Privacy Policy

Baobab Foundation is a dual structure Community Benefit Society registered in the UK under the names By and For Funding (reg no. 8876) and Community By and For Foundation (reg no. 8862). Community By and For Foundation is a charitable Community Benefit Society and is recognised as charitable by law.

Protecting your personal data is very important to us. We'll always be transparent about how and why we collect it. How we use your personal data will depend on how we're interacting with you. Please click on the relevant section below to learn more.


I'm a Prospective Member

When you apply to become a Member

  • We collect: Your name, email address, organisation name (if applicable), website (if applicable), social media handle, image (optional), position or title, phone number, field or focus (which shows your interests and may allow us to infer information about you), region and organisation type.

  • Our lawful basis: Under data protection law, we need to tell you the lawful basis we use to process your personal data in this way. Our lawful basis is our legitimate interests in knowing who our Members are and being able to offer services to our Members. 

I'm a Member

When you contact us

  • We collect: Your name, contact details, including your social media handle (if you contact us on social media) and query, if you contact us with a question or comment. 

  • Our lawful basis: Under data protection law, we need to tell you the lawful basis we use to process your personal data in this way. Our lawful basis is our legitimate interest in properly responding to your query. 


When you receive updates 

  • We use: Your name and email address you provided when you completed our Members form. 

  • Our lawful basis: Under data protection law, we need to tell you the lawful basis we use to process your personal data in this way. Our lawful basis is consent because you've opted-in to receive our updates. You can unsubscribe from these communications at any time by responding to any email you receive from us or by emailing info@baobabfoundation.org.uk


When you provide us with a testimonial 

  • We collect: Your name and testimonial. If you provide us with a testimonial we may publish this on our website, social media sites or otherwise use it for our internal business purposes. We will anonymise any publicly available testimonials unless we have your consent to identify you. 

  • Our lawful basis: Under data protection law, we need to tell you the lawful basis we use to process your personal data in this way. Our lawful basis is our legitimate interest to promote our business. Where we identify you we rely on consent. 


When you participate in a survey

  • We collect: Your name and opinion. We may anonymise and aggregate this data to produce statistics. We will ask for your consent before we ask you if you would like to provide any special category data such as data revealing racial or ethnic origin, political options, religious or philosophical beliefs, or health. 

  • Our lawful basis: Under data protection law, we need to tell you the lawful basis we use to process your personal data in this way. Our lawful basis for most survey questions will be our legitimate interests in improving or promoting our business. Where we collect special category data we will rely on consent as our lawful basis.


I'm a Job Applicant

When you apply for a job with us

  • We collect: Your name, contact details recruitment information (e.g. right to work documentation and references), qualifications, accreditations and any additional information we may receive from our recruitment partners or that you might provide to us when applying or interviewing. We will also ask if you need us to make reasonable adjustments to make the application and interview process accessible, here you might disclose information relating to an impairment or health condition but we do not require you to do this if you do not wish to.

  • Our lawful basis: Under data protection law, we need to tell you the lawful basis we use to process your personal data in this way. We will use your personal information to assess your suitability for our available roles. We do this to perform our contract obligations or to take steps at your request, before entering into a contract. 

Where we process your right to work documentation or information relating to an impairment  or health condition, we will do so to comply with our legal obligations. 


When you ask us to stay in contact

  • We collect: Your name and contact details.

  • Our lawful basis: Under data protection law, we need to tell you the lawful basis we use to process your personal data in this way. Our lawful basis is consent because you've asked us to keep your contact information so we can let you know about available job openings.

I'm a Grant Applicant

When you apply for a grant

  • We collect: Your name, nationality, email address, telephone number, address (including your business address if applicable), identification documentation such as a passport or driving licence, letters of support, details of your proposal and, with your consent, special category data including information relating to date of birth, gender, ethnicity and race, and disability for diversity monitoring purposes.

  • Our lawful basis: Under data protection law, we need to tell you the lawful basis we use to process your personal data in this way. Our lawful basis for collecting non-special category data is for the performance of a contract or steps taken in connection with entering a contract to award and manage our grants. We rely on consent as our lawful basis when collecting special category data.

I'm a Grant Holder

When you contact us

  • We collect: Your name, contact details, including your social media handle (if you contact us on social media) and query, if you contact us with a question or comment. 

  • Our lawful basis: Under data protection law, we need to tell you the lawful basis we use to process your personal data in this way. Our lawful basis is our legitimate interest in properly responding to your query. 

When we manage your grant

  • We collect: Your name and contact details to administer our grants system, including for responding to your questions and providing support. 

  • Our lawful basis: Under data protection law, we need to tell you the lawful basis we use to process your personal data in this way. Our lawful basis for collecting this data is for the performance of a contract. 


When we carry out reporting

  • We collect: The details of your grant and application for evaluating and reporting purposes, including assessing the fairness of application decisions.

  • Our lawful basis: Under data protection law, we need to tell you the lawful basis we use to process your personal data in this way. Our lawful basis for collecting this data is our legitimate interests in improving the way we offer and administer grants.

I'm an Event Attendee

When you attend one of our events or a third-party event we also attend

  • We collect: Your name, address, email address and phone number. 

  • Our lawful basis: Under data protection law, we need to tell you the lawful basis we use to process your personal data in this way. Our lawful basis is our legitimate interests to promote our business and to know who is attending our events. 


When you receive updates 

  • We use: Your name and email address provided when you signed up to attend an event or attended our event, and, when you are an individual and not a business, consented to marketing. 

  • Our lawful basis: Under data protection law, we need to tell you the lawful basis we use to process your personal data in this way. Our lawful basis where you are a business is our legitimate interests to promote our business. Our lawful basis when you are an individual is consent because you've opted-in to receive our updates. You can unsubscribe from these communications at any time by responding to any email you receive from us or by emailing info@baobabfoundation.org.uk

I'm a Funder

When you contact us

  • We collect: Your name, contact details, including your social media handle (if you contact us on social media) and query, if you contact us with a question or comment. 

  • Our lawful basis: Under data protection law, we need to tell you the lawful basis we use to process your personal data in this way. Our lawful basis is our legitimate interest in properly responding to your query. 

When we manage your grant

  • We collect: Your name and contact details to administer our grants system, including for responding to your questions and providing support. 

  • Our lawful basis: Under data protection law, we need to tell you the lawful basis we use to process your personal data in this way. Our lawful basis for collecting this data is for the performance of a contract. 


When we carry out reporting

  • We collect: The details of your funding application and funding for evaluating and reporting purposes, including assessing the fairness of application and funding decisions.

  • Our lawful basis: Under data protection law, we need to tell you the lawful basis we use to process your personal data in this way. Our lawful basis for collecting this data is our legitimate interests in improving the way we offer and administer grants. 

Click here to discover who we share your personal data with.

Click here to discover where we store your personal data.

Click here to discover how long we keep your personal data.

Click here to discover your rights under data protection law. 

Click here to discover what cookies we use. 


If you have any questions about how we use your personal data please get in touch by: