Privacy policy.

01 / Who we are

CRM SPOTLIGHT is published by Ministry of CRM. Its operator and data controller is MOC Reklam Tanitim Interaktif Paz. Ltd. Sti., trading as Ministry of CRM. We are responsible for deciding how the personal information described here is used.

For privacy requests, email legal@ministryofcrm.com, or write to Istanbul Cad. 1. Begonya Sk. Arcadium Life 3 No 98, Istanbul, Gokturk 34077, Turkey.

This notice covers CRM SPOTLIGHT’s website and newsletter. Other Ministry of CRM services have their own notices. Third-party campaign websites linked from our articles are responsible for their own privacy practices.

02 / Information we collect

Information you give us

• Newsletter details: your email address, plus your name and company if you choose to provide them. We associate these details with a subscriber identifier and subscription status.
• Case submissions: your email and the brand, public source and customer mechanic you share, plus optional campaign name, market, dates, evidence/context, name, company and whether you worked on it. We record the acknowledgement wording, submission time and notification status. Cases are private until editorial review; we may contact you about the case. Submitting does not subscribe you to the newsletter.
• Your choices: the signup wording, source and time of your consent; changes to your subscription; and unsubscribe or suppression records.
• Messages and requests: your name, email address and brief when you use the contact form, plus the notice wording, received time and notification status. We save enquiries privately and email them to our authorised team to respond. Contacting us does not subscribe you to the newsletter. We also process details you include in emails or privacy requests.

An email address and affirmative newsletter consent are needed to subscribe. Withholding them does not prevent you from reading public articles. Please do not send sensitive personal information unless it is needed for a request we have discussed with you.

Information from using the service

We keep first-party aggregate counts of page loads, reader opens, category and radar use, filter and sharing actions, clicks to the Ministry of CRM website, and saved contact/case submissions. These counts run without cookies or browser storage and are separate from optional Google Analytics. Our counter table stores only the UTC day, an allowlisted event/context and a total. It does not store visitor identifiers, IP addresses, email addresses, page URLs, search terms or form contents, and cannot measure unique people or follow a person across visits. Ordinary requests still pass through our hosting infrastructure.

Our hosting and email providers process technical information needed to deliver pages and messages, such as IP addresses, browser information, request times, delivery status, errors and security events. Our application uses a short-lived hashed identifier derived from an IP address to limit repeated signup and subscriber-check attempts; it does not store the raw IP address in that rate-limit record.

We also record browser-session identifiers, newsletter delivery or suppression status, and internal synchronisation records. For authorised editors, ChatGPT supplies sign-in identifiers and an email address; the editor’s email is recorded against editorial changes.

Optional website analytics

If you allow analytics, Google Analytics 4 receives a browser identifier, pages viewed, referrer origin, browser and device information, approximate location and selected interaction events. These cover article reading progress, category views, radar visibility and use, sharing, library filtering, form starts, source-link use and successful newsletter or case submission actions. We do not send email addresses, form contents, subscriber identifiers or free-text searches to analytics. A reading-progress event indicates scrolling, not proof that an article was read.

Other sources

We may reconcile an existing CRM SPOTLIGHT mailing list with the website, including the address, optional profile details and subscription status already held by our email provider. We do not treat an import as fresh consent or automatically reactivate an opted-out address. Editorial articles can include public professional information from cited campaign sources.

The case form saves your details in our private submission inbox and emails them to Cemre and Elif at Ministry of CRM through Mailgun’s EU endpoint. It does not fetch the supplied source automatically or publish the case.

