Kore78 Technology Ltd ("Kore78", "we", "us", or "our") operates Kore78's Platforms, a digital enterprise solution that provides businesses and financial institutions with secure, cloud-based systems for core banking and human resource management.
This Privacy Notice ("Notice") applies to information that we collect and use about you when you access or use our website https://www.kore78.com/ (the "Site") or other online or mobile service that links (the "Platform") to or otherwise presents this Privacy Notice to you. We refer to these products and services collectively as the "Services".
PLEASE READ THIS PRIVACY NOTICE CAREFULLY TO UNDERSTAND HOW WE HANDLE YOUR INFORMATION. PLEASE ALSO REVIEW OUR TERMS OF USE, WHICH CONTAIN ADDITIONAL IMPORTANT INFORMATION ABOUT YOUR USE OF OUR SERVICES.
Information we collect
We collect a variety of information when you interact with our Services. The types of data we collect depend on how you use the Services and the information you choose to provide. Below is an overview of the different categories of information we collect directly from you, as well as through automated means and third parties. This table summarises the key types of information collected and their respective purposes.
| Type of Information | Description |
|---|---|
| Personal Information | Information like full name, email address, phone number, billing info, demographic details (e.g., gender), account-related info (username, password), and other details you directly provide. Full name, business or organization name, email address, phone number, country, and role/department. |
| Billing and Financial Information | Billing address, payment method details, subscription invoices, or transaction metadata. |
| Account & Transaction Information | Login credentials, password (hashed), 2FA tokens, and access logs. |
| User-Generated Content | Content you create, such as comments, reviews, survey responses, posts, and forum participation. |
| Class & Service Information | Details about the Services you require. |
| Customer Service Interactions | Data from communications with customer support, including issues or requests you submit. |
| Regulatory & KYC Information (CBA customers) | BVN, registration numbers, ID verification details, or documentation from partner banks and verification providers. |
| Employee Data (HRKore users) | Employee profile data, payroll details, leave/attendance records, appraisals, and related HR information. |
| Demographic & Profile Information | Information such as preferences or other details provided as part of your account profile. |
| Information about Others | Data you provide about someone else (e.g., gift recipient info for shipping). |
| Social Media Information | Information gathered from your social media profiles if you log in via third-party platforms (e.g., Facebook, Twitter). |
| Automated Information | Data collected via cookies, IP address, device info, browser details, and app usage when interacting with the website or mobile applications. |
| Location Information | General location data, such as city, state, or postal code, collected through IP address or device. |
| Third-Party Information | Additional data from third parties (e.g., demographic, statistical info from partners) to enhance your experience. |
We collect this information to enhance your experience, improve our services, analyse usage trends, and deliver targeted content and advertisements. For more details on how we use these technologies and your choices regarding them, please refer to the relevant sections of this Privacy Notice.
This table highlights the types of information collected and their corresponding descriptions. The goal is to provide a quick overview of the different categories of data that Kore78 may gather.
Cookies and tracking technologies
We use tracking technologies on our website, and information about their usage is specified in our cookies and tracking technologies notice.
Lawful bases for processing data
We are required to process your data under at least one of these lawful bases, as specified under the relevant data protection laws:
- Legitimate interest: Processing your data is necessary for our legitimate interests or the legitimate interests of a third party, unless our legitimate interests are outweighed by your interest, in which case we may not rely on this lawful basis.
- Consent: You have given explicit consent for us to process your data for a specific purpose.
- Contract: If the data processing is necessary for a contract with us or because we have asked you to take specific steps before entering that contract.
- Legal obligation: If the processing of your data is necessary where there is a statutory obligation on us.
