Last updated: 19th May 2025
Who We Are
Peckham Krav Maga is the data controller responsible for your personal data under this Privacy Policy. If you have any questions or concerns, please contact us via our Contact page.
1. Information We Collect
We may collect the following personal information when you interact with us online or in person:
- Your name, email address, phone number, and general location (e.g. postcode or borough)
- Emergency contact details (if provided)
- Any health-related information you voluntarily provide for your safety in class
- Photos or videos taken during classes or events (see Section 6)
- Technical data such as IP address, browser type, and page visit duration
2. Legal Basis for Processing
We process your personal data under one or more of the following lawful bases:
- Consent – where you’ve given us permission (e.g. marketing opt-ins)
- Contract – to deliver our services (e.g. class registrations)
- Legal obligation – when required to comply with the law
- Legitimate interests – to operate, improve, and protect our business
3. How We Use Your Information
We use your personal information to:
- Manage class bookings, memberships and attendance
- Communicate about sessions, changes or emergencies
- Send marketing communications (only with your consent)
- Improve our services and website
- Ensure participant safety and wellbeing during training
We do not sell, rent or share your personal data with third parties for marketing purposes.
4. Third-Party Data Sharing & Transfers
We may use trusted third-party services, such as email systems (e.g., Mailchimp), booking tools, insurance (IMASA) and analytics platforms. These providers are contractually required to protect your data and comply with applicable data protection laws. Some services, such as Mailchimp for email communications, may transfer data to the US under ICO-approved Standard Contractual Clauses to ensure GDPR compliance.
5. How Long We Keep Your Data
We keep your personal data for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting or insurance obligations. This typically means:
- Membership and attendance records are kept for up to 3 years after your last class to support service improvement, monitor engagement, and respond to any future queries.
- Payment and invoicing data is retained for 7 years to comply with tax laws.
- Email marketing consent is retained until you unsubscribe or request deletion.
- Accident or incident reports, where applicable, may be stored for up to 7 years for insurance purposes.
After these periods, your data is securely deleted or anonymised.
6. Photos and Media Consent
We occasionally take photos or videos during classes for promotional use on our website, social media, or other marketing platforms.
If you prefer not to appear in any media, please let us know at the start of the session and we will respect your preference.
7. Cookies & Website Usage
We use cookies to improve your browsing experience and analyse website traffic. These may include anonymised analytics data such as IP address, browser type and session duration.
You can control or disable cookies through your browser settings, although some site features may not work correctly as a result.
8. Marketing Communications
We will only send you marketing messages (e.g. upcoming events or offers) if you have opted in. You can withdraw consent at any time by clicking “unsubscribe” in emails or by contacting us directly.
9. How We Store Your Data
We take reasonable steps to secure your personal information from loss, misuse, or unauthorised access. Your data is stored on password-protected systems and only accessible to authorised personnel.
10. Your Rights Under UK GDPR
You have the right to:
- Access the personal data we hold about you
- Correct or update inaccurate data
- Withdraw consent for processing
- Request deletion of your data
To exercise any of these rights, please contact us via our Contact page.
11. Your Right to Complain
If you’re unhappy with how we handle your data, you have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO):
https://ico.org.uk/make-a-complaint/
12. Children’s Privacy
We only collect limited personal data from individuals under 18 years of age (e.g., name, age, emergency contact) for insurance and class management, with verified parental or guardian consent, due to the physical and safety requirements of martial arts training.
13. Changes to This Policy
We may occasionally update this policy to reflect legal or operational changes. The latest version will always be available here on our website.
14. Contact Us
For any questions about this policy or your data, please contact us via our Contact page.