Privacy policy

thebaehq.com is published by Bae HQ. The BAE HQ Impact Ltd is a company limited by guarantee registered in England and Wales, company number 15222824. Registered office: B.04 Clerkenwell Workshops, 27–31 Clerkenwell Close, London EC1R 0AT.

We are registered with the Information Commissioner’s Office under registration number ZB628116.

This policy covers this website, thebaehq.com, and nothing else.

Our community platform at community.thebaehq.com is a separate service with its own privacy policy. If you join the community, register for an event or sign up to anything, that happens there and is covered there. This website links to it, and that is the whole of the relationship between the two.

Only what you send us.

• The contact form. If you use the form on our contact page, we receive your name, your email address, the subject you choose and your message. There are no accounts and no sign-in for visitors to this website.
• Bookings. If you book a recording through one of our invite pages, the details you give Calendly reach us.
• We store nothing on your device. No cookies, no local storage, no session storage. The one exception is our own team's sign-in, described below.
• We run no analytics. There is no Google Analytics, no alternative analytics product, and no advertising or tracking pixel of any kind.

Our team's sign-in. The only cookie this website sets belongs to the private area our own team uses to publish content. It is set only when a team member signs in there, only works on that area, and is never set for or sent by anyone reading the site. It is strictly necessary to keep a team member signed in, so it needs no consent. Team accounts (a work email address, used to email sign-in codes) are held by Supabase, which provides our database and sign-in service and processes that information on our behalf.

This is why there is no cookie banner on this website. There is nothing for you to consent to.

When you send the contact form, your message is delivered to our team inbox by email. We use Resend, an email delivery service, to send it; Resend handles the message only to deliver it to us. The website itself does not store it.

We use what you send to read and reply to your message, and for nothing else. We do not add you to a mailing list. Our lawful basis is legitimate interests: you have asked us to respond.

We keep messages for 12 months after our last reply, then delete them.

Resend is based in the United States, so your message may be processed there. Where it is, it is protected by the safeguards UK data protection law requires for international transfers.

A web page can pass information about you to other companies simply by loading, if it pulls in files from them. This one is built so that it does not.

• Typefaces are downloaded when we build the site and served from our own domain. Your browser never contacts Google to load them.
• Event listings are fetched by our server, not by your browser. The service that holds them never sees your visit.
• Every image, including event cover images, is served from our own domain.

There are no embedded maps anywhere on this website, and no embedded video or audio that starts on its own. The one form, on our contact page, sends nothing until you press send.

The two booking pages we send to invited guests are the exception: each shows a booking calendar from Calendly, which loads with the page.

Each episode page carries a video player, and it loads nothing until you press play. Before that it is a still image served from our own domain: your browser does not contact YouTube, and YouTube is not told you opened the page.

Press play and the video is served by YouTube, which at that point can store things on your device and is covered by their privacy policy rather than this one. That is why there is still no cookie banner here. Nothing is set unless you ask for it, and choosing not to press play is enough to avoid it entirely.

Our About page has one more video, from Loom, which works the same way: nothing loads from Loom until you press play, and after that it is served by Loom and covered by its privacy policy.

If we invite you onto our podcast or onto Bae Watch, the page we send you shows a booking calendar provided by Calendly. It loads as soon as that page opens, so Calendly can see your visit and may store things on your device, as the notice on the calendar explains.

If you book, Calendly processes the details you enter (your name, email address and anything else you add) on our behalf. Calendly is based in the United States, so your details may be processed there, protected by the safeguards UK data protection law requires for international transfers.

The Bae Watch page also shows our latest Bae Watch video, which works like the episode player above: nothing loads from YouTube until you press play.

When you follow a link out of this website, whether to our community platform, to a form we use to send you a report, to the podcast on Spotify or Apple Podcasts, or to one of our social accounts, you leave thebaehq.com and arrive on a service run by someone else.

What those services collect, and what they store on your device, is governed by their own privacy policies and not by this one.

Where we hold personal data about you, UK data protection law gives you the right to ask us for a copy of it, to have it corrected, to have it deleted, to object to how we use it, and to ask us to restrict how we use it.

To make any of those requests, use our contact page.

You also have the right to complain to the Information Commissioner’s Office, the UK’s data protection regulator, at ico.org.uk. You can go to them at any time and you do not have to come to us first.

If this website changes in a way that affects anything above, whether a form, an embedded player or analytics of any kind, we will update this page. The version you are reading is dated 19 September 2026.

Questions about this policy, or about anything else on this website, go to team@thebaehq.com.