Privacy Notice
Babbasa promises to respect and protect any personal information you share with us or that we get from other organisations – and keep it safe.

When we collect information from you, we want you to be clear about what happens with it and what your rights are – we will not do anything with it that you wouldn’t reasonably expect.


How we use your personal data

  • Babbasa takes your privacy very seriously and will never collect, record or process your personal information unnecessarily – we will always manage your data lawfully.
  • Babbasa gather and process your personal information only as it is described in this notice.
  • We will always do this in way that complies with the relevant data protection regulations and laws.
  • This notice provides you with the information you need about your rights and our responsibilities. 
  • It explains how, why and when we process your personal data.
  • We only retain your data for as long as is necessary and for the purpose(s) described in this notice.
  • We will not disclose or share your personal information without your consent – unless required to do so by law or to prevent harm or criminal activity.
  • When you have consented to us using your personal information or providing you with promotional offers and marketing, you are free to withdraw this consent at any time – and this will not put you at any disadvantage in respect of the services or support we provide to you


What we collect

We may collect the following information:

  • Name and job title
  • Contact information including name, email address and telephone number
  • Demographic information such as postcode, preferences and interests
  • Corporate / business relationships and contact details
  • Supporter, sponsorship / fundraising and donation history


Special category data
Due to the type of services we offer, Babbasa sometimes needs to collect and process sensitive personal information about you – this is known as ‘special category data’.

We only collect this so we can deliver our services (under our contracts) and plan fundraising activity so we can develop new services.

Some special category data is protected by extra safeguards under the GDPR and we might need your consent to collect and process it.


Where do we get your personal information?
We collect your personal information in the following ways:

 When you give it to use directly
Examples of how you may give us your information might include:

  • Signing up to our events, training or 1-1 support
  • Signing up to receive our newsletter and opportunities
  • Telling us your story in the form of a case study
  • Making a donation
  • Communicating with us

When someone else gives it to us 
We might collect personal information about you from the following places: 

  • Referral and application forms 
  • Verbally – from you, other organisations and other individuals. 

Website visitors
When you visit we use Google Analytics to collect standard Internet log information and details of visitor behaviour patterns. We do this to find out things such as the number of visitors to the various parts of the site. This information is processed in a way, which does not identify anyone. We do not make any attempt to find out the identities of those visiting our website. You can find out more about how cookies are used on this website in the Cookies Policy below.

If we do want to collect personally identifiable information through our website, we are up front about this.


Website Cookies
A cookie is a small file, which asks permission to be placed on your computer’s hard drive. Once you agree, the file is added and the cookie helps analyse web traffic or lets you know when you visit a particular site. Cookies allow web applications to respond to you as an individual. The web application can tailor its operations to your needs, likes and dislikes by gathering and remembering information about your preferences.

We use traffic log cookies to identify which pages are being used. This helps us analyse data about web page traffic and improve our website in order to tailor it to customer needs. We only use this information for statistical analysis purposes and then the data is removed from the system.

Overall, cookies help us provide you with a better website, by enabling us to monitor which pages you find useful and which you do not. A cookie in no way gives us access to your computer or any information about you, other than the data you choose to share with us.

You can choose to accept or decline cookies. Most web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies if you prefer. This may prevent you from taking full advantage of the website.


List of Cookies

Cookie Name

Used by




Google Analytics

Stores the amount of visits of a user, the time of their first visit, the previous visit, and the current visit. It does not contain any personal information and is used only for analytical purposes.  

2 years from set/update


Google Analytics

This performance cookie stores where a user came from (eg. search engine, search keyword, link).

6 months from set/update

_ga and _gid

Google Analytics

Used to distinguish between website users in Google Analytics.

2 years and 2 hours

_gat_UA-XXXXXXXX-X (where the Xs are replaced by the Google Analytics ID number)

Google Analytics

Used to moderate calls to the Google Analytics service.

1 minute



Set as part of the ShareThis service and monitors “click-stream” activity, e.g. web pages viewed, navigation from page to page, time spent on each page etc. The ShareThis service only identifies a user if they have separately signed up with ShareThis for a ShareThis account and given them consent. Checks how long you stay on a site: when a visit starts, and ends. It does not contain any personal information and is used only for analytical purposes.

14 months



Stores whether the user has accepted the cookie message or not.

365 days



Used for authenticating a user’s session after logging in. Closes when you exit the browser.

End of session



Tells our infrastructure which server to handle the request.

End of session



A binary flag which stores whether a user is logged in or not.

End of session

ai_session and ai_user


Tracks users as they navigate the website predominately for infrastructure performance insights.

1 day



Keeps track of a donors preference to show their name during a Direct Debit.

End of session



These cookies are managed by DoubleClick, an advertising platform we use to display adverts. They help us identify which visitors to our website have seen or clicked one of our adverts.

2 years from set/update



Identify individual clients behind a shared IP address and apply security settings on a per-client basis

365 days



Links to other websites
Our website may contain links to other websites of interest. However, once you have used these links to leave our site, you should note that we do not have any control over that other website. Therefore, we cannot be responsible for the protection and privacy of any information, which you provide whilst visiting such sites and such sites are not governed by this privacy statement. You should exercise caution and look at the privacy statement applicable to the website in question.

We are also on a number of social media pages. Although this policy covers how we will use any data collected from those pages, it does not cover how the providers of social media websites will use your information. Please ensure you read the privacy policy of the social media website before sharing data and make use of the privacy settings and reporting mechanisms to control how your data is used.


Mailing lists
As part of the registration process for our newsletters, we collect personal information. We use that information to deliver the newsletter (e.g. your email address), to tell you about the services you’ve asked us to tell you about (e.g. opportunities and updates), to contact you if we need to obtain or provide additional information, to check our records are right and to check every now and then that you’re happy and satisfied with our services. We don’t rent or trade email lists with other organisations or businesses.

We use a third-party provider, MailChimp based in the United States, to deliver our newsletter. We gather statistics around email opening and clicks using industry standard technologies to help us monitor and improve our e-newsletter. For more information, please see MailChimp’s privacy notice. You can unsubscribe to general mailings at any time of the day or night by clicking the unsubscribe link at the bottom of any of our emails or by emailing We understand Mailchimp is part of the Privacy Shield which requires them to provide similar protection to personal data shared between the European Economic Area and the US.  For further details, see European Commission: EU-US Privacy Shield.


Access to your personal information
You are entitled to view, amend, or delete the personal information that we hold. Email your request to or by post to Babbasa, Redbrick House, 6 York Court, Wilder Street, Bristol, BS2 8QH

Please also let us know if the personal information that we hold about you needs to be corrected or updated.


Babbasa only processes your personal information in compliance with this Privacy Notice and in accordance with the relevant data protection laws.

If you wish to make a complaint regarding the processing of your personal data or you are unsatisfied with how we have handled your information, you have the right to lodge a complaint with the supervisory authority.

The supervisory authority contact details are:  


Our details are: 

  • Babbasa
  • Address: Redbrick House, 6 York Court, Wilder Street, Bristol, BS2 8QH
  • Telephone: 0117 3290717
  • Email:


We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.

Where you have consented to us using your details for direct marketing, we will keep your data until you notify us otherwise and / or withdraw your consent.