Confidentiality & Consent Policy

This Confidentiality & Consent Policy explains how confidentiality, consent-led access, profile disclosure, sensitive professional information, candidate information, recruiter information, role information, and confidential hiring workflows are handled on Korum, a platform operated by Worldhire Global Ltd.

This policy applies to professionals, candidates, recruiters, employers, companies, hiring managers, executive search firms, staffing firms, consultants, partners, and other approved users who access or use Korum.

This policy should be read together with our Terms of Use, Privacy Policy, Candidate Consent Policy, Recruiter Terms, Recruiter Code of Conduct, Payments & Billing Policy, Data Retention & Deletion Policy, Cookie Policy, and any separate agreement, consent-led access record, order form, subscription plan, statement of work, or commercial terms agreed with Worldhire Global Ltd.

For the purpose of this policy, “Worldhire”, “we”, “us”, or “our” means Worldhire Global Ltd. “Korum” means the confidential career and hiring platform operated by Worldhire. “Professional” or “candidate” means an individual who creates or uses a professional profile on Korum. “Recruiter” or “hiring user” means any recruiter, employer, company, hiring manager, executive search firm, staffing firm, consultant, partner, or approved user accessing professional or candidate information for hiring-related purposes.

1. Purpose of This Policy

Korum is designed for controlled, confidential, and consent-led hiring.

This policy explains:

• How confidentiality applies on Korum
• How Discoverable Mode and Confidential Mode work
• When consent-led access may apply
• What information must be treated as confidential
• What recruiters, employers, companies, and hiring users must not do
• What professionals and candidates must not do
• How reach-out / connection works
• How current employer protection works
• How cross-border access must be handled
• What happens if confidentiality is breached
• Worldhire’s role as platform facilitator
• The limits of Worldhire’s responsibility in disputes between users

2. Confidentiality Is Core to Korum

Korum is built to help experienced professionals explore serious opportunities without unnecessary exposure, uncontrolled recruiter access, misuse of personal information, or risk to their current employment.

Users must treat candidate, recruiter, employer, company, role, salary, hiring, commercial, and platform information with appropriate confidentiality.

Confidentiality applies whether information is received through:

• Profile visibility
• Recruiter reach-out / connection
• Access request
• Candidate approval
• Consent-led workflow
• Recruiter communication
• Employer communication
• CV/resume access
• Role discussion
• Platform messaging
• Email, call, meeting, interview, or other related communication

3. Profile Visibility Modes

Korum supports two main professional visibility modes:

• Discoverable Mode
• Confidential Mode
• Users must understand and respect the difference between these modes.

4. Discoverable Mode

Discoverable Mode is for professionals who want their profile to be discoverable by verified or approved recruiters, employers, companies, and hiring partners on Korum.

In Discoverable Mode, the professional’s profile information may be visible to approved hiring users inside Korum.

This may include:

• Name
• Professional summary
• Work experience
• Current and previous roles
• Current and previous employers
• Education
• Skills
• Industry
• Function
• Location
• Notice period
• Salary or compensation range where provided
• Expected compensation range where provided
• CV/resume where uploaded or enabled
• Career preferences
• Availability status
• Other professional profile information provided by the professional
• Direct contact details, such as phone number and email address, are hidden by default and may be accessed by a verified or approved recruiter only through Korum’s paid contact-reveal feature (a one-time credit charge), where permitted; contact reveal is not available where the professional has enabled do-not-contact. Messaging through Korum’s in-app connection workflow is free of credits and does not by itself disclose contact details.
• Discoverable Mode does not mean that candidate information is public, unrestricted, downloadable, reusable, transferable, or available for resale.
• Discoverable Mode means the professional profile is visible inside controlled Korum workflows to verified or approved hiring users.
• Recruiters and hiring users must use Discoverable Mode information only for legitimate hiring purposes.

5. Confidential Mode

Confidential Mode is for professionals who are not publicly applying, are selectively open to opportunities, or require stronger confidentiality before deeper disclosure.

In Confidential Mode, the professional’s profile may be masked, limited, or partially visible.

