Your Rights Under GDPR.
UK and EU data protection law gives you powerful rights over your personal data. This page explains every right, how to exercise it, and what to expect from us — clearly and without legal jargon.
Your Seven Rights
Every right you hold under UK and EU GDPR — and exactly how to exercise each one.
Right to Access
Request a complete copy of all personal data we hold about you.
You have the right to know exactly what data we hold, why we hold it, how long we will keep it, and who we have shared it with. We will provide a structured copy within 30 days of your request at no charge.
Right to Rectification
Correct inaccurate or incomplete personal data.
If any data we hold about you is inaccurate or incomplete, you have the right to have it corrected. You can update most data directly from your profile settings. For data you cannot update yourself, contact us.
Right to Erasure
Request permanent deletion of your personal data.
You have the right to request that we permanently delete all personally identifiable data we hold about you. This "right to be forgotten" applies unless we are required to retain data for legal or regulatory compliance. Deletion is completed within 30 days.
Right to Data Portability
Export your data in a structured, machine-readable format.
You can export all your BaobabPact data — profile, applications, messages, and settings — in a JSON or CSV format that you can import into other services. Exports are prepared within 48 hours.
Right to Restriction
Limit how we process your personal data.
If you believe our processing is unlawful or inaccurate, you can request that we restrict processing while a dispute is resolved. Your data will not be deleted but will not be actively processed during the restriction period.
Right to Object
Object to processing based on legitimate interests.
You have the right to object to processing we conduct under legitimate interests — such as using your anonymised data to improve our AI models. We will stop unless we can demonstrate compelling legitimate grounds.
Withdraw Consent
Withdraw consent for optional processing at any time.
For processing based on your consent — such as marketing emails or analytics cookies — you can withdraw consent at any time with immediate effect. Withdrawal does not affect the lawfulness of processing before withdrawal.
Submit a Data Request
Submit any GDPR request using this form. We verify your identity before processing and respond within 30 days.
- Response within 30 days (legally required)
- Identity verified before data is shared
- Confirmation sent by email at every stage
- No charge for standard requests
Cookie Management
We use only three types of cookies. You can disable non-essential cookies at any time.
Essential Cookies
RequiredLogin sessions, security tokens, fraud prevention
Retained: Session / 30 days
Analytics Cookies
Anonymised usage data to improve platform performance
Retained: 12 months
Preferences Cookies
UI settings, language, and display preferences
Retained: 12 months
Cookie preferences are stored locally and re-applied on each visit. Changes take effect immediately.
Data Protection Officer
Name: Data Protection Team, BaobabPact Ltd
Email: privacy@baobabpact.com
Address: 100 Finsbury Pavement, London EC2A 1RS
ICO Reg: ZA123456
Response SLA: 30 days
Supervisory Authority
If you are unsatisfied with our response to a data rights request, you have the right to complain to your supervisory authority.
UK: Information Commissioner's Office (ICO)
Website: ico.org.uk
Helpline: 0303 123 1113
EU users: Your national DPA
GDPR FAQ
Ready to exercise your rights?
Submit a request above, manage your account directly, or contact our DPO. We treat every data rights request with full legal seriousness and human care.