1Introduction
Bridges of Civilizations ("we", "us", "our"), based in Istanbul, Türkiye, operates the charity platform available at medkop.org (the "Platform"). The Platform connects donors with documented humanitarian and development projects.
We are the data controller for the personal data processed through the Platform. By using the Platform you acknowledge that you have read this Privacy Policy. If you do not agree with it, please do not use the Platform.
2Information we collect
We only collect the information needed to run the Platform. Depending on how you use it, this may include:
- Account information: your name or username, email address and password. Passwords are never stored in plain text; they are protected with the Argon2 hashing algorithm.
- Donation information: your name, and optionally your email address and phone number, the amount, the project you donate to, and a payment reference returned by our payment provider. We never see or store your full card number; card details are entered on the secure pages of Stripe.
- Messages and forms: your name, email address and the content of messages you send through the contact and volunteer forms.
- Comments: the display name and text you publish under projects and articles.
- Technical data: IP address, browser type, requested pages and timestamps. We use this to keep the Platform secure, to limit abuse (for example, rate-limiting repeated submissions) and to fix errors.
- Preferences: your chosen language and display theme (light or dark).
We do not intentionally collect sensitive categories of data (such as health, religion or political opinion). Please avoid including such information in free-text fields.
3How we use your information
- To process donations, allocate them to the selected project and send confirmations.
- To create and manage your account and let you sign in, reset your password and manage your profile.
- To reply to your inquiries and volunteer requests.
- To publish and moderate comments in line with our Terms & Conditions.
- To protect the Platform against fraud, spam, abuse and security incidents.
- To remember your preferences and improve the Platform's performance and usability.
- To meet our legal, accounting and regulatory obligations.
We do not sell your personal data and we do not use it for third-party advertising.
4Legal bases
Where Turkish Law No. 6698 on the Protection of Personal Data ("KVKK") or the EU/UK GDPR applies, we process personal data on the following bases:
- Performance of a contract – to provide the services you request, such as your account or a donation.
- Legitimate interests – to secure the Platform, prevent abuse and improve our services, provided this does not override your rights.
- Legal obligation – to comply with applicable laws, for example record-keeping requirements.
- Consent – where you have given it, for instance when you choose to share optional details. You may withdraw consent at any time.
5Cookies and local storage
The Platform uses only a small number of essential technologies and does not use advertising or third-party analytics cookies:
- user_lang (cookie) – remembers your preferred language.
- public_token (cookie) – keeps you signed in after you log in; it expires automatically and is removed when you sign out.
- theme (browser local storage) – remembers whether you prefer the light or dark display.
You can delete or block cookies in your browser settings, but parts of the Platform (such as signing in) may then stop working.
6Sharing and service providers
We share personal data only when necessary and only with:
- Payment provider: Stripe processes donation payments under its own privacy policy.
- Infrastructure and email providers: companies that host the Platform or deliver emails (such as password-reset and confirmation messages) on our behalf, bound by confidentiality and data-protection obligations.
- Authorities: courts, regulators or law-enforcement bodies when we are legally required to do so or to protect our rights and the safety of others.
Comments you post are public, together with the display name you choose.
7International transfers
Our service providers may process data in countries other than your own, including outside Türkiye and the European Economic Area. Where this happens we rely on appropriate safeguards required by applicable law, such as contractual commitments or adequacy decisions.
8Data retention
We keep personal data only as long as needed for the purposes described above:
- Account data – until you delete your account or ask us to do so.
- Donation records – for the period required by accounting, tax and anti-fraud rules.
- Messages and volunteer requests – for as long as needed to handle your request and a reasonable period afterwards.
- Technical logs – for a limited period for security and troubleshooting.
9Security
We apply technical and organisational measures to protect your data, including encrypted connections (HTTPS), salted password hashing, access controls, input validation, and rate-limiting against abuse. No system is completely secure, so we cannot guarantee absolute security, but we work continuously to protect your information and will notify you and the authorities of a breach where the law requires it.
10Your rights
Subject to applicable law (including Article 11 of KVKK and Articles 15–22 of the GDPR), you may:
- ask whether we process your data and request a copy of it;
- ask us to correct inaccurate or incomplete data;
- ask us to delete or anonymise your data;
- object to, or ask us to restrict, certain processing;
- withdraw consent where processing is based on consent;
- request that your data be transferred to you in a portable format; and
- lodge a complaint with the Turkish Personal Data Protection Board (KVKK) or your local data protection authority.
To exercise these rights, contact us using the details below. We may need to verify your identity first and will respond within the time limits set by law.
11Children's privacy
The Platform is not directed at children under 16 and we do not knowingly collect their personal data. If you believe a child has provided us with personal data, please contact us and we will delete it.
12Changes to this policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top shows when it last changed. If we make significant changes we will take reasonable steps to let you know, for example with a notice on the Platform.
13Contact us
If you have any questions about this Privacy Policy or how we handle your data, please contact us: