Privacy Policy

How PremierCore Solutions collects, uses, shares and protects information — both our own and the data we handle on behalf of our clients.

1. Who we are

PremierCore Solutions (Private) Limited ("PremierCore", "we", "us") is a business process outsourcing and technology services company registered in Pakistan, with delivery operations based in Lahore. Commercial contracting for clients in the United States is handled through our US-registered commercial entity.

Registered delivery address: Ground Floor, Growork, 37-A Khayaban-e-Firdousi, Near Shadiwal Chowk, Johar Town, Lahore, Pakistan

2. Controller and processor roles

This distinction matters, and we state it plainly because it determines who you should contact about your data.

3. Information we collect

Directly from you

• Contact and business details — name, job title, company, email address, telephone number, country.
• Enquiry content — what you tell us in a contact form, chat conversation, email or discovery call.
• Recruitment data — CV, work history, qualifications and right-to-work information if you apply for a role.

On behalf of our clients

When delivering services we may process, strictly as a processor: customer contact and account information, customer service interactions including call recordings and chat transcripts, order and billing details, Protected Health Information in healthcare engagements, and claims or back-office documentation.

Automatically

• Technical data — IP address, browser type and version, device type, operating system, referring URL.
• Usage data — pages viewed, time on page, links clicked, and whether you interacted with our on-page assistant or ROI calculator.

4. How we use information

• To respond to enquiries, prepare proposals and provide costed team models.
• To deliver the services our clients have engaged us for.
• To operate, secure, maintain and improve our websites and applications.
• To meet legal, regulatory, tax and contractual obligations.
• To assess candidates who apply for employment with us.
• To send service updates and, where permitted, relevant business communications.

Where GDPR or UK GDPR applies, we rely on the following lawful bases: legitimate interests for responding to business enquiries and operating our site securely; contract for delivering agreed services; consent for non-essential cookies and marketing email; and legal obligation where we must retain records.

We do not sell personal information, and we do not share it for cross-context behavioural advertising as those terms are defined under the CCPA and CPRA.

5. Marketing, advertising and lead generation

We run paid and organic demand generation for our own business and, under separate agreement, for clients. This can involve:

• Paid search on Google Ads and Microsoft Advertising (Bing).
• Paid social on Meta platforms and LinkedIn.
• Organic social, search and directory listings.
• Outbound business email to named business contacts, always with a working unsubscribe link and sender identification.
• Referral partner programs.

These platforms may set their own cookies or tags and act as independent or joint controllers for the data they collect. Their handling of your data is governed by their own privacy policies. Where we run campaigns for a client, the resulting leads belong to that client, who becomes the controller from the point of transfer.

You can opt out of our marketing email at any time using the unsubscribe link in any message, or by writing to info@premiercore.solutions. Opting out of marketing does not stop service or contractual communications.

6. Cookies and analytics

We use a small number of cookies and similar technologies.

Most browsers let you block or delete cookies through their settings. Blocking strictly necessary cookies may prevent parts of the site from working.

7. Websites and mobile applications we build

When we design, build or maintain a website or mobile application for a client, that product is operated by the client and governed by their privacy policy, not this one. Our access is limited to what is required for development, testing, deployment and support, is granted under the client's agreement, and is removed at the end of the engagement.

8. AI-assisted processing

We use AI systems to assist delivery, including response drafting, call summarisation, sentiment scoring, quality assurance sampling, intelligent routing and multilingual voice and chat handling.

9. Who we share information with

• Clients — where we process data on their behalf, or deliver leads they have contracted us to generate.
• Service providers — cloud hosting, contact-center platforms, CRM, communications, analytics and security vendors, each under written contract limiting their use of the data.
• Professional advisers — auditors, lawyers and insurers, where necessary.
• Authorities — where required by law, court order or a valid regulatory request.

We do not sell, rent or trade personal information.

10. International transfers

Our delivery operations are in Pakistan and our commercial entity is in the United States. If you are in the EEA, the UK or another region with data transfer restrictions, your information may be transferred outside that region. Where required, we put appropriate safeguards in place, including Standard Contractual Clauses and, for the UK, the International Data Transfer Addendum, together with technical and organizational measures described in section 11. A copy of the relevant safeguards is available on request.

11. How we protect information

• Encryption in transit (TLS) and at rest.
• Role-based access control and least-privilege provisioning, reviewed on a defined cycle.
• Multi-factor authentication for administrative and remote access.
• Clean-desk and controlled-floor policies on the delivery floor, including restrictions on personal devices and removable media in regulated engagements.
• Signed confidentiality agreements for all staff and contractors, plus role-appropriate data protection and security training.
• Logging, monitoring and a documented incident response procedure.

Full detail is set out in our Security Statement. No system is perfectly secure, and we do not claim otherwise; we do commit to notifying affected clients without undue delay in the event of a personal data breach, and within any timeframe specified in the applicable agreement.

12. Retention and deletion

As a controller, we keep enquiry and business contact data for as long as needed for the relationship and a reasonable period afterwards, then delete or anonymise it. Recruitment data is retained for the duration of the process and a limited period afterwards unless you ask us to keep it on file.

As a processor, retention is governed by the client's instructions and the services agreement. On termination we return or securely delete client data in accordance with that agreement.

13. Your rights

Depending on where you are, you may have the right to access your personal data; to correct it; to have it deleted; to restrict or object to processing; to data portability; to withdraw consent at any time; and to be free from discrimination for exercising these rights.

To exercise any of these, contact info@premiercore.solutions. We will respond within the period required by applicable law. We may need to verify your identity first. If we act as a processor for a client, we will refer your request to that client and support them in responding.

If you are in the EEA or the UK and are not satisfied with our response, you may lodge a complaint with your local supervisory authority.

14. Children

Our services are directed at businesses. We do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal information, contact us and we will delete it.

15. Changes to this policy

We may update this policy as our services, tooling or legal obligations change. Material changes will be reflected here with a revised effective date. We encourage you to review this page periodically.

16. Contact us