Effective date: September 16, 2026

KOR Watch SMS Program — Privacy Policy

This policy describes how KOR handles personal information collected for the KOR Watch SMS on-call alert program (the “Program”), which sends incident alerts, escalation notices, and shift notifications to opted-in KOR employees and contractors. It supplements the KOR Privacy Policy; where the two differ with respect to Program data, this policy controls.

What we collect for the Program

When you opt in through KOR Watch → Settings → Notifications, we collect:

Your mobile phone number;
Your opt-in consent record (the consent text you agreed to, and the date and time of consent);
Your KOR Watch account identity (name and company sign-on identity), which links alerts to your on-call rotation; and
Message delivery logs and your keyword replies (such as STOP, START, or HELP), which we need to honor your preferences and confirm delivery.

How we use it

Program data is used solely to operate the Program: to deliver incident alerts, escalation notices, and shift notifications to you; to confirm, record, and honor your opt-in and opt-out choices; to respond to HELP requests; and to troubleshoot delivery issues. Program data is never used for marketing, advertising, or profiling.

No third-party sharing of SMS opt-in data

Text messaging originator opt-in data and consent will not be shared with any third parties.

Any sharing of personal data with third parties, affiliates, or partners described in the general KOR Privacy Policy excludes text messaging originator opt-in data and consent; this information will not be shared with any third parties.

The only processing outside KOR is by our SMS delivery provider (Twilio Inc.), which transmits messages on our behalf as a service provider under contractual confidentiality and data protection obligations, and by mobile carriers as required to deliver messages. Neither may use your number or consent data for their own purposes. We do not sell Program data, and Program data is excluded from any disclosures that could constitute a “sale” under California law.

Retention

We keep your mobile number and consent record for as long as you are enrolled in the Program. When you opt out or your KOR Watch account is deactivated, your number is removed from the alert distribution immediately; the consent and opt-out record itself is retained as evidence of compliance with messaging regulations, then deleted in line with KOR’s retention schedules.

Your choices and rights

Opt out any time: reply STOP to any Program message or remove your number in KOR Watch → Settings → Notifications. One final confirmation message will be sent.
Help: reply HELP or INFO, or email support@korfinancial.com.
Access, correction, deletion: you may exercise the rights described in the KOR Privacy Policy for Program data by contacting privacy@korfinancial.com.

For employees and contractors in the EU or UK, Program data is processed on the basis of your consent (which you may withdraw at any time by opting out) and KOR’s legitimate interest in operating reliable incident response. International transfers are protected as described in the KOR Privacy Policy, including under the EU-U.S. Data Privacy Framework and its UK Extension.

Security

Program data is protected by the same technical and organizational safeguards that apply to KOR systems generally, including encryption in transit and at rest and access restricted to personnel who operate KOR Watch.

Changes to this policy

KOR may update this policy from time to time. The current version, with its effective date, is always available at this page. Material changes will be announced inside KOR Watch.

Contact

Privacy questions: privacy@korfinancial.com. Program support: support@korfinancial.com.