03 / Why we use it

• Send the newsletter you requested. We use your email, subscription choices and any optional profile details to maintain your subscriber record and deliver CRM SPOTLIGHT emails. Where consent is required, your affirmative signup is the basis for this processing.
• Understand and improve the editorial service. With your optional analytics consent, we measure visits and selected interactions to learn which stories and navigation features are useful. Analytics permission is separate from newsletter signup, and public articles remain available if you decline.
• Operate and protect the service. We use technical records, session information and editor audit records to deliver the website, remember requested preferences, prevent abuse and resolve problems. Where applicable, we rely on legitimate interests in running a secure, reliable editorial service, balanced against your rights.
• Review submitted cases. We use submission details to evaluate editorial coverage and follow up on the case you sent. Where applicable, this serves our legitimate interests in operating an editorial service and responding to your request; the form explains this use. It is separate from newsletter and analytics consent.
• Respond to you and honour your choices. We use correspondence and limited consent or suppression records to handle requests, demonstrate your choices and avoid sending unwanted marketing. Where applicable, this serves our legitimate interests in responsible communication and compliance; a legal obligation is used only where a specific applicable duty requires the processing.

We do not sell or rent subscriber information, use it for cross-context behavioural advertising, or add you to unrelated marketing lists through this signup. We do not make decisions with legal or similarly significant effects based solely on automated processing.

04 / Newsletter choices

Signup is an explicit request to receive CRM SPOTLIGHT newsletters from Ministry of CRM. The checkbox is not preselected. We do not require you to agree to unrelated marketing.

You can withdraw newsletter consent at any time using Unsubscribe from CRM SPOTLIGHT in an email footer, your newsletter preferences on a recognised browser, or by emailing legal@ministryofcrm.com. Withdrawal does not affect processing that was lawful before you withdrew it.

Our email provider can also display a separate unsubscribe control in your email application. That provider-generated control may unsubscribe you from the wider sending domain, rather than this newsletter alone. Use the named footer link to make the CRM SPOTLIGHT choice.

We disable email open and click tracking. Mailgun still records delivery, bounce, complaint and unsubscribe events. Loading images in an email can send an ordinary image request to the image host.

The current signup and returning-subscriber check do not verify ownership of an email address. Please use your own address. The browser cookie remembers a subscription; it is not a secure account login. Unsubscribing stops marketing but does not itself clear that cookie.

05 / Cookies & browser storage

Google Analytics is off by default. The Google tag is not loaded and no Google Analytics measurement requests are sent before you opt in. Choose Allow analytics, Necessary only or individual settings in the banner. Closing settings or continuing to browse does not grant consent. We do not add advertising or cross-site profiling pixels. Global Privacy Control and Do Not Track do not enable analytics; there is no sale or advertising sharing on this site to opt out of.

Open cookie settings at any time to change or withdraw analytics consent. Withdrawal stops further Google Analytics collection on this browser and removes the site’s accessible Google Analytics cookies; it does not delete information already received by Google. Contact us for an applicable deletion request. Where browser storage is blocked, a choice may apply only for the current visit.

You can remove or block cookies and clear local storage using your browser settings. This removes remembered choices on that device; it does not unsubscribe your email address. Blocking storage may affect subscription recognition or editor sign-in, but public articles remain available.

06 / Who receives information

• Authorised Ministry of CRM team members: manage articles, submissions, subscriptions, delivery and requests. Subscriber data can be exported as CSV for the same newsletter administration purposes; this does not create permission for unrelated campaigns.
• OpenAI Sites and its hosting infrastructure: host the website, database and editorial sign-in, and process operational or security information. See OpenAI’s privacy policy.
• Mailgun: manages the CRM SPOTLIGHT mailing list, email delivery and private case/contact-notification emails to our editorial team. We send subscriber addresses, optional profile details, internal subscriber identifiers and the information needed to deliver and administer messages. See Mailgun’s privacy information.
• Google Analytics: provides optional website usage reports after analytics consent. Google processes the browser and interaction information described above; we do not connect this data to subscriber profiles or advertising products. See Google’s privacy policy and Google Analytics privacy information.
• Font and image hosts: The current Geist fonts are self-hosted. Some original campaign-image hosts receive ordinary browser requests when their resources load, which may include an IP address, browser details and referrer information. See Google’s privacy policy and the relevant image-source website.

Where required, information may be disclosed to meet a lawful request, protect rights or address security incidents. External source links and optional sharing actions take you to services with their own notices. We have not added social-network tracking SDKs to the sharing controls.

