CorpsLoop ("we", "us", "our") operates the corpsloop.com platform for associations, NGOs, and partner organisations.

For privacy requests, contact privacy@corpsloop.com. We aim to respond within a reasonable period and, where applicable, within timelines required by law.

This policy covers personal data processed through the CorpsLoop website, organisation accounts, claim/verification flows, messaging, listings, and related support channels.

CorpsLoop is an independent platform. It is not an official European Union service and is not a substitute for any EU programme authority or accreditation body.

Account data: name, email address, password (stored hashed), organisation affiliation, and role where applicable.

Organisation data: profile details you submit or claim (such as name, city, description, focus areas, logos, and verification materials).

Communication data: messages exchanged on the platform, conversation metadata, and related delivery/read signals needed to operate messaging.

Technical data: IP address, device/browser information, approximate location derived from IP, cookies or similar technologies, and security logs.

Support data: information you send to our contact channels, including attachments you choose to provide.

To create and manage accounts, authenticate users, and operate organisation profiles.

To process claim and verification applications and show trust signals on the platform.

To enable organisation-to-organisation messaging, listings, discovery, and related product features.

To secure the service, prevent abuse, debug issues, and improve reliability and performance.

To communicate service notices, security alerts, and (where permitted) product updates.

Depending on your location and the processing activity, we rely on one or more of: performance of a contract (providing the service you request); legitimate interests (securing and improving the platform, preventing fraud); consent (where required, for example certain cookies or optional communications); and legal obligation where applicable.

If you are in the European Economic Area or Türkiye, you may have additional rights under GDPR and/or KVKK. Contact us to exercise them.

We do not sell personal data.

We may share data with infrastructure providers that help us run the service (for example hosting, database, email delivery, analytics, or CDN providers), under appropriate contractual safeguards.

We may disclose information if required by law, to protect rights and safety, or in connection with a corporate transaction, subject to applicable legal requirements.

Public organisation profile information you choose to publish may be visible to other users and visitors according to product visibility rules.

We keep personal data only as long as needed for the purposes described above, including legal, accounting, and security requirements.

Account data is generally retained while the account is active and for a limited period afterwards if needed for dispute resolution or legal compliance. Messaging and logs may be retained for operational and safety periods, then deleted or anonymised.

We use technical and organisational measures appropriate to the risk, including encrypted transport (HTTPS), access controls, hashed passwords, and monitoring for suspicious activity.

No online service can guarantee absolute security. Please use a strong unique password and notify us promptly of any suspected unauthorised access.

Subject to applicable law, you may request access, correction, deletion, restriction, objection, or portability of your personal data.

You may also withdraw consent where processing is based on consent, without affecting the lawfulness of prior processing.

To submit a request, email privacy@corpsloop.com from the address associated with your account where possible. We may need to verify your identity before acting.

We use necessary cookies or similar technologies for authentication, locale preference, security, and core functionality.

If we use non-essential analytics or marketing technologies, we will provide appropriate notice and choices where required by law.

Our infrastructure providers may process data in countries other than where you are located. Where required, we use appropriate transfer safeguards (such as standard contractual clauses or equivalent mechanisms).

CorpsLoop is intended for organisation representatives and adult professionals. We do not knowingly collect personal data from children under 16. If you believe a child has provided data, contact us so we can delete it.

We may update this Privacy Policy from time to time. The "Last updated" date at the top will change when we do. Material changes may also be communicated through the platform or by email where appropriate.

Privacy questions and data-subject requests: privacy@corpsloop.com.

General platform contact: use the Contact page on corpsloop.com.