Privacy Policy

The data controller is London Bridge Club LTD (86-90 Paul Street, London EC2A 4NE, United Kingdom). Our Turkish office: London Bridge Club Istanbul, Balmumcu, Bestekâr Şevki Sok. No. 11, 34349 Beşiktaş, Istanbul. You can reach us about anything in this policy at info@londonbridge.club or on +90 505 404 44 88.

We process only the data needed to run the club:

• Identity and contact details: first name, last name, mobile phone number (used to sign in with a one-time SMS code), e-mail address.
• Professional profile: title, your company and its details (name, sector, services offered, company logo), country and city, profile photo.
• Optional details: date of birth. It is shown to other members only if you choose to share it, and even then the year and your age are never shown.
• Optional interests: your hobbies, areas of interest and the sectors and services you are interested in. They are used to suggest relevant members and opportunities; your hobby and interest tags are visible to other members whose membership plan includes this.
• Content you create in the club: business opportunities you publish, expressions of interest, messages, meeting proposals and offers exchanged with other members, reports you submit.
• Club activity: your connections with other members, event attendance responses (RSVPs), membership and package information.
• Notes you take in the app: their title and text, the date and, if you link a note to a conversation or meeting, that link. The notes you take in the app can be seen by the club team; the app tells you so when you write one. Deleting a note removes it for good.
• People you invite: when you invite someone, the name, e-mail address and phone number you enter are passed on to the club, and the invitation e-mail is sent in your name.
• Device data: the push notification token of your device and your preferred language, so we can deliver notifications.
• Technical records: IP address, device type, operating system and app version, and request logs kept for security and diagnostics.

• To verify identity and manage membership: invitations, application review, signing in, membership packages.
• To operate the club network: member directory, company pages, connections, opportunity showcase, events and news.
• To enable messaging between members and the club’s brokerage service. Message rooms opened around an opportunity are three-party: the opportunity owner, the interested member and the club. The club team can see these conversations in order to broker the deal, approve agreements and calculate the club’s commission.
• To send you notifications in the app and to your phone.
• To keep the service secure and prevent abuse: handling reports, blocking, investigating suspicious activity and fixing errors.
• To meet our legal obligations, such as keeping commission and invoice records and responding to lawful requests from authorities.

We rely on the following grounds in KVKK article 5(2):

• Processing is necessary to establish or perform the membership contract with you (5/2-c).
• Processing is necessary to comply with a legal obligation (5/2-ç).
• Processing is necessary to establish, exercise or defend a legal right (5/2-e).
• Processing is necessary for our legitimate interests, provided it does not harm your fundamental rights and freedoms, for example security records and abuse prevention (5/2-f).
• Where none of these applies, such as showing your date of birth to other members, we rely on your explicit consent, which you can withdraw at any time in the app.

We collect personal data by electronic means: from what you enter in the app during registration, onboarding and use; from information the club team records when inviting you or managing your membership; and automatically from your device while you use the app.

Your profile (name, title, company, city, photo) is visible to other club members. Messages are visible only to the participants of the room and the club. Beyond that, data is shared only with:

• Our hosting infrastructure: the club’s servers, databases and file storage run on our own infrastructure in Turkey.
• Google Firebase Cloud Messaging (Google LLC): used to deliver push notifications. Your device token and the content of the notification (a short title and text) are transmitted to Google.
• Apple and Google app stores: you download the app through them; their own privacy policies apply to that relationship.
• The SMS service provider that delivers your one-time sign-in code: it receives your phone number and the code.
• Public authorities, when required by law.

Club data is stored in Turkey. Push notifications are delivered through Google Firebase Cloud Messaging, which means your device token and notification content are transferred to Google’s servers outside Turkey. This transfer is carried out under KVKK article 9, with the appropriate safeguards provided for in the law (standard contractual clauses) or, where those are not available, on the basis of your explicit consent. You can switch off notifications at any time from your device settings.

• We do not show advertising.
• We do not track you across other apps or websites.
• We do not sell or rent your personal data.
• We do not use third-party analytics or advertising SDKs in the app.

We keep your personal data for as long as your membership continues. When you delete your account, your personal data is irreversibly anonymised: it can no longer be linked to you.

Records the club is legally obliged to keep, for example commission and invoice records, are retained for the period required by law (up to 10 years for commercial books and records) and then deleted or anonymised. Technical logs are kept for a limited period for security and diagnostics and then deleted.

You can delete your account at any time from within the app: Menu → Delete my account. You can also send us a deletion request at info@londonbridge.club.

We protect your data with technical and organisational measures: encrypted connections (TLS), access limited to authorised club staff with role-based permissions, signed and time-limited file uploads, and backups. No system is completely secure, but we work to keep the risk as low as possible and will notify you and the authorities of a breach as required by law.

Under KVKK article 11 you have the right to:

• learn whether your personal data is processed;
• request information about the processing;
• learn the purpose of the processing and whether data is used in line with that purpose;
• know the third parties in Turkey or abroad to whom data is transferred;
• request correction of incomplete or inaccurate data;
• request deletion or destruction of your data under the conditions in KVKK article 7;
• request that corrections and deletions are notified to the third parties the data was transferred to;
• object to a result against you that arises solely from automated analysis of your data;
• claim compensation for damage caused by unlawful processing.

Send your request to info@londonbridge.club from the e-mail address registered to your account, or in writing to the controller address above. We answer requests free of charge within 30 days at the latest; if the request requires additional cost, the fee set by the Personal Data Protection Board may apply. If you are not satisfied with our answer, you may complain to the Personal Data Protection Board (KVKK Kurulu).

If you are in the United Kingdom, the UK GDPR also applies. Our lawful bases are: performance of the membership contract (Article 6(1)(b)), compliance with legal obligations (Article 6(1)(c)), our legitimate interests in running a secure club (Article 6(1)(f)) and, for optional features such as showing your date of birth, your consent (Article 6(1)(a)), which you can withdraw at any time.

You have the rights of access, rectification, erasure, restriction, data portability and objection. Your data is stored in Turkey and push notifications are routed through Google; we use appropriate safeguards for these transfers. You can contact us at info@londonbridge.club, and you have the right to lodge a complaint with the Information Commissioner’s Office (ICO).

The club and the app are intended only for people aged 18 and over. We do not knowingly collect data from anyone under 18; if we learn that we have, we delete it.

We may update this policy when our services or the law change. The date at the top of the page shows the latest version; we will notify members in the app of significant changes.