Last updated: 8 October 2026 · Applies to peoplecoral.com, related PeopleCoral marketing channels worldwide, and SMS account security messages sent by the PeopleCoral platform
PeopleCoral is built on the conviction that people data deserves the highest standard of care — single-tenant architecture, dedicated environments, no shared infrastructure. We apply the same standard to your data when you visit our website, book a demo, download a resource, contact us, or receive a security code from us by text message. This policy explains what we collect, why, and the rights you have.
The controller for personal data processed through this website and our marketing activities is:
HR Rebels B.V. (operating the PeopleCoral platform and brand) Keurenplein 4, unit A6271 1069 CD Amsterdam, The Netherlands Chamber of Commerce (KvK): 65493486 Email: info@peoplecoral.comPeopleCoral operates internationally through local entities in the countries where we serve customers. For the purposes of this website, HR Rebels B.V. acts as the controller on behalf of the PeopleCoral group.
This policy covers visitors to peoplecoral.com, prospective customers, event and webinar registrants, newsletter recipients, and job applicants. It also covers platform users who receive SMS account security messages, as described in section 3a.
Apart from section 3a, it does not cover employee data processed inside the PeopleCoral platform on behalf of our customers. When your employer uses PeopleCoral for HR and payroll, your employer is the controller of that data and PeopleCoral acts as a processor under a data processing agreement, in a dedicated single-tenant environment. Questions about that data should be directed to your employer's HR department in the first instance.
We do not collect special categories of personal data through this website, and we ask that you do not send them to us unsolicited.
When you use the PeopleCoral platform and add and confirm your mobile phone number in your security settings, we use that number to send you one-time passcodes by text message — for example when you reset your password or verify a sign-in.
No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties.
Full program terms are available in our SMS Terms.
| Purpose | Legal basis (GDPR) |
|---|---|
| Responding to demo requests, questions, and correspondence | Legitimate interest (Art. 6(1)(f)) or steps prior to entering a contract (Art. 6(1)(b)) |
| Providing requested resources and webinar access | Performance of your request (Art. 6(1)(b)) and legitimate interest |
| Sending relevant follow-up about PeopleCoral | Legitimate interest for business contacts; consent where required by local law (Art. 6(1)(a)). Every message includes an opt-out, and we honour it immediately. |
| Sending one-time passcodes by SMS for account security | Legitimate interest in keeping platform accounts secure (Art. 6(1)(f)), based on the mobile number you added and confirmed yourself. You can switch SMS verification off at any time. |
| Recruitment and assessing applications | Steps prior to entering a contract (Art. 6(1)(b)) |
| Website security, performance, and improvement | Legitimate interest (Art. 6(1)(f)); consent for non-essential cookies (Art. 6(1)(a)) |
| Complying with legal obligations | Legal obligation (Art. 6(1)(c)) |
Consistent with our "no spam — ever" commitment: we do not sell personal data, we do not add you to automated sequences after a demo, and we do not share your data with third parties for their own marketing.
We share personal data only with:
We are headquartered in the European Union and keep data in the EU/EEA wherever possible. Where a service provider processes data outside the EU/EEA — for example, our SMS provider Twilio, which may route messages through the United States — we rely on an adequacy decision of the European Commission (including, where applicable, the EU-U.S. Data Privacy Framework) or on Standard Contractual Clauses, together with supplementary measures where appropriate. You can request a copy of the relevant safeguards via the contact details in section 1.
Where law requires longer retention (for example, tax or commercial records), the statutory period applies.
We use functional cookies necessary for the website to work. Non-essential cookies — such as analytics or embedded media — are only placed with your consent, which you can withdraw at any time via your browser settings or our cookie banner where shown. We keep our use of tracking technologies deliberately minimal.
Under the GDPR — and equivalent laws in other countries where we operate — you have the right to:
To exercise any of these rights, email info@peoplecoral.com. We respond within one month. We may ask you to verify your identity before acting on a request.
You also have the right to lodge a complaint with a supervisory authority — in the Netherlands, the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl) — or with the data protection authority in your own country.
We protect personal data with technical and organisational measures appropriate to the risk, including encryption in transit (SSL/TLS), access controls, and the same single-tenant discipline that defines our platform: data is kept separated, minimised, and accessible only to those who need it.
We may update this policy as our services, providers, or legal requirements evolve. The date at the top reflects the latest version. Material changes will be announced on this page.
Questions about privacy at PeopleCoral? Write to info@peoplecoral.com or to HR Rebels B.V., Keurenplein 4, unit A6271, 1069 CD Amsterdam, The Netherlands.