Purpose of processing your data and the lawful bases
The legal bases for using your information as set out in this Privacy Notice are as follows:
| Purpose of Processing | Lawful Bases |
|---|---|
| To help us develop, improve, customise, or restructure our services. To conduct background checks and verify the accuracy of information provided during registration. To inform you whenever there are changes to our terms of business or services. To take statistical data and analytics for our internal use. To analyse site usage and provide, maintain, and improve the content and functionality of the website. | Legitimate interest |
| To send marketing or promotional messages to you. | Consent |
| To secure your data. To investigate fraudulent activities and report to appropriate regulatory authorities. | Legitimate interest, legal obligation |
| To send you service-related messages. To create and manage your account and user access. To facilitate the delivery of our service to you. To enforce our terms of use and any terms and conditions of any other agreements for our services. To communicate with you and ensure user support. To address your inquiries, process registration, and complete transactions. | Contract |
| To interact with regulatory authorities or other public authorities concerning you. | Legal obligation |
Your rights as a data subject
You are vested with certain rights as a data subject. They include the right to:
- access personal data we hold about you by requesting a copy of the personal data we hold about you;
- rectify such information where you believe it to be inaccurate;
- restrict the processing of your data in certain circumstances;
- object to the processing of your data where we intend to process such data for marketing purposes or when our lawful basis is legitimate interest;
- where feasible, receive all personal data you have provided to us—in a structured, commonly used, and machine-readable format—and transmit the information to another data controller;
- request the erasure of your data (also known as the right to be forgotten);
- withdraw your consent to processing your data;
- lodge a complaint with the regulatory authority where you have reason to believe that we have violated the terms of this Notice. (You may complain or seek redress from us within 30 days from when you first detected the alleged violation.)
You may seek to exercise any of the above rights by emailing us at dpo@kore78.com.
How we disclose your data
We may share your data with third parties. When using our website, we share your data with the following third parties:
| Third Parties | Purpose of data sharing |
|---|---|
| Partner Banks and Institutions | To process deposits, withdrawals, reconciliations, and settlements in connection with CBA. |
| Payments & Payroll Processors | To facilitate subscription payments and payroll disbursements under HRKore. |
| Verification & Compliance | For KYC/AML checks and regulatory compliance. |
| Cloud Hosting Providers | For secure hosting, data backup, and infrastructure services. |
| Acquiring companies | Your data may be shared with an acquiring company in the event of a sale, merger, or acquisition of our company. |
| Legal and Regulatory Authority | We may disclose your personal information if we believe it is reasonably necessary to comply with a law, regulation, order, subpoena, audit, or to protect any person's safety or to address fraud, security, or technical issues. |
Aggregate / de-identified data
From time to time, we may disclose aggregate and/or de-identified information about use of the Services, such as by publishing a report on usage trends. The disclosure of such data is unrestricted.
Retention of your data
We keep your information for no longer than necessary for the purposes for which it is processed. The length of time for which we retain information depends on the purposes for which we collected and used it and/or as required to comply with applicable laws.
In some cases, we may retain minimal data where required for legal obligations or regulatory compliance.
Security of data
We prioritise your privacy and use advanced measures to protect your data. While no online platform is entirely foolproof, we are dedicated to safeguarding your information against loss, misuse, and unauthorised access. If a significant breach occurs, we will promptly inform you and act swiftly to address it.
Children's privacy
Kore78 is not intended for individuals under 18 years old. We do not knowingly collect data from anyone under this age. If we learn we have collected data from a minor without consent, we will delete it.
International transfer of data
We transfer personal data outside our country of operation. We ensure any cross-border data transfers adhere to all necessary data protection regulations. This means that before transferring personal data, we either confirm that the recipient country has robust data protection laws or, if not, employ specific contractual terms and other safeguards to protect the data. In cases where the destination country might not meet stringent data protection standards, we will leverage other relevant data transfer mechanisms, seek authorisation from the regulator, or obtain your consent before proceeding and inform you of any risks. Should you wish to learn more about how we ensure data protection during these transfers, details will be provided upon request.
Marketing and communications
We only send marketing communications to you with your consent. You can opt-out at any time by clicking "unsubscribe" in our emails or contacting dpo@kore78.com.
Complaints
If you have any complaints or inquiries relating to this Notice or your rights under this Notice, or you are not satisfied with how we manage your personal data, please contact our Data Protection Officer (DPO) at dpo@kore78.com. Our DPO will examine your concerns and update you on the resolution process.
Changes to this Notice
We update our privacy notice occasionally. We will notify our users when we make a change, and visitors will know this by checking the last date of the update on this page whenever they visit.
