Data protection and your rights
How to exercise your data protection rights under GDPR, UK GDPR and equivalent laws, and what to expect.
Last updated 31 August 2026
Which law applies to you
In short: It depends where you live. All of them give you broadly the same rights, and we apply the strongest as our baseline.
If you are in the European Economic Area, the GDPR applies. In the United Kingdom, the UK GDPR and Data Protection Act 2018.
Elsewhere, the applicable law is that of your country of residence. Corpshore operates under Kenya's Data Protection Act, Nigeria's NDPA, South Africa's POPIA, Ghana's Data Protection Act, the Philippines Data Privacy Act, Australia's Privacy Act and others depending on where you are.
Rather than run a different standard in each market, we apply GDPR-level protections as the baseline everywhere and add local requirements on top. Where your local law gives you a stronger right, that stronger right applies.
Link to this sectionHow to make a request
In short: Email us from your account address saying what you want. No form, no fee.
Write to info@corpshore.ai from the email address on your account, telling us which right you want to exercise. Using your account address is how we verify it is you; if you cannot, we will ask for another way to confirm your identity.
There is no charge and no form to complete.
We respond within thirty days. If a request is complex we may extend this and will tell you why before the thirty days is up.
Link to this sectionGetting a copy of your data
In short: We send you a machine-readable export of everything we hold.
We provide your account and profile data, your application, your assessment answers and scores, your work and quality history, and your payment records.
The export is machine readable so you can take it elsewhere.
Where data about you appears alongside data about someone else, for example in a community thread, we provide your part and redact theirs.
Link to this sectionDeleting your data, and the one limit
In short: We delete your personal data. Records of money already paid to you have to be kept for tax.
On an erasure request we delete your account, profile, application, assessment answers and any interview recordings.
Financial records of payments already made to you are retained for the period required by tax law in the relevant country, typically six to seven years. We cannot lawfully delete these, and we will tell you exactly what is retained and for how long.
Work you produced that has already been delivered to a client remains with that client under the terms it was commissioned on. It does not identify you.
Link to this sectionAutomated decisions and your right to a person
In short: AI scores your interview. A person decides. You can ask for a review and an explanation.
Interview assessment is scored by an automated system against a fixed rubric. That score informs a human decision and never replaces it. There is no threshold at which the system decides.
Because a person makes every decision, this is not a decision based solely on automated processing. Even so, you have the right to ask for the basis of any decision that involved a score, and to ask a different person to review it.
We do not use automated processing to profile you for any purpose other than assessing the specific work-related answers you gave.
Link to this sectionIf you are not satisfied
In short: Tell us first, then your regulator. You do not lose any right by complaining to us first.
If you are unhappy with how we have handled your data or a request about it, write to info@corpshore.ai and we will look at it again.
You may complain to your local data protection authority at any time, whether or not you have raised it with us first.
In the United Kingdom that is the Information Commissioner's Office. In the European Economic Area it is the authority in your member state.
Link to this section