Privacy Policy

Who we are and what this policy covers

Core Staff LLC ("Core Staff", "we", "us") is a Dallas-based recruitment firm placing professionals into roles across the United States. This Privacy Policy explains how we collect, use, share and protect your personal information when you visit our website, use our services, or apply through us for a role.

We act as a data controller for the personal information you provide to us as a candidate, and as a data processor in limited circumstances when handling information on behalf of an employer client. In all cases, we comply with the California Consumer Privacy Act (CCPA), the Texas Data Privacy and Security Act (TDPSA), and other applicable U.S. federal and state privacy laws.

Information we collect from you

Information you give us directly

• Identity & contact data, including name, email, phone number, postal address, nationality, date of birth, and a profile photo where you choose to provide one.
• Professional information, CV/resume, employment history, education, certifications, languages, salary expectations and references.
• Right-to-work information, including passport, visa status, work permit details, and similar documents required to verify eligibility for roles in the U.S.
• Correspondence, including messages, notes, interview feedback and any information you share during calls with our advisors.

Information collected automatically

• Device and browser information, IP address, approximate location, and pages viewed.
• Cookies and similar technologies. See our Cookies Policy for full detail.

Information from third parties

• Public profiles you share with us (for example, LinkedIn) and references provided by people you nominate.
• Background and qualification checks, where required by an employer and only with your explicit consent.

How we use your information

We use your personal information for the purposes that are necessary to deliver our recruitment services and to run our business responsibly. Specifically, we use it to:

• Match you to suitable roles and present your profile to potential employers, with your prior agreement.
• Communicate with you about applications, interviews, offers, and ongoing relocation or visa support.
• Verify your identity, qualifications and right to work in the U.S.
• Improve our service quality, train our advisors, and develop new features on our website.
• Comply with our legal obligations (for example, anti-money-laundering and tax reporting requirements).
• Send you optional career insights, market reports or job alerts, only where you have opted in.

We do not use your information for automated decision-making that produces legal effects on you. Every shortlist and recommendation is reviewed by a human advisor before it leaves our office.

Our legal basis for processing

Under applicable U.S. privacy law, we process your data on the following grounds:

• Performance of a contract, when you engage us to help you find a role.
• Legitimate interest, to operate, market and improve our services in a way you would reasonably expect, balanced against your rights.
• Consent, for optional communications, certain cookies, and any sensitive data (e.g. health information for relocation insurance).
• Legal obligation, to comply with employment, tax or anti-fraud laws.

Where we rely on consent, you can withdraw it at any time without affecting the lawfulness of any processing carried out before withdrawal.

Who we share your data with

We share your information only when it is necessary, and only with parties bound by appropriate confidentiality and data protection obligations:

• Prospective employers. Your CV and supporting information are shared only after we discuss the role with you and you agree.
• Background-check providers, used solely where requested by the employer and with your explicit consent.
• Service providers, including secure cloud hosting, applicant-tracking platforms, communications tools and payroll partners that help us run our service.
• Legal and regulatory authorities, where we are required to disclose information by law.

We never sell your personal information, and we never share it with marketing networks or data brokers.

International data transfers

Most of our infrastructure is hosted within the United States. Where data needs to leave the U.S., for example, to share your profile with an employer based outside Texas, we rely on:

• Federal Trade Commission adequacy decisions, where available.
• Standard Contractual Clauses approved by the Federal Trade Commission.
• Additional safeguards such as encryption in transit and at rest, plus strict access controls.

How long we keep your information

We keep your personal information only as long as we need it for the purposes set out in this policy, plus a short period after to handle queries or legal claims:

• Active candidates: for the duration of our engagement plus up to 3 years.
• Placed candidates: up to 7 years after placement, to comply with tax, employment and audit obligations.
• Marketing subscribers: until you unsubscribe.
• Website analytics: typically up to 26 months in aggregated form.

You can ask us to delete your data sooner. See your rights below.

Your rights under U.S. state privacy law

You have the following rights in relation to your personal information. To exercise any of them, please contact our Privacy Officer using the details below:

• Right of access, request a copy of the personal data we hold about you.
• Right to rectification, correct anything that is inaccurate or incomplete.
• Right to erasure, ask us to delete your data, subject to limited legal exceptions.
• Right to restrict processing, ask us to pause certain uses of your data.
• Right to data portability, receive your data in a structured, commonly used format.
• Right to object, including to direct marketing at any time.
• Right to withdraw consent, where we rely on consent.
• Right to lodge a complaint, with the Texas Attorney General's Office or your local supervisory authority.

We respond to all rights requests within 30 days. There is no fee, except for clearly unfounded or excessive requests.

How we keep your data safe

We take the security of your information seriously and apply appropriate technical and organisational measures, including:

• Encryption in transit (TLS) and at rest for sensitive records.
• Role-based access controls and multi-factor authentication for our staff.
• Regular security reviews, penetration testing and supplier audits.
• Documented breach-response procedures, including 72-hour regulator notification where required.
• Mandatory data-protection training for everyone in our team.

Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our services, technology or legal requirements. When we make material changes, we will post a notice on our website and, where appropriate, contact you directly. The "Last updated" date at the top of this page always reflects the current version.

Talk to our Privacy Officer

If you have any questions about this policy or want to exercise any of your rights, please contact our Privacy Officer:

• Email: privacy@corestaff.com
• Post: Core Staff LLC, Privacy Officer, 1700 Pacific Avenue, Suite 3850, Dallas, TX 75201
• Phone: +1 (214) 555-0142