The following information may remain hidden unless the professional approves access or completes a consent-led access workflow:

• Full identity
• Direct contact details
• Current employer
• CV/resume
• Salary or compensation information
• Sensitive career information
• Other information treated as confidential by the platform
• Recruiters and hiring users must not attempt to identify, contact, trace, research, approach, or bypass the privacy controls of a Confidential professional without approval.

6. What Is Confidential Information

Confidential information may include, without limitation:

• Candidate identity
• Candidate contact details
• Candidate current employer
• Candidate work history
• Candidate CV/resume
• Candidate salary or compensation information
• Candidate expected compensation
• Candidate notice period
• Candidate career preferences
• Candidate interest in exploring opportunities
• Candidate availability
• Candidate communications
• Candidate reach-out / connection information
• Candidate approval or rejection decisions
• Candidate consent-led participation
• Employer or company hiring mandates
• Confidential roles
• Salary bands
• Role details not publicly announced
• Client names
• Hiring strategy
• Search strategy
• Interview process
• Commercial terms
• Platform workflows
• Search results
• Matching outputs
• Access request details
• Consent-led access records
• Any information marked or reasonably understood as confidential
• Confidential information may be written, verbal, visual, digital, platform-based, or shared through any related communication.

7. Consent-Led Access

Consent-led access may be used where additional confidentiality is required.

This may apply where:

• A professional is in Confidential Mode
• A role is confidential
• A professional requests stronger protection
• A recruiter, employer, or company requires confidentiality
• Current employer exposure could create risk for the professional
• The hiring discussion involves sensitive role, salary, market, business, or leadership information
• Korum determines that additional confidentiality may be appropriate

Consent-led access may be required before:

• Identity disclosure
• Current employer disclosure
• Contact detail disclosure
• CV/resume sharing
• Salary or compensation discussion
• Deeper career conversation
• Employer or client identity disclosure
• Confidential role discussion
• Interview process disclosure
• Sensitive hiring mandate disclosure
• Consent-led access does not guarantee interview selection, offer, employment, exclusivity, hiring outcome, or commercial outcome.

8. Consent-Led Access Parties

Consent-led access may be between:

• The professional and the recruiter
• The professional and the employer or company
• The professional and the hiring partner
• The recruiter and employer or client
• Other relevant parties shown in the specific consent-led access workflow
• Unless Worldhire Global Ltd is expressly named as a party to a specific consent-led access agreement, Worldhire acts only as a platform facilitator and is not responsible for enforcing the consent-led access agreement between users.
• Worldhire may provide workflow support, recordkeeping, access logging, document facilitation, or electronic acceptance support, but this does not make Worldhire responsible for another user’s consent-led access obligations unless expressly agreed in writing.

9. Electronic Consent-Led Access Acceptance

Korum may allow users to accept consent-led access terms electronically through clickwrap, checkbox, digital signature, platform acceptance, email confirmation, or other electronic workflow.

By accepting consent-led access terms through the platform, the relevant user confirms that:

• The user has authority to accept the consent-led access terms
• The information provided is accurate
• The user will comply with the consent-led access terms and related confidentiality obligations
• The user understands that breach may result in platform action and legal or commercial consequences
• Worldhire may retain records of consent-led access acceptance, timestamps, user identity, account information, IP/device metadata, and related workflow activity for audit, security, compliance, and dispute review.

10. Recruiter and Employer Confidentiality Obligations

Recruiters, employers, companies, and hiring users must:

• Use candidate information only for legitimate hiring purposes
• Keep candidate information confidential
• Not contact the candidate’s current employer without explicit consent
• Not disclose candidate information to unauthorised persons
• Not share candidate information with unrelated clients, vendors, affiliates, overseas offices, or third parties
• Not use candidate information for marketing, resale, sourcing databases, competitor intelligence, or unrelated business development
• Not copy, export, scrape, harvest, or bulk download candidate information
• Not attempt to identify masked Confidential professionals
• Not bypass reach-out / connection, access request, approval, or consent-led access workflows
• Not use confidential information outside the purpose for which it was shared
• Protect candidate information from unauthorised access, misuse, loss, or disclosure
• These obligations continue even after account closure, suspension, termination, completion of a hiring process, or end of the commercial relationship with Worldhire.

