Last Updated: 3 November 2025

1. Introduction

The Turkish Business Forum (TBF) is committed to protecting the privacy and confidentiality of its members and participants. This Privacy and Data Protection Policy outlines how we collect, use, store, and protect personal data in compliance with the UK’s General Data Protection Regulation (GDPR) and relevant Turkish data protection laws.

Turkish Business Forum Ltd is the data controller responsible for your personal information.
Registered in England and Wales (Company No. 16806163)
Registered Office: 180 Brompton Road, London, United Kingdom, SW3 1HQ
Email: info@turkishbusinessforum.org.uk

This policy applies primarily under the UK GDPR and the Data Protection Act 2018.
Where members are based in Türkiye, we also consider the requirements of Turkish Law No. 6698 (KVKK).

2. Data Collection

We collect personal data through various channels, including membership applications, event registrations, newsletter subscriptions, and direct communication with TBF. The types of personal data we may collect include:

  • Name, address, email address, and contact details
  • Business information such as company name, sector, and job title
  • Payment details for event registration or membership fees
  • Demographic information, such as professional background and interests
  • Any other data relevant to providing our services
  • Technical information such as IP address, browser type, and device information collected via cookies and analytics tools (see our Cookies Policy).

3. Purpose of Data Collection

We collect personal data for the following purposes:

  • Membership Management: To process membership applications, maintain member records, and provide membership benefits.
  • Event Registration: To manage event participation, including event communication, registration confirmations, and ticketing.
  • Communication: To send newsletters, event invitations, updates on services, and relevant business opportunities.
  • Research and Analysis: To improve our services and understand the needs of our members through feedback and data analysis.
  • Legal Compliance: To comply with legal obligations and respond to requests from regulatory authorities.

4. Legal Basis for Processing Data

We process personal data based on the following legal grounds:

  • Consent: When you provide explicit consent for us to collect and use your data for specific purposes, such as event registration or email subscriptions.
  • Contractual Necessity: To fulfil our contractual obligations with you as a member or event participant.
  • Legitimate Interests: For purposes such as business administration, improving services, and networking opportunities.
  • Legal Obligation: To comply with legal and regulatory requirements, including financial reporting and tax obligations.

Where we rely on legitimate interests, we ensure that our interests are balanced against your rights and freedoms.

5. Data Sharing

TBF does not share personal data with third parties, except under the following circumstances:

  • Service Providers: We may share your data with trusted third-party service providers who assist in running our events or managing membership records, under strict confidentiality agreements and written data-processing contracts compliant with Article 28 of the UK GDPR.
  • Legal Compliance: We may disclose personal data to comply with legal obligations, regulatory requirements, or legal proceedings.
  • Business Transactions: In the event of a business transaction such as a merger or acquisition, personal data may be transferred as part of the transaction, subject to applicable data protection laws.

If your personal data is transferred outside the UK or the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as adequacy decisions or the UK Addendum to the EU Standard Contractual Clauses.

6. Data Security

TBF takes the security of your personal data seriously. We have implemented appropriate technical and organisational measures to protect your data from unauthorised access, alteration, disclosure, or destruction. These measures include:

  • Secure servers and encrypted communications
  • Access controls and user authentication protocols
  • Regular data security audits and assessments

In the event of a personal data breach, we will notify the Information Commissioner’s Office (ICO) and affected individuals where required under the UK GDPR.

7. Data Retention

We will retain your personal data for as long as necessary to fulfil the purposes for which it was collected, including any legal, accounting, or reporting obligations. Once personal data is no longer needed, it will be securely deleted or anonymised.

For example:

  • Membership records are typically kept for up to six years after membership ends.
  • Event records are retained for up to two years after the event date unless a longer period is required by law.

8. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

  • Right to Access: You can request a copy of the personal data we hold about you.
  • Right to Rectification: You can request that we correct any inaccuracies in your personal data.
  • Right to Erasure: You can request the deletion of your personal data under certain circumstances.
  • Right to Restriction of Processing: You can request that we restrict the processing of your data.
  • Right to Data Portability: You can request a copy of your data in a structured, commonly used format for transfer to another service provider.
  • Right to Object: You can object to the processing of your personal data, particularly for marketing purposes.
  • Right to Withdraw Consent: You can withdraw your consent for us to process your data at any time, where consent is the basis for processing.

To exercise any of these rights, please contact us using the contact details provided above.

You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) if you are not satisfied with how we handle your data:
Website: www.ico.org.uk
Telephone: 0303 123 1113

9. Cookies

Our website uses cookies to enhance your user experience. Cookies are small text files stored on your device that help us analyse website traffic and personalise content. By using our website, you consent to the use of cookies. You can manage cookie preferences through your browser settings.

We only use non-essential cookies with your consent. You can manage or withdraw consent at any time through our cookie banner or settings tool. For details on specific cookies and their duration, please see our Cookies Policy.

10. Updates to This Policy

This Privacy and Data Protection Policy may be updated periodically to reflect changes in technology, legislation, or our data practices. The most recent version will always be available on our website, and the revision date will be shown at the top of this page.