Privacy Policy
Last updated: 27 July 2026
Who we are:
This website (loopreports.co) is operated by Burak Yamanlıca, a sole proprietorship registered in Türkiye and trading as Loop Reports ("Loop Reports", "we", "us"), based in Ankara, Türkiye. Our registered business address is available on request. We act as the data controller for personal data collected through this website. Contact for all privacy matters: buraky@loopagency.com.
Scope: This policy explains what personal data we collect through this website, why we collect it, how we use and protect it, and what rights you have. It applies to visitors to loopreports.co and to people who contact us through the site. It does not cover personal data we process on behalf of our clients in the course of a design engagement. Where we process data contained in client materials — for example employee photographs or names appearing in a report — we act as a data processor under the instructions of that client, governed by our engagement contract rather than this policy.
What we collect: Information you give us. When you submit our contact form or newsletter form, we collect the details you provide: first name, last name, email address, phone number, and anything you choose to write to us. When you email us directly, we receive your email address and the content of your message.
Information collected automatically. When you visit the site, our platform provider records technical data including your IP address, browser type and version, device type, operating system, referring page, pages viewed, and the time and duration of your visit. This is collected through cookies and similar technologies. We do not knowingly collect special categories of personal data — health, biometric, religious, political, trade union or sexual orientation data — through this website, and we ask that you do not send such data to us through the contact form.
Why we use it, and our legal basis:
Responding to your inquiry and corresponding with you — legitimate interest; steps prior to entering a contract. Preparing proposals and managing a client relationship — performance of a contract.
Sending occasional updates about our work, if you opt in — consent.
Keeping the site secure, available and functioning — legitimate interest.
Understanding how the site is used, in aggregate — consent (analytics cookies).
Meeting legal, tax and accounting obligations — legal obligation.
Under Turkish law (KVKK, Law No. 6698), we rely on the corresponding grounds in Article 5 — principally your explicit consent, the necessity of processing for the establishment or performance of a contract, and our legitimate interests, provided your fundamental rights are not overridden. You can withdraw consent at any time. This does not affect processing carried out before withdrawal.
Cookies and similar technologies: This site is built on the Wix platform, which sets cookies necessary for the site to function — session management, security and load balancing — and, where enabled, cookies for analytics and performance measurement. Essential cookies are required for the site to work and cannot be switched off. Analytics and functional cookies are used only where you consent. You can control or delete cookies through your browser settings. Blocking essential cookies may prevent parts of the site from working.
Whom we share it with: We do not sell personal data, and we do not share it for advertising purposes. We share personal data only with our website platform provider (Wix.com Ltd.), which hosts this site and processes form submissions on our behalf; our email and business-productivity providers, used to receive and manage correspondence; professional advisers such as accountants and lawyers, where necessary and under a duty of confidentiality; and public authorities, where we are legally required to disclose. Each provider acts under a contract that limits their use of the data to the services they provide to us.
International transfers: We are established in Türkiye. Our service providers may store or process data outside Türkiye, including in the European Economic Area, the United Kingdom, the United States and Israel. Where personal data is transferred internationally, we rely on appropriate safeguards — such as Standard Contractual Clauses approved by the European Commission, adequacy decisions where they exist, or your explicit consent as permitted under Article 9 of the KVKK. You may request further information about these safeguards at buraky@loopagency.com.
How long we keep it: Inquiries that do not become projects are kept for up to 24 months from last contact, then deleted. Client and project correspondence is kept for the duration of the engagement and for the period required by Turkish commercial and tax law thereafter, generally 10 years. Newsletter subscriptions are kept until you unsubscribe. Website analytics data is kept as set by our platform provider's retention settings. We delete or anonymize personal data once the purpose for holding it has ended and no legal obligation requires us to keep it.
Security: We apply technical and organizational measures appropriate to the risk, including encrypted connections (HTTPS/TLS), access controls limiting who can see inquiry data, multi-factor authentication on core business accounts, and confidentiality obligations for all personnel and subcontractors. Because our work regularly involves unpublished financial and sustainability data, confidentiality is central to how we operate. Client materials are handled under non-disclosure agreements and are never published, referenced, or shown before the client's own publication date. No method of transmission over the internet is completely secure, and we cannot guarantee absolute security. If a personal data breach occurs that is likely to result in a risk to your rights, we will notify the relevant supervisory authority and, where required, affected individuals without undue delay.
Your rights
Subject to applicable law, you have the right to learn whether we process your personal data and to request access to it; to request correction of inaccurate or incomplete data; to request deletion of your data where the grounds for processing no longer apply; to request restriction of processing, or to object to processing based on our legitimate interests; to receive your data in a structured, machine-readable format and have it transmitted to another controller; to withdraw consent at any time where processing is based on consent; to object to any decision based solely on automated processing, though we do not carry out such processing; and to request compensation for damage arising from unlawful processing, as provided under KVKK Article 11. To exercise any of these rights, write to buraky@loopagency.com. We will respond within 30 days under the KVKK, and within one month under the GDPR. If you are not satisfied with our response, you may lodge a complaint with the Turkish Personal Data Protection Authority (Kişisel Verileri Koruma Kurumu) at kvkk.gov.tr, or, if you are in the EEA or UK, with your local supervisory authority.
Children This site is directed at businesses and professional audiences. We do not knowingly collect personal data from anyone under 18. If you believe a child has provided us with personal data, contact us, and we will delete it.
Links to other sites: Our site may link to third-party websites, including client publications and our own profiles on other platforms. We are not responsible for the privacy practices of those sites, and we encourage you to read their policies.
Changes to this policy: We may update this policy to reflect changes in our practices or in the law. The "last updated" date at the top shows when it was last revised. Material changes will be highlighted on this page.
Contact Burak Yamanlıca — trading as Loop Reports Ankara, Türkiye.
Email: buraky@loopagency.com.
Registered business address available on request.