11. Candidate Confidentiality Obligations

Professionals and candidates must also handle confidential information responsibly.

Candidates must not misuse confidential information received through Korum, including:

• Confidential role details
• Employer identity where confidential
• Salary or compensation information
• Hiring plans
• Interview information
• Business strategy
• Consent-protected information
• Recruiter or employer communications
• Client names where not publicly disclosed
• Candidates should not disclose confidential role, employer, recruiter, or company information to unauthorised third parties where it has been shared under confidentiality or consent-led workflow.

12. Current Employer Protection

Recruiters, employers, companies, and hiring users must not contact a professional’s current employer, manager, HR team, colleagues, references, vendors, clients, or workplace contacts without the professional’s explicit consent.

This rule applies even if:

• The professional is in Discoverable Mode
• The current employer is visible on the profile
• The recruiter knows someone at the employer
• The recruiter wants to verify employment
• The recruiter is acting for a client
• The recruiter believes the professional may be interested
• The recruiter has contact obtained
• The professional is already in a hiring process
• The role is urgent or confidential
• Unauthorised contact with a professional’s current employer is a serious breach of Korum’s confidentiality standards and may result in immediate platform action.

13. reach-out / connection and Confidentiality

reach-out / connection is a controlled Korum function.

In Discoverable Mode, messaging through reach-out / connection is free of credits, and approved recruiters may access direct contact details such as phone number or email address only through Korum’s paid contact-reveal feature (a one-time credit charge; not available where the professional has enabled do-not-contact). Contact reveal is never available for Confidential Mode profiles.

In Confidential Mode, reach-out / connection may require candidate approval, access request approval, or consent-led workflow before deeper information is shared.

By using reach-out / connection, recruiters confirm that:

• They have a genuine hiring purpose
• The professional is relevant to a real opportunity, mandate, or approved search
• They will use information obtained only for the relevant hiring opportunity
• They will not share information obtained with unauthorised persons
• They will not use information obtained for unrelated marketing, resale, spam, database building, or competitor intelligence
• They will not contact the professional’s current employer
• They will comply with applicable laws and Korum policies
• reach-out / connection actions may be logged, monitored, reviewed, and retained for audit, security, misuse prevention, compliance, and dispute review.

14. Cross-Border Confidentiality and Data Handling

Korum may allow access to professionals across multiple countries and geographies.

Global access does not mean unrestricted global use of candidate information.

Recruiters, employers, companies, and hiring users must not transfer, share, copy, export, upload, or store candidate information across countries, offices, clients, vendors, affiliates, tools, databases, or third parties unless the transfer is lawful, necessary, authorised, and properly protected.

Users accessing candidate information across geographies are responsible for complying with applicable privacy, data protection, employment, communication, anti-discrimination, and hiring laws.

Worldhire may restrict access based on geography, sanctions, verification status, security risk, payment support, operational risk, or compliance concerns.

15. Unsupported Jurisdictions and Restricted Access

Recruiter, employer, company, and hiring partner access to Korum is subject to market availability, verification, security review, sanctions screening, payment support, and compliance controls.

Worldhire may block, challenge, review, restrict, suspend, or terminate access from unsupported jurisdictions, restricted locations, sanctioned locations, suspicious IP addresses, VPNs, proxies, anonymising services, unverifiable companies, disposable email addresses, or unusual access patterns.

Users must not use misleading technical means, false company details, borrowed accounts, third-party identities, VPNs, proxies, or anonymising tools to bypass Korum’s access restrictions.

Access from a country or region does not mean Worldhire supports that country or region commercially.

16. External Storage and Third-Party Tools

Recruiters and hiring users must not upload, copy, sync, export, or store Korum candidate information into external tools, databases, CRMs, applicant tracking systems, spreadsheets, AI tools, cloud folders, messaging platforms, or third-party systems unless they have lawful basis, proper authority, and appropriate security controls.

Candidate information from Korum must not be uploaded to:

• Public AI tools
• Unapproved AI systems
• Unsecured spreadsheets
• Personal email accounts
• Personal cloud drives
• Unauthorised ATS or CRM systems
• Third-party enrichment tools
• Data resale tools
• Marketing automation systems
• If candidate information is stored outside Korum, the recruiter or hiring user is responsible for securing it, limiting access, deleting it when no longer needed, and complying with applicable law.

17. Confidential Role Information

Employers, companies, and recruiters may submit confidential role information to Korum.

This may include:

• Confidential hiring mandates
• Replacement hiring
• Unannounced leadership hiring
• Market-entry hiring
• M&A-related hiring
• Sensitive salary bands
• Internal restructuring roles
• Non-public business expansion plans
• Confidential client searches
• Sensitive executive hiring projects
• Users receiving confidential role information must not disclose it to unauthorised persons or use it for any purpose other than the relevant hiring discussion.

18. No Scraping, Copying, or Bulk Extraction

Users must not scrape, crawl, harvest, copy, bulk export, download, replicate, or extract Korum data.

This restriction applies to:

• Candidate profiles
• Search results
• CVs/resumes
• Contact details
• Salary ranges
• Employer details
• reach-out / connection data
• Access request data
• Consent-led access workflow data
• Platform workflows
• Matching outputs
• Confidential role information
• Any other Korum data
• Users must not use bots, crawlers, scripts, browser automation, scraping tools, AI agents, extensions, data extraction tools, manual bulk copying, or unauthorised integrations to extract or copy Korum data.
• Violation may result in immediate termination and possible legal, commercial, or security action.

19. No Guarantee of Confidentiality by Other Users

Korum is designed to support confidentiality through platform controls, policies, access logs, recruiter verification, reach-out / connection controls, consent-led workflows, and enforcement rights.

However, no platform can guarantee that another user will never misuse, disclose, copy, export, or breach confidential information.

Users remain responsible for their own conduct and confidentiality obligations.

Worldhire may take platform action where misuse is reported or suspected, but Worldhire is not responsible for another user’s breach of confidentiality, consent-led access, hiring obligation, commercial obligation, or professional conduct, except where liability arises directly from Worldhire’s own unlawful act, negligence, fraud, wilful misconduct, or liability that cannot be excluded by law.

20. Breach of Confidentiality

A breach of confidentiality may include:

• Sharing candidate information without authority
• Contacting a candidate’s current employer without consent
• Disclosing a Confidential candidate’s identity without approval
• Sharing CV/resume without authority
• Exporting or copying profile data without permission
• Uploading candidate information to unauthorised systems
• Using candidate information for unrelated marketing or resale
• Misusing confidential role information
• Breaching a consent-led access agreement
• Attempting to identify masked profiles
• Sharing platform data with unauthorised third parties
• Failing to secure candidate information after access
• Using reach-out / connection information for non-hiring purposes
• Sharing information across countries, offices, clients, vendors, or tools without lawful basis and authorisation
• Worldhire may take action where breach is reported or suspected.

21. Platform Action for Breach or Misuse

If Worldhire suspects breach, misuse, unauthorised access, confidentiality violation, consent-led access breach, scraping, or candidate data misuse, Worldhire may take action including:

• Warning the user
• Restricting access
• Blocking reach-out / connection access
• Suspending or terminating the account
• Removing content
• Preserving audit logs
• Notifying affected users where appropriate
• Requiring further verification
• Refusing future access
• Cooperating with lawful requests
• Taking legal, commercial, or security action where appropriate
• Worldhire’s decision to take or not take action does not make Worldhire responsible for the underlying conduct, dispute, breach, or loss caused by a user.

