Skip to main content
Privacy Policy · Version 2.1

Your Data. Your Career.
Your Control.

We believe privacy is a right, not a setting buried in a menu. This policy explains exactly what we collect, why we collect it, and what you can do about it — in plain English, without legal intimidation.

Effective: 1 May 2026·Last updated: May 2026·Version 2.1

Our Privacy Principles

Privacy by design

Every feature is built with data minimisation at its core. We collect only what the service requires.

Full transparency

No hidden data flows, no undisclosed sharing. Every data point has a documented, auditable purpose.

You control your data

Export, correct, or delete your data in minutes — from account settings, no forms required.

Zero data selling

We have never sold personal data and our incorporation documents prohibit us from ever doing so.

Account Data

When you create a BaobabHQ account, we collect your name, email address, and a hashed password. Passwords are hashed using bcrypt and are never stored in plain text or accessible to BaobabHQ staff.

  • Full name
  • Email address
  • Password (bcrypt hashed, never stored in plain text)
  • Phone number (optional, for account recovery only)

Profile & Career Data

To surface relevant roles and calculate your growth, wellbeing, and salary match scores, we collect career information you choose to provide. You control exactly how much you share.

  • Work history and job titles
  • Skills, qualifications, and certifications
  • Education history and level
  • Salary preferences and expectations
  • Preferred work style and location
  • Career ambitions and growth goals
  • Uploaded CV (stored encrypted, deletable at any time)

Usage & Behavioural Data

We collect anonymised usage signals to improve matching quality. We do not build individual behavioural profiles for advertising purposes.

  • Pages visited and features used (session-level only)
  • Job listings viewed and saved
  • Search queries (anonymised after 24 hours)
  • Device type and browser (no fingerprinting)
  • Approximate location (city-level, derived from IP — not stored)
  • Application and match interaction signals

Data We Do Not Collect

We explicitly do not collect any of the following:

  • Ethnicity, race, religion, or sexual orientation
  • Detailed geolocation (GPS or precise coordinates)
  • Biometric data of any kind
  • Social media content or browsing history outside BaobabHQ
  • Data from third-party advertising networks

Privacy FAQ

Answers to the questions we hear most often.

Data Protection Officer

BaobabHQ has appointed a DPO as required under UK GDPR Article 37. We aim to respond to all DPO correspondence within 5 working days.

DPO: Data Protection Team, BaobabHQ Ltd

Email: privacy@baobabhq.com

Address: 100 Finsbury Pavement, London EC2A 1RS, UK

ICO Registration: ZA123456

Policy Changes

When we make material changes, we will notify you by email at least 30 days before the effective date. We maintain a full version history so you can review exactly what changed.

Exercise your data rights

Export, correct, or delete your data — all from your account or by contacting our DPO.

UK GDPR Compliant
EU GDPR Compliant
ICO Registered (ZA123456)
DPO Appointed
Zero Data Selling