Privacy Policy

This Privacy Policy explains how Core Ltd. (“Core”, “we”, “our”, “us”) collects, uses, stores, and protects your personal information when you use the Core Online Assessment Tool (“the Service”).
By using the Service, you agree to the terms of this Privacy Policy.

1. Information We Collect

We may collect the following

  • Personal details provided during registration such as your name, email address, organisation, and password

  • Information about your use of the Service including login times, activity, and usage data

  • Files, reports, or other materials you upload or create within the Service

  • Payment and billing details when applicable

  • Technical data such as IP address, browser type, operating system, and device identifiers

2. How We Use Your Information

We use your information for the following purposes:

  • To provide and manage the Service

  • To create and manage your account

  • To issue certificates and assessment outputs where applicable

  • To process payments and issue invoices

  • To communicate with you about your account, updates, or support requests

  • To improve and secure the Service

  • To comply with legal and regulatory requirements

3. Legal Basis for Processing

We process your personal data based on

  • Your consent, where you have provided it

  • The need to perform our contract with you (for example, providing access to the Service)

  • Our legal obligations

  • Our legitimate interests, including improving the Service and preventing misuse

4. Data Sharing

We may share your information with:

  • Accredited Core Assessors, when required to deliver assessments or issue certificates

  • Payment service providers for secure payment processing

  • Technical service providers who support the Service

  • Regulatory or law enforcement authorities if required by law

5. Data Retention

We may share your information with:

  • We retain your personal data for as long as your account is active or as required to provide the Service.

  • After account closure, we may retain limited records where legally required or for legitimate business purposes such as auditing and dispute resolution.

6. Security

We may share your information with:

  • We use technical and organisational measures to protect your data from loss, misuse, or unauthorised access.

  • You are responsible for keeping your login credentials confidential.

7. Your Rights

Under the UK GDPR and EU GDPR, you have the following rights:

  • Access: request a copy of the personal data we hold about you

  • Rectification: request correction of inaccurate or incomplete data

  • Erasure: request deletion of your personal data, subject to legal obligations

  • Restriction: request limits on how we process your data
  • Portability: request transfer of your data to another provider

  • Objection: object to processing where based on legitimate interest

  • Withdrawal: withdraw consent at any time where processing is based on consent

8. International Data Transfers

If your data is transferred outside the UK or EU, we ensure appropriate safeguards are in place, such as standard contractual clauses.

  • Keep you logged in

  • Improve functionality and performance

  • Analyse usage for service improvements

9. Cookies

The Service uses cookies and similar technologies to

  • Keep you logged in

  • Improve functionality and performance

  • Analyse usage for service improvements

You can control cookies through your browser settings, but some features of the Service may not function without them.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Updates will be posted on the Service, and continued use of the Service means you accept the changes

11. Contact Information

If you have any questions or concerns about this Privacy Policy or our handling of your data, please contact us:
Core Ltd.

  • email address