1. About TriCore Partners
TriCore Partners is a specialized risk advisory firm incorporated in Canada with active delivery across Canada, the United States, and the Gulf Cooperation Council (GCC) region. This Privacy Statement describes how TriCore Partners ("we," "us," "our") collects, uses, discloses, and protects personal information through our website, platform, and services.
2. Scope
This statement applies to:
- Visitors to our website (tricorep.com)
- Candidates who register on our platform, upload CVs, or complete assessments
- Clients and prospective clients who engage our advisory services
- Individuals who contact us or subscribe to our communications
- Individuals who request our service brochure or other materials
3. Information We Collect
3.1 Information You Provide
- Account registration: Name, email address, password
- Candidate profile: Full legal name, date of birth, nationality, phone number, address, professional summary, work experience, education, certifications, languages, salary expectations, profile photograph
- CV/Resume: Uploaded documents (PDF, DOCX, DOC) and the text content extracted from them
- Assessment responses: Answers to our work style assessment questions
- Contact inquiries: Name, email, company, message content
- Brochure requests: Name, email, company
3.2 Information Collected Automatically
- Session data: IP address, browser type, pages visited
- Cookies: Session cookies for authentication (see our Cookie Policy)
3.3 Information Generated by Our Systems
- AI-parsed CV data: Structured professional information extracted from uploaded CVs using artificial intelligence
- Assessment scores: Aggregated dimension scores derived from assessment responses
- Professional bio documents: Generated presentations based on candidate profile data
4. How We Use Your Information
We process personal information for the following purposes:
- Candidate evaluation: To assess suitability for consulting engagements based on professional experience, qualifications, and assessment results
- Profile management: To create, maintain, and update candidate profiles on our platform
- Bio generation: To create professional biography documents for client presentations
- Communication: To respond to inquiries, send engagement opportunities, and provide platform updates
- Platform operation: To maintain, secure, and improve our platform
- Legal compliance: To comply with applicable laws, regulations, and contractual obligations
5. Legal Basis for Processing
We process your personal information based on one or more of the following legal grounds:
- Consent: Where you have given explicit consent (e.g., submitting your CV, completing the assessment, accepting the privacy acknowledgement)
- Contractual necessity: Where processing is necessary to perform services you have requested
- Legitimate interests: Where processing is necessary for our legitimate business interests, provided these do not override your rights
- Legal obligation: Where we are required to process data to comply with applicable law
6. AI and Automated Processing
We use artificial intelligence (AI) services to:
- Parse and extract structured information from uploaded CVs
- Generate professional biography documents in multiple languages
Assessment scores are calculated algorithmically based on your responses. These scores are used as one factor among several in our evaluation process and do not constitute the sole basis for any decision. All significant decisions regarding candidate engagement are made by human evaluators.
CV data is processed through Anthropic's Claude AI service. Anthropic does not use data submitted through their API for training purposes. See Anthropic's Privacy Policy for details.
7. Data Sharing
We do not sell your personal information. Your data may be shared in the following limited circumstances:
- TriCore Partners team: Authorized partners and evaluators who need access to assess your candidacy
- Clients: Professional bio documents and relevant qualifications may be shared with prospective clients when presenting candidates for engagements, only with your knowledge
- Service providers: AI processing services (Anthropic) for CV parsing and bio generation, operating under data processing agreements
- Legal requirements: When required by law, regulation, or legal process
8. International Data Transfers
TriCore Partners operates across Canada, the United States, and the GCC region. Your personal data may be transferred to and processed in jurisdictions outside your country of residence. When we transfer data internationally, we implement appropriate safeguards including:
- Contractual data protection clauses
- Ensuring the receiving jurisdiction provides adequate data protection
- Applying the same data protection standards regardless of where data is processed
9. Data Retention
- Candidate profiles: Retained for as long as your account is active, plus 2 years after last activity
- Assessment responses: Retained for 1 year from submission date, after which candidates may re-submit
- CV documents: Retained for as long as your profile is active
- Contact inquiries: Retained for 1 year
- Brochure request data: Retained for 2 years
- Session cookies: Expire after 24 hours
10. Your Rights
Subject to applicable law, you have the following rights regarding your personal information:
- Access: Request a copy of the personal data we hold about you
- Rectification: Request correction of inaccurate or incomplete data
- Erasure: Request deletion of your personal data
- Restriction: Request that we limit our processing of your data
- Portability: Request your data in a structured, commonly used format
- Withdrawal of consent: Withdraw consent at any time where processing is based on consent
- Objection: Object to processing based on legitimate interests
- Complaint: Lodge a complaint with the applicable data protection authority
To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.
11. Data Security
We implement appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:
- Encryption of passwords using industry-standard hashing (bcrypt)
- Session-based authentication with secure cookie handling
- Access controls limiting data visibility to authorized personnel
- Regular security reviews of our platform and practices
12. Regulatory Compliance
TriCore Partners operates in compliance with applicable data protection legislation including:
- PIPEDA (Personal Information Protection and Electronic Documents Act) — Canada
- Quebec Law 25 (Act respecting the protection of personal information in the private sector) — Quebec, Canada
- UAE Federal Decree-Law No. 45 of 2021 (Personal Data Protection Law) — United Arab Emirates
- GDPR (General Data Protection Regulation) — where applicable to individuals in the EU/EEA
- CCPA (California Consumer Privacy Act) — where applicable to California residents
13. Changes to This Statement
We may update this Privacy Statement from time to time. Material changes will be communicated through our platform or by email. The "Last updated" date at the top of this page indicates the most recent revision.
14. Contact
For privacy inquiries, data access requests, or complaints:
TriCore Partners
Attention: Data Protection
Email: [email protected]
Montreal, Quebec, Canada
If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada or the Commission d'accès à l'information du Québec.