Privacy

1. Who we are

Earn with Core is the proprietary market research panel operated by Core Behaviour ("we", "us", "our"), a market research and insights company registered in India at Golf Link Software Park, LT No. 8/3, Princeville, Challaghatta Village, Bengaluru, Karnataka 560071, India.

For the personal data described in this policy, Core Behaviour is the data controller. This policy explains what we collect from panel members, why, who we share it with, and the control you have over it.

2. What we collect

Information you give us

• Account details — your name, email address and password (stored hashed, never in readable form).
• Profile information — age or date of birth, gender, country and region, household composition, employment, income bracket, education, and the product and service categories you use. This is what determines which studies you are matched with.
• Survey responses — your answers to the studies you choose to take part in.
• Redemption details — the PayPal address or delivery email needed to send a reward you have requested.
• Correspondence — messages you send to member support.

Information collected automatically

• Device and connection data — IP address, browser type, operating system, and device identifiers.
• Usage data — pages visited, invitations opened, studies started and completed, and timestamps.
• Quality and fraud signals — response times, answer consistency checks and duplicate-account indicators. These protect the integrity of the research and, by extension, the members taking part honestly.
• Cookies and similar technologies — described in our cookie policy.

Sensitive information

Some studies ask about topics treated as sensitive under data protection law — health conditions, political opinions, religious beliefs, or ethnicity, for example. Participation in those studies is always optional, we tell you before you begin, and we ask for your explicit consent. You can decline without affecting your account or your balance.

3. Why we use it

• To create and administer your panel account.
• To match you with studies you are likely to qualify for, and to send you invitations.
• To calculate, credit and pay out your points.
• To produce research findings for our clients in aggregated, de-identified form.
• To detect and prevent fraud, duplicate accounts and low-quality responses.
• To respond to your support and privacy requests.
• To meet our legal, tax and accounting obligations.

4. Our legal basis

Where the GDPR, UK GDPR or a comparable regime applies, we rely on:

• Contract — to run your membership, send invitations and pay your rewards.
• Consent — for sensitive-category questions and for optional marketing communications. You may withdraw consent at any time.
• Legitimate interests — to prevent fraud, secure our systems, and improve the panel, balanced against your rights.
• Legal obligation — where we must retain records for tax or regulatory purposes.

5. Who we share it with

We share personal data only where it is necessary, and only with:

• Research clients — in aggregated or de-identified form. Clients receive patterns across respondents, not your name, email or contact details. Where a study needs identifiable follow-up, such as an interview, we ask for your specific consent first.
• Service providers — survey platforms, email delivery, hosting, analytics, payment and gift card fulfilment partners. They act on our instructions under written contracts and may not use your data for their own purposes.
• Professional advisers — auditors and legal advisers, where required.
• Authorities — where we are legally compelled, or to establish or defend legal claims.
• A successor — if the business is restructured, merged or acquired, under equivalent protection.

6. We do not sell your data

We do not sell, rent or trade your personal information to advertisers, data brokers or any other third party, and we do not share it for cross-context behavioural advertising. Our revenue comes from research studies commissioned by clients, not from the transfer of member data.

7. International transfers

We operate in more than 40 markets, so your data may be processed in a country other than your own, including India where we are established. Where we transfer personal data out of the European Economic Area, the United Kingdom or another region with transfer restrictions, we use an approved safeguard — typically the European Commission's Standard Contractual Clauses, together with additional technical and organisational measures. You can request details of the safeguard applied to your data.

8. How long we keep it

• Account and profile data — for as long as your account is open, and for up to 12 months after closure to handle disputes and prevent re-registration abuse.
• Survey responses — de-identified after the study closes, then retained in that form for research analysis.
• Redemption and payment records — retained as long as tax and accounting law requires, typically up to seven years.
• Support correspondence — up to 24 months after the matter is resolved.

9. How we protect it

We use encryption in transit and at rest, role-based access controls limiting member data to staff who need it, logged and reviewed administrative access, and regular security assessments of our systems and processors. No system is perfectly secure, and we will notify you and the relevant regulator where a breach is likely to affect your rights, within the timescales the law sets.

10. Your rights and choices

Depending on where you live, you may have the right to:

• Access a copy of the personal data we hold about you.
• Correct data that is inaccurate or incomplete — most of it directly in your account settings.
• Delete your data and close your account.
• Restrict or object to certain processing, including profiling used to match you with studies.
• Port your data to another provider in a machine-readable format.
• Withdraw consent at any time, without affecting processing already carried out.
• Opt out of sale or sharing — a right we satisfy by default, because we do neither.
• Complain to your data protection authority.

Exercise any of these by emailing privacy@corebehaviour.com from your registered address, or through your account settings. We respond within 30 days and will never charge you, or treat you differently, for asking. If you hold a balance above the redemption threshold, redeem it before requesting deletion.

11. Children

Membership is limited to people aged 16 and over, and in markets where local law sets a higher age of digital consent, that higher age applies. We do not knowingly collect data from anyone below the applicable age. If you believe a child has registered, contact us and we will delete the account.

12. Changes

We update this policy as the panel and the law change. The date at the top always reflects the current version. Where a change materially affects your rights, we email members before it takes effect.

13. Contact us

Privacy questions and requests: privacy@corebehaviour.com
General member support: support@corebehaviour.com
Post: Core Behaviour, Golf Link Software Park, LT No. 8/3, Princeville, Challaghatta Village, Bengaluru, Karnataka 560071, India