​

Effective Date: 31 July 2026
 

Charity Entrepreneurship, a Charitable Incorporated Organisation registered in England and Wales (charity number 1195850), trading as Ambitious Impact ("we", "us", "our"), operates the charityentrepreneurship.com website and our programmes, including the Charity Entrepreneurship Incubation Program. We are the controller of the personal data described in this notice.

​

This notice explains what personal data we collect, how and why we use it, who we share it with, how long we keep it, and your rights. It applies to people who apply to our programmes, subscribe to our newsletters or updates, use our recruitment services, visit our website, or otherwise contact us. Separate notices cover how we handle personal data for donors and for our staff and contractors; contact us if you need one of those. If you have any questions, contact us at contact@charityentrepreneurship.com or by post at 52 Old Castle Street, London, E1 7AJ, United Kingdom.
 

The personal data we collect

Depending on how you interact with us, the personal data we collect may include, but is not limited to:

• Your name and contact details (email address, and where relevant postal address and telephone number).

• Information about your career background, experience, qualifications, interests, and goals.

• Your application answers, including free-text responses.

• Information you provide at later stages of our selection process, such as test task submissions and interview responses.

• References, including information your referees provide about your conduct, background, and suitability, and where relevant right-to-work documentation.

• Demographic information such as country of residence, nationality, university affiliation, and age.

• If you are offered a place and become a participant, we process further data under a separate participant privacy notice provided with your participant agreement.

• If you use our recruitment matching service, information relevant to matching you with roles, such as your work experience, availability, and preferences.

• Usage and cookie data when you visit our website, such as your IP address, browser type, the pages you view, and the time and date of your visit (see "Website use, cookies and analytics").
   

We may also collect other information you choose to provide, or that is relevant to your relationship with us.

​

Special category data

We do not ask you to provide special category data (data revealing racial or ethnic origin, religious or philosophical beliefs, political opinions, trade union membership, health, sex life or sexual orientation, or genetic or biometric data) except where a specific question calls for it.

​

Where we process special category data as part of assessing your application, we rely on a condition under Article 9 of the UK GDPR and, where applicable, Schedule 1 to the Data Protection Act 2018, not on your consent. Some questions, including at interview and later stages, may involve your views and values, and your answers may include special category data such as philosophical beliefs. We assess the substance of your answers, not whether you hold any particular belief.
 

Information about criminal convictions and offences

During the final stage of the application process we may request references. A referee may occasionally provide information relating to a criminal conviction, allegation or related proceeding. We do not routinely ask referees for this information and will only use it where it is relevant and necessary for our selection process. If we receive this information, we will only process it where permitted by data protection law and where it is relevant and necessary for our selection process.
 

How we use your data, and our legal bases

We use your personal data for purposes including:

• Assessing your application and deciding whether to take it forward. Our bases are our legitimate interests in assessing and selecting applicants, and taking steps at your request before entering into an agreement.

• Contacting you about your application and our programmes.

• Understanding and improving our programmes and our selection process, and assessing our social impact. This includes longitudinal research into which applicant and founding-team characteristics are associated with successful charities. Our basis is our legitimate interests, and we apply the safeguards required for research and statistical processing.

• Complying with our legal obligations where applicable, for example right-to-work checks. Our basis is legal obligation.

• Sending you newsletters or updates where you have asked to receive them. Our basis is your consent, which you can withdraw at any time via the unsubscribe link in any email.

​

We will only use your data for a new purpose where it is compatible with the one we collected it for, or where we have a lawful basis to do so. Where we rely on legitimate interests, we have considered that these are not overridden by your interests or rights.
 

Automated decision-making

Some applications are declined automatically, based on scoring against a pre-set marking scheme, without a person reviewing them individually. We make these decisions because they are necessary to decide whether to take an application forward. We also use AI tools to support our team's review of written answers and to check for AI-generated text.
 

Where a decision is made solely by automated means, you can ask for a person to review it, share anything you would like us to take into account, and contest the outcome. Contact candidates@charityentrepreneurship.com, and we will explain how when we notify you of the outcome.
 

Information about other people

If you give us the details of another person (for example when you refer someone, or name someone who told you about us), please make sure they are happy for you to share their information with us. Where we contact that person, we will provide them with a privacy notice explaining how we use their data and their rights.
 

Who we share your data with

We share personal data with service providers who process it on our behalf, only for the purposes in this notice: Tally, Airtable, Impact Operations Limited, Make.com, Google Workspace, Anthropic (Claude), Pangram, and Mailchimp. For later stage applicants, we also use Hireflix, Zoom, Fathom and Jotform.

We may also share your data where necessary to comply with a legal obligation, or to establish, exercise, or defend legal claims.
 

If you use our recruitment matching service, we may share your details with organisations we work with (including charities started through our Incubation Program) where we think you may be a good fit for a role, so they can consider you. We do this on the basis of your consent, and only to recommend you positively. 
 

International transfers

Some of our service providers process data outside the United Kingdom. Where we transfer your personal data outside the UK, we ensure an appropriate safeguard is in place, such as UK adequacy regulations or the UK International Data Transfer Agreement (or the UK addendum to the EU Standard Contractual Clauses). 
 

How long we keep your data

We keep your personal data only for as long as necessary for the purposes in this notice, and to meet our legal obligations. Where we keep data under this section our basis is our legitimate interests, unless stated otherwise. In particular:

• While your application is active, we keep your data to assess it and to communicate with you about it.

• After a decision, we keep your application record, including your name, for up to 6 years. During this time we may use it to respond to a request to review or contest an automated decision, to handle any question, complaint, or legal claim about your application, and to consider you if you apply again.

• For research and evaluation, we keep applications for the longer term to study which applicant and founding-team characteristics are associated with successful charities, and to improve our selection process. We hold this data under the research and statistical purposes provisions of UK data protection law, for as long as it is needed for that purpose, subject to regular review, and we apply appropriate safeguards, including restricting access to it.

• Where the law requires us to keep certain records (for example right-to-work checks), we keep them for as long as we are required to.

• If you subscribe to our newsletters or updates, we keep your contact details until you unsubscribe.

• If you ask to be considered for roles through our recruitment matching service, we keep your details until you ask us to stop.

• Website usage data we keep for a shorter period, as needed for analytics, security, and site functionality.
   

If you are offered a place and become a participant, your data is retained under the separate participant privacy notice provided with your participant agreement.
 

Your rights

Under UK data protection law you have the right to: access the personal data we hold about you; have inaccurate data corrected; have your data erased in certain circumstances; restrict or object to our processing in certain circumstances; data portability; and, where we rely on consent, to withdraw it at any time. You also have the rights in relation to automated decisions described above.

To exercise any of these rights, contact us at contact@charityentrepreneurship.com. We may ask you to verify your identity first.
 

You can raise a concern about how we use your personal data by contacting us at contact@charityentrepreneurship.com. We will acknowledge your complaint within 30 days and respond without undue delay. You may also complain to the Information Commissioner's Office (ICO) at ico.org.uk, and if you are in the EU or EEA, to your local supervisory authority.
 

Website use, cookies and analytics

When you visit our website we collect usage data (such as your IP address, browser, and the pages you view) and use cookies and similar technologies to operate the site, remember your preferences, and understand how it is used. You can control cookies through your browser settings.
 

Security

We use appropriate physical, technical, and organisational measures to protect your personal data. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
 

Children

Our services are not directed at anyone under 18, and we do not knowingly collect their personal data.
 

Changes to this notice

We may update this notice from time to time. We will post any changes on our website and update the effective date above.
 

Contact us

For any questions about this notice or your data, contact us at contact@charityentrepreneurship.com, or by post at 52 Old Castle Street, London, E1 7AJ, United Kingdom.