Core Factors Privacy Policy

Effective Date: March 21, 2025

At Core Factors, we are committed to protecting your personal information and ensuring transparency in how we collect, use, and share data. This Privacy Policy describes your rights and how we comply with global privacy laws, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA/CPRA).

Scope of This Policy
This policy applies when Core Factors is the data controller of your personal data. It covers visits to our website, use of our products and services (including assessments and the Evidentra AI assistant), account creation, and communication with our team.

Information We Collect
We collect the following types of information:

a. Information You Provide
This includes your name, email, organization, contact details, responses to assessments (e.g., personality, emotional intelligence, career preferences), and any feedback or data entered in Evidentra.

b. Automatically Collected Information
This encompasses your IP address, browser type, device identifiers, pages viewed, interactions, and referral sources.

c. Information from Third Parties
We may collect data from publicly available sources or information shared by event partners (e.g., webinar registration platforms).

Use of Personal Information
We use your data to deliver and personalize our services, communicate updates or support, analyze and improve product performance, ensure platform security, and fulfill legal and contractual obligations. We may process special category data (such as personality or emotional profile information) with your explicit consent, as permitted under GDPR Article 9(2)(a).

Legal Basis for Processing (EEA, UK, and Swiss Users)
Our lawful bases for processing personal data under GDPR include consent (for marketing communications or optional services like Evidentra), contractual necessity (to deliver purchased products or services), legitimate interests (for research, service improvement, and internal operations), and legal obligation (to comply with applicable laws or court orders).

AI and Profiling
Some features, including Evidentra, may involve automated processing or profiling. These services analyze your input and assessment results to provide personalized suggestions, such as communication strategies or decision support. Participation in these features is voluntary. You may decline to activate Evidentra, request human review of AI-generated suggestions, or withdraw consent for AI use at any time. We do not use automated processing to make legal, financial, or employment decisions.

Data Sharing and Service Providers
We do not sell your personal data. We may share data with trusted third parties under strict contractual and legal safeguards, including cloud hosting and infrastructure providers (e.g., AWS), analytics and marketing partners (e.g., Google, Meta – only on our public website), and email and CRM platforms for service notifications. All service providers are bound by data processing agreements that comply with GDPR Article 28 and applicable U.S. privacy laws.

Behavioral Advertising and Cookie Use
We use cookies and tracking technologies on our website to personalize content, measure performance, and display relevant ads. These include Google Ads and Meta/Facebook Pixel. These may qualify as “sharing” under California privacy law. No ad tracking occurs inside user accounts or on assessment platforms. See our Cookie Policy and Do Not Sell or Share My Personal Information page for details and opt-out options.

Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. This includes encryption, access controls, and regular security assessments.

Data Retention
We retain your personal data only as long as necessary to fulfill the purposes outlined in this policy, comply with legal obligations, resolve disputes, and enforce agreements. Specific retention periods depend on the type of data and the context of its collection.

Your Rights
Depending on your jurisdiction, you may have the right to access, correct, delete, or restrict the processing of your personal data. You may also have the right to object to processing, data portability, and to withdraw consent where processing is based on consent. To exercise these rights, please contact us at privacy@corefactors.com.

Children’s Privacy
Our services are not directed to individuals under 16. We do not knowingly collect personal data from children under 16. If we become aware that we have inadvertently collected such data, we will take steps to delete it promptly.

International Data Transfers
Core Factors operates globally, and your personal data may be transferred to and processed in countries outside your jurisdiction, including the United States. We ensure that appropriate safeguards are in place to protect your data in accordance with applicable privacy laws.

Updates to This Policy
We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will notify you of significant changes by posting the updated policy on our website and indicating the effective date.

Contact Us
If you have questions or concerns about this Privacy Policy or our data practices, please contact us at:

Email: privacy@corefactors.com
Phone: 844-989-5323
Mailing Address:
Core Factors
27636 Ynez Road L-7 #346
Temecula, CA 92591