COR Holdings / Legal
Privacy Policy
COR Holdings is a small, privately held company. We do not run advertising, we do not sell personal information, and we collect as little as we reasonably can. This policy explains what we do collect, why, and the choices you have. It covers the website at cor.holdings and the applications we operate that connect to third-party platforms on our behalf.
Who we are
The website cor.holdings is operated by COR Holdings, LLC, a limited liability company based in Birmingham, Alabama, United States. COR Holdings is the controller of any personal information described in this policy. You can reach us at pete@cor.holdings.
What we collect
This website has no user accounts, no forms, no comments, and no checkout. There is nothing to sign up for. The information we receive falls into three groups.
Information you send us
If you email us, we receive your email address, your name if you include it, and whatever you write. We use it to reply to you and keep the correspondence for as long as it is useful to the conversation.
Information collected automatically
Like nearly every website, our hosting infrastructure records standard technical details when your browser requests a page: your IP address, browser and device type, operating system, the pages requested, the referring page, and timestamps. Our analytics provider also collects this kind of information, as described under Cookies and analytics.
Information from connected platforms
When we connect our own social media accounts to our publishing tools, the platform shares account and content data with us. This is described under Connected platform applications.
Third-party services
Some parts of the site are delivered by third parties. When your browser loads these resources, the provider receives your IP address and standard request details, and may set its own cookies according to its own policy.
- Amazon Web Services hosts the site and delivers it through a content delivery network. AWS may keep access logs for operational and security purposes. See the AWS Privacy Notice.
- Google Fonts serves the typefaces used on the page. See the Google Privacy Policy.
- jsDelivr serves an optional animation library used for the background visual on larger screens. It is not loaded if your browser requests reduced motion or data saving. See the jsDelivr Privacy Policy.
The site links to other websites, including the portfolio companies and projects listed on our home page. Those sites have their own privacy policies, and this policy does not apply to them.
Connected platform applications
COR Holdings operates internal software that connects to social media and publishing platforms such as LinkedIn, X, Facebook, Instagram, YouTube, and others, so that we can schedule and publish content to accounts and pages that we own or administer. These applications are used by COR Holdings staff to manage our own presence. They are not offered to the public as a service.
What the applications access
When a COR Holdings account is connected, the platform provides an access token and basic profile information for that account or page, such as its name, identifier, and picture. Depending on the platform, we may also receive the content we have published through the tool and the engagement statistics the platform reports for that content, such as views, likes, comments, and shares. We request only the permissions needed to publish and to read the results of our own posts.
What the applications do not do
- They do not collect information about people who view, like, comment on, or share our posts beyond the aggregate statistics the platform makes available to every page owner.
- They do not read private messages, contact lists, or connections.
- They do not post without an action by a COR Holdings staff member, and they do not send messages to other users.
- They do not sell, license, or share platform data with anyone.
How platform data is stored
Access tokens and platform data are stored on infrastructure that COR Holdings controls, encrypted in transit and protected at rest, and are accessible only to authorized staff. Tokens are used solely to act on the connected account and are deleted when the account is disconnected or the token expires. Platform data is used in accordance with each platform's developer terms and is deleted upon a valid request from the platform or the account owner.
Disconnecting
A connected account can be disconnected at any time from within our tools, or by revoking the application's access from the platform's own settings. For LinkedIn, that is under Settings, then Data privacy, then Permitted services.
How we use information
- To operate, secure, and maintain the website.
- To understand, in aggregate, how the site is used so we can improve it.
- To respond when you contact us.
- To publish and measure content on our own social media accounts.
- To comply with legal obligations and enforce our rights.
We do not use personal information for advertising, profiling, or automated decision-making, and we do not combine website data with data from other sources to build profiles of individuals.
Retention
Analytics data is retained by Google Analytics for fourteen months, the shortest retention period it offers, after which it is deleted. Hosting access logs, where kept, are retained for a limited period for security and troubleshooting. Email correspondence is kept as long as it is relevant to an ongoing relationship or as required by law. Platform access tokens are kept only while the account remains connected.
Security
The site is served over HTTPS only. Hosting storage is private and reachable only through our content delivery network. Internal systems that hold platform tokens sit on a private network, are not exposed to the public internet, and require authenticated access. No system is perfectly secure, and we cannot guarantee absolute security, but we take reasonable measures appropriate to the small amount of information we hold.
Your choices and rights
Because the site does not identify you, the practical way to limit collection is to block cookies or use the analytics opt-out described above. Beyond that, depending on where you live, you may have the right to ask what personal information we hold about you, to have it corrected or deleted, to object to or restrict its use, to receive a copy of it, or to withdraw consent where processing is based on consent. Residents of the European Economic Area, the United Kingdom, and Switzerland have these rights under the GDPR and related laws, and residents of California and other U.S. states have similar rights under their state privacy laws.
To exercise any of these rights, email pete@cor.holdings. We will respond within the time required by applicable law, and we will not treat you differently for making a request. If you are in the EEA or UK and believe we have not addressed your concern, you may lodge a complaint with your local data protection authority.
We honor Global Privacy Control signals to the extent required by law. Since we do not sell or share personal information, there is nothing to opt out of in that respect.
Children
The site is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, contact us and we will delete it.
International visitors
COR Holdings is located in the United States and the site is hosted there. If you visit from outside the United States, your information will be transferred to and processed in the United States, where privacy laws may differ from those in your country. Our service providers rely on standard contractual clauses or equivalent safeguards for such transfers.
Changes to this policy
If we change how we collect or use information, we will update this page and change the effective date at the top. Material changes will be noted here for a reasonable period. Continued use of the site after a change means you accept the updated policy.
Contact
COR Holdings, LLC
Birmingham, Alabama, United States
pete@cor.holdings