Privacy Policy
Last updated: 26 June 2026
Effective date: 26 June 2026
BKTY LTD is the data controller under UK GDPR. ICO registration: ZC165481. Contact [email protected] for any questions.
1. Who We Are
CommunityTurk is operated by BKTY LTD, registered in England and Wales. Data Controller: BKTY LTD, 29 Watts Lane, Rugby, CV21 4PE, Company No. 12845913 Email: [email protected] ICO registration: ZC165481 (registered 04 June 2026, expires 03 June 2027) BKTY LTD is registered with the UK Information Commissioner's Office (ICO) and complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
2. What Data We Collect
We collect the following categories of personal data: • Account data: email address, username, encrypted password • Profile data: display name, profile photo (optional), language preference • Business listing data: business name, address, phone, website, description (if you submit a listing) • Content data: forum posts, event submissions, blog comments, reviews • Communication data: messages sent to our team, support requests • Technical data: IP address, browser type, device type, operating system, pages visited, session duration • Location data: city or region level only (if you enable location features) • Payment data: transaction reference only — card details are processed by Stripe and never stored by us
3. How We Collect Data
We collect data: • Directly from you when you register, submit a listing, post content, or contact us • Automatically when you use the platform (via cookies and server logs) • From third-party services such as Google (if you use social sign-in)
4. How We Use Your Data
We use your data to: • Create and manage your account • Display your business listing or community content • Process payments for premium listings • Send transactional emails (account verification, password reset, booking confirmations) • Send newsletters and updates if you opt in • Improve and maintain the platform • Detect and prevent fraud, abuse, and security threats • Comply with legal obligations
5. Legal Basis for Processing
We process your personal data on the following legal bases: • Contract: to provide the services you have signed up for • Legitimate interests: platform security, fraud prevention, analytics, service improvement • Consent: newsletters and marketing communications (you can withdraw at any time) • Legal obligation: compliance with UK law and ICO requirements
6. Who We Share Data With
We share data only where necessary: • Cloudflare — CDN, DDoS protection and security (data may be processed internationally with appropriate safeguards) • Stripe — payment processing (subject to Stripe's own privacy policy) • Zoho — email and CRM services • Google Analytics — aggregated, anonymised website usage statistics • Legal authorities — if required by law, court order, or to protect our legal rights We do not sell or rent personal data to any third party. We do not share personal data with advertisers.
7. International Data Transfers
Some of our service providers (such as Cloudflare) may process data outside the United Kingdom. Where this occurs, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) or equivalent mechanisms approved under UK GDPR.
8. Cookies
We use cookies and similar technologies for: • Essential functionality (session management, security) • Analytics (Google Analytics — anonymised) • Preference storage (language, display settings) You can manage cookie preferences at any time. For full details, see our Cookie Policy at communityturk.com/cookies.
9. Data Retention
We retain personal data only for as long as necessary: • Active account data: for the duration of your account • Deleted account data: removed within 30 days of deletion request • Server and security logs: 90 days • Financial transaction records: 7 years (required by UK law) • Backup data: overwritten within 90 days You may request deletion of your account at any time by emailing [email protected].
10. Data Security
We implement the following security measures: • HTTPS encryption on all pages • Encrypted password storage (bcrypt) • Access controls limiting staff access to personal data • Regular security reviews • Secure backup procedures In the event of a data breach that poses a risk to individuals, we will notify the ICO within 72 hours and notify affected users without undue delay.
11. Children's Privacy
CommunityTurk is not intended for children under 13. We do not knowingly collect personal data from children. If you believe a child has registered without parental consent, please contact us at [email protected] and we will delete the account promptly.
12. Your Rights Under UK GDPR
You have the following rights regarding your personal data: • Access: request a copy of the data we hold about you • Rectification: request correction of inaccurate or incomplete data • Erasure: request deletion of your data in certain circumstances • Restriction: request we temporarily stop processing your data • Portability: receive your data in a machine-readable format • Objection: object to processing based on legitimate interests • Withdraw consent: where processing is based on consent To exercise any right, email [email protected]. We respond within one month. Requests are free of charge. If you are not satisfied with our response, you may complain to the ICO: Website: ico.org.uk/make-a-complaint Telephone: 0303 123 1113 Post: Wycliffe House, Water Lane, Wilmslow, SK9 5AF
13. Changes to This Policy
We may update this Privacy Policy when our services, legal obligations, or data practices change. We will notify registered users of significant changes by email or in-app notice. The date at the top of this page shows when the policy was last updated.
14. Contact Us
For any privacy-related questions or requests: Email: [email protected] Data Controller: BKTY LTD, 29 Watts Lane, Rugby, CV21 4PE, Company No. 12845913 ICO registration: ZC165481 (registered 04 June 2026, expires 03 June 2027)