Privacy Policy

1. Overview

At Carlson Gracie Blackburn & Clitheroe, we are committed to protecting your privacy and ensuring that your personal data is handled in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit our website, attend our classes, or interact with our services.

2. Data Controller

Carlson Gracie Blackburn & Clitheroe is the data controller for your personal information.

3. Information We Collect

Personal Information You Provide:

• Name and contact details (email, phone number, address)
• Date of birth and age
• Emergency contact information
• Medical information relevant to training (health conditions, injuries)
• Payment and billing information
• Training history and progress records
• Communications with us (emails, messages, feedback)

Information We Collect Automatically:

• Website usage data (pages visited, time spent, browser type)
• IP address and location data
• Device and browser information
• Cookies and similar tracking technologies

4. How We Use Your Information

We use your personal information for the following purposes:

Service Provision:

• Providing Brazilian Jiu-Jitsu classes and training
• Managing memberships and class bookings
• Processing payments and maintaining financial records
• Ensuring safety and appropriate training programmes

Communication:

• Responding to enquiries and providing customer support
• Sending class schedules, updates, and important notices
• Marketing communications (with your consent)

Legal and Safety Requirements:

• Complying with legal obligations
• Safeguarding and child protection (where applicable)
• Health and safety monitoring
• Insurance purposes

5. Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Contract: To fulfil our contract with you for providing training services
• Legitimate Interests: For business operations, safety, and improving our services
• Consent: For marketing communications and non-essential cookies
• Legal Obligation: To comply with legal requirements (e.g., safeguarding, health and safety)

6. Sharing Your Information

We may share your personal information with:

• Service Providers: Payment processors, IT support, website hosting
• Insurance Companies: For coverage and claims purposes
• Governing Bodies: Brazilian Jiu-Jitsu organisations for grading and certification
• Legal Authorities: When required by law or to protect safety
• Emergency Contacts: In case of medical emergencies

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

7. Data Retention

We retain your personal data for as long as necessary to:

• Provide our services to you
• Comply with legal obligations
• Resolve disputes and enforce agreements

Typically, we retain member data for 7 years after membership ends, and financial records for 6 years in accordance with HMRC requirements.

8. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

To exercise any of these rights, please contact us using the details provided in Section 13. We will respond within one month of receiving your request.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe we have not handled your data appropriately. Visit ico.org.uk for more information.

9. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to enhance your browsing experience. We categorise cookies as follows:

You can manage your cookie preferences through our cookie banner or by adjusting your browser settings. Manage Cookie Preferences

10. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• Secure servers and encrypted data transmission
• Regular security assessments and updates
• Access controls and staff training
• Secure payment processing systems
• Regular data backups and recovery procedures

11. International Data Transfers

We primarily process your data within the UK. However, some of our service providers may be located outside the UK. When we transfer data internationally, we ensure adequate protection through:

• Adequacy decisions by the UK government
• Standard contractual clauses
• Binding corporate rules
• Certification schemes

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any significant changes by:

• Posting the updated policy on our website
• Sending email notifications to members
• Displaying notices at our training facilities

The date of the last update is shown at the top of this policy.

13. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us: