms, and personalizing client workflows.
  • Complying with regulatory obligations, anti-fraud frameworks, and judicial or statutory demands enforced in Saudi Arabia.

4. Data Sharing and Authorized Disclosures

  • Zero Commercial Exploitation: KORE explicitly guarantees that it does not sell, rent, lease, or trade personal data with third parties for commercial or marketing goals.
  • Lawful Disclosures: Data disclosure is restricted exclusively to the following circumstances:
    • Upon obtaining prior explicit consent from the data subject.
    • To comply with an absolute statutory obligation or valid judicial mandate issued by competent Saudi government authorities.
    • Sharing data with trusted technical sub-processors and cloud infrastructure operators bound by strict confidentiality and data-protection covenants.

5. Security Measures and Safeguards

  • KORE implements robust technical and administrative measures to secure personal data against accidental loss, unauthorized access, modification, destruction, or unlawful exposure. These safeguards incorporate industry-standard encryption protocols, firewalls, network monitoring, and role-based access control systems.

6. Data Retention Period

  • Personal data is retained solely for the minimum duration required to fulfill the documented operational objectives, statutory requirements, or contractual terms. Upon the expiration of the retention justification, data is permanently erased or anonymized using secure methodologies.

7. Data Subject Rights (Under PDPL)

In accordance with the Saudi PDPL, users possess distinct statutory rights regarding their personal data, including:

  • The right to be informed about the specific categories of data processed and the legal justification for processing.
  • The right to access their personal data held by the platform and request a copy.
  • The right to rectify, update, or amend inaccurate, obsolete, or incomplete data.
  • The right to request the erasure or destruction of data when the processing purpose ceases to exist.
  • The right to withdraw consent at any time, provided there is no conflicting legal or statutory basis requiring continued processing.

8. Cookies Management

  • KORE utilizes cookies to preserve session states, analyze traffic trends, optimize performance, and simplify registration protocols.
  • Users maintain the absolute right to manage, restrict, or completely block cookies via their internet browser preferences.

9. Data Localization and Cross-Border Transfers

  • Some data processing or hosting may be performed by authorized technological service providers located within or outside the Kingdom of Saudi Arabia. KORE guarantees that any cross-border transfer complies with the conditions set by the Saudi Data and AI Authority (SDAIA) to maintain an equivalent tier of protection.

10. Contact Information

  • For any inquiries, regulatory compliance audits, or to exercise your statutory privacy rights, please contact our Data Protection Officer at: