Last updated 22 September 2026.
This page explains what we collect, both through the forms on this site and from students taking part in the programme, why we collect it, who sees it and how long we keep it. It is written to be read, not to be survived.
Youth Startups is a programme run by The Bae HQ Impact Ltd, a not-for-profit company limited by guarantee, company number 15222824, registered at B.04 Clerkenwell Workshops, 27-31 Clerkenwell Close, London EC1R 0AT. We are the data controller for everything described here.
You can reach us at team@thebaehq.com.
If you are a student telling us about your school, we ask about the school and about your head of sixth form, and nothing about you. The email we then give you to send is yours to send from your own account. We never see it.
We do hold records about students who take part in the programme. That is a separate thing from these forms, and it is described under If you are on the programme below.
There are three forms on this site. Each one collects only what the person filling it in has typed.
A student at your school may have given us your name and work email address so that we could get in touch about the programme. That is professional contact information, and it is usually published on your school's own sixth form page.
When we first email you we say plainly that a student at your school asked us to get in touch. If you would rather we did not hold your details, reply and say so, and we will delete them.
Students who take part get an account on this site. You never make one yourself: we create it from the list your school sends us, and you sign in with a link or a code we email you. There is no password.
What we hold about you: your name, email address, phone number if you gave one, your school and school year, your age when you applied, which cohort and team you are in, and the pitch deck your team submits. Your parent or carer's name and contact details, an emergency contact, the consent forms they signed, and anything you told us about access needs or what you want to do after sixth form.
What other students can see: your first and last name and which team you are in. Not your email address, your phone number, your school, your year or your age. That is enforced by the database itself, not by us remembering to hide it.
What your parent's details are for: being able to reach someone if something happens during the week, and having a record that they agreed to you taking part. Only the Youth Startups team can see them. You cannot see them on the site yourself, and neither can anyone else on the programme.
Your pitch deck is stored privately. Your team and the Youth Startups team can open it through the site. It is not published and it has no public address.
How long we keep it. Your parent's contact details, the emergency contact, the consent records and your age are deleted automatically one year after your cohort finishes, whether or not you ask. Those are your parent's details rather than yours, we hold them because we are responsible for you during the programme, and that responsibility ends when the programme does.
Your account, the sessions and your team's work have no end date, and we would rather say that plainly than invent one. They stay so you can come back to the material years later, which is the point of having an account at all. Ask us and we delete them.
Bae HQ is a separate thing. The founder community is for over 18s and runs on its own system. Nothing about you is sent there. If you join it when you are old enough, you sign up yourself and it is a different account.
Asking us to delete it. There is a button on your account page on this site, or you can email us. We reply first rather than deleting on the spot, so you know what will happen before it does.
The one thing we cannot delete is your team's pitch deck. It is work the whole team made, and we cannot edit what is inside a file one of you uploaded. It stays with the team, and we take your name off our record of who submitted it.
If you are a parent or carer and want to know what we hold about your child, or want it deleted, email team@thebaehq.com.
We hold it to reply to you, to decide whether we can work with your school, and to match speakers to schools and to cohort weeks. Our lawful basis is legitimate interests: running a free programme for sixth formers, and being able to answer the people who contact us about it.
For students on the programme, we hold what we need to run the week and to look after you while it runs: who is in which team, what your team submitted, and how to reach someone in an emergency. Our lawful basis for that is legitimate interests, the same as above: running a free programme for sixth formers and being responsible for the people on it. It is not consent, because you should not lose your place on the programme by withdrawing agreement to us knowing who your emergency contact is.
Two things are different. Photographs rest on your parent or carer's consent, given on the form, and that can be withdrawn at any time by telling us. Access needs, where you have told us about them, are health information, which the law treats more carefully: we hold that on the basis of your and your parent's explicit agreement, we use it to make the week work for you, and it is deleted with the rest of the safeguarding record.
We do not use any of it for advertising. We do not profile anyone. We do not make automated decisions about anyone. Nothing about a student is sold, shared with the Bae HQ membership, or used to train anything.
The Youth Startups team, and nobody else. Every submission is emailed to team@thebaehq.com and stored in a database we run for this site alone, hosted in Ireland by Supabase. Email is sent through Resend. Those two companies process the data for us and do nothing else with it.
The database is separate from every other system Bae HQ runs. Nothing on this site is shared with the wider Bae HQ membership.
Form submissions: twenty-four months from the last time we were in contact. After that, if a school lead went nowhere or a supporter never spoke, we delete it.
Programme records follow the two rules set out above: the student keeps their account and their own work, and the safeguarding records go a year after the cohort ends.
If we are working with you, the clock restarts each time we speak, because the information is still doing a job.
The public pages of this site set no cookies. There is no analytics, no tracking and no advertising. Signing in, whether as a student or as our own team, sets a cookie that keeps you signed in. That is the only cookie this site uses.
You can ask us for a copy of what we hold about you, ask us to correct it, ask us to delete it, or object to us holding it at all. Email team@thebaehq.com and say which. We will reply within one month, and usually within a week.
There is no delete button. Amardeep does it by hand when you ask. The one thing that is automatic is the safeguarding record described above, which a scheduled job deletes a year after a cohort ends without anyone having to remember.
If you are unhappy with how we have handled your information you can complain to the Information Commissioner's Office at ico.org.uk, or call 0303 123 1113. We would rather you told us first so we can put it right.
If we change what we collect or what we do with it, we will change this page and update the date at the top.