07 / International processing

CRM SPOTLIGHT serves readers worldwide. Our team and service providers can process information outside your country, including through hosting, delivery, support and infrastructure operations. Laws and lawful-access requirements can differ between countries.

Our Mailgun integration uses its EU API endpoint. This does not mean all website, subscriber, backup or operational information is stored or accessed only in the EU. Website data is held separately on the hosting platform; we do not represent that this website has a country-specific data-residency guarantee.

International processing must meet the requirements of the law that applies to the relevant information. You can ask legal@ministryofcrm.com for details of the processing locations and any transfer safeguards applicable to your information. Newsletter consent is not treated as blanket permission to waive international-transfer protections.

08 / How long we keep it

We keep active subscriber records to deliver and administer the requested newsletter. Unsubscribing does not automatically delete your profile or consent history. Consent and suppression information helps us respect an opt-out, investigate complaints and demonstrate previous choices.

Retention depends on whether a subscription remains active, the information needed to honour a request or restriction, applicable legal duties, and the reasonable period needed to resolve a complaint or protect legal rights. Subscriber, consent and suppression records do not currently have a fixed automatic deletion date. You can request deletion; limited records may still need to be retained to honour your opt-out or meet a legal requirement.

Browser recognition expires after 90 days. Rate-limit records have an expiry of approximately one to two hours; expired session and rate-limit rows are cleared through routine maintenance. The privacy choice lasts up to 180 days. Analytics cookies are configured for 180 days without rolling renewal; the GA4 property’s event-level data retention is 14 months with reset-on-new-activity disabled. This setting does not govern all aggregated reports or provider operational records. Case-submission and contact-enquiry records and notification details are retained for editorial review, follow-up and abuse prevention; they have no automatic deletion date at present. You can request deletion. Case/contact-form rate-limit records contain hashed network/email identifiers and expire within approximately two days; expired rows are removed on subsequent case requests. Aggregate first-party daily counters have no automatic deletion date and contain no visitor identifiers. Display preferences remain on your device until cleared. Provider logs and backups follow the relevant provider’s retention arrangements. Contact us for information about records associated with you.

09 / Your privacy rights

Depending on the law that applies, you may be entitled to:

• Know how your personal information is used and receive access or a copy.
• Correct inaccurate information or request deletion.
• Restrict or object to particular processing, including direct marketing.
• Receive a portable copy where that right applies.
• Withdraw consent without affecting earlier lawful processing.
• Use an authorised agent or appeal a request decision where local law allows.
• Complain to the relevant privacy or data-protection authority.

These rights can be subject to lawful exceptions. We do not discriminate against you for exercising an applicable privacy right. Public article access does not depend on agreeing to newsletter marketing.

EEA, UK and Switzerland: applicable data-protection law may provide access, correction, erasure, restriction, portability and objection rights. You may complain to your local authority, including the UK Information Commissioner.

United States: rights vary by state and by whether a law covers the relevant processing. Where applicable, they can include access, correction, deletion, portability, authorised-agent requests, appeals and opt-outs from sale, sharing or targeted advertising. We do not carry out that advertising sale or sharing on CRM SPOTLIGHT.

Canada, Brazil, Turkey and other locations: applicable laws can provide rights over access, correction, consent and deletion, as well as complaints or other local protections. We will handle a request under the rules that apply to it rather than assuming one country’s rules apply to everyone.

10 / Security & children

We use HTTPS, restricted editorial access, hashed browser tokens and provider-held credentials to reduce unauthorised access. No website or email system can guarantee complete security. Contact us if you believe someone has used your address or information without permission.

CRM SPOTLIGHT is an editorial resource for an adult professional audience. We do not knowingly seek newsletter subscriptions from children under 18. If you believe a child has supplied personal information, contact us so we can review it and take appropriate action under applicable law.

11 / Changes & contact

We will update this page and its last-updated date when our practices change. Where a change requires new consent or a separate notice, we will provide it before using information for that new purpose. Newsletter consent does not grant analytics permission. New uses of case submissions or new marketing purposes will need appropriate updated notices and consent where required.

Contact legal@ministryofcrm.com for questions about this notice or your information.