22. User Disputes and Consent-Led Access Enforcement

Worldhire is not responsible for resolving disputes between users, including disputes between:

• A professional and a recruiter
• A professional and an employer or company
• A recruiter and an employer or company
• A client and a partner
• Any two or more third-party users

This includes disputes relating to:

• Consent-led access breach
• Confidentiality breach
• Candidate connection
• Candidate contact
• Role discussions
• Salary discussions
• Employment offers
• Hiring outcomes
• Non-joining
• Employer withdrawal
• Recruiter conduct
• Candidate conduct
• Commercial terms
• Fees, commissions, or incentives
• Unauthorised disclosure
• Misrepresentation
• Cross-border handling of candidate data
• Worldhire may review complaints and take platform action at its discretion. However, Worldhire is not required to mediate, arbitrate, settle, enforce, or resolve disputes between users.

23. Limitation of Worldhire Responsibility

To the maximum extent permitted by law, Worldhire is not liable for disputes, claims, losses, damages, liabilities, or consequences arising from:

• A user’s breach of a consent-led access agreement
• A user’s breach of confidentiality
• A user’s misuse of candidate information
• A user’s misuse of recruiter, employer, or company information
• A user’s unauthorised disclosure
• A user’s unauthorised contact with a current employer
• A user’s unauthorised onward sharing
• A user’s cross-border transfer or storage of candidate data
• A user’s conduct, communications, hiring decisions, employment decisions, commercial decisions, or professional conduct
• This does not exclude liability that cannot be excluded by law, or liability arising directly from Worldhire’s own unlawful act, negligence, fraud, wilful misconduct, or obligations that cannot be excluded by law.

24. Audit Logs and Recordkeeping

Korum may log activity for audit, security, compliance, misuse prevention, and platform accountability.

This may include:

• Login activity
• Search activity
• Profile views
• reach-out / connection actions
• Access requests
• Candidate approvals
• Candidate rejections
• Consent-led access workflow activity
• Consent-led access acceptance records
• CV/resume access
• Contact detail access
• Messages or platform communications
• Account changes
• Device and IP metadata
• Security events
• Misuse reports
• These records may be retained according to our Privacy Policy and Data Retention & Deletion Policy.

25. Reporting Confidentiality Concerns

Users should report suspected confidentiality breach, consent-led access breach, unauthorised disclosure, misuse, scraping, suspicious access, or data exposure to:

• support@worldhire.com
• privacy@worldhire.com
• security@worldhire.com

Reports should include relevant details such as:

• User involved
• Company involved
• Candidate or role affected
• Date and time
• Type of suspected breach
• Evidence or screenshots where available
• Impact or risk
• Worldhire may review the report and decide what platform action is appropriate.

26. Survival of Confidentiality Obligations

Confidentiality obligations continue after:

• Account closure
• Account suspension
• Account termination
• End of subscription
• End of hiring process
• End of recruiter relationship
• Candidate withdrawal
• Employer withdrawal
• Completion of an interview process
• Completion of any commercial relationship with Worldhire
• End of access to Korum
• Users must continue to protect confidential information for as long as required by law, contract, a consent-led access agreement, or reasonable confidentiality expectations.

27. Relationship With Other Policies

This Confidentiality & Consent Policy forms part of Korum’s wider legal and platform framework.

It should be read with:

• Terms of Use
• Privacy Policy
• Candidate Consent Policy
• Recruiter Terms
• Recruiter Code of Conduct
• Payments & Billing Policy
• Cookie Policy
• Data Retention & Deletion Policy
• Subprocessors & Data Locations page
• Any specific consent-led access or commercial agreement
• If there is a conflict between this policy and an accepted consent-led access agreement or commercial agreement, that agreement will apply to the extent of that conflict.

28. Changes to This Policy

Worldhire may update this Confidentiality & Consent Policy from time to time.

The updated version will be effective from the date shown at the top of this page.

If changes are material, Worldhire may notify users through the website, email, account notice, or another appropriate method.

Continued use of Korum after changes means you accept the updated policy.

29. Contact

For questions about this Confidentiality & Consent Policy, contact:

• Worldhire Global Ltd
• Registered Office: 124 City Road, London, EC1V 2NX, United Kingdom
• Email: connect@worldhire.com

For privacy matters:

• privacy@worldhire.com

For support:

• support@worldhire.com

For security concerns:

• security@worldhire.com