Last updated 4 June 2026
ZR Team Northampton respects your privacy and is committed to protecting your personal data. This policy explains what information we collect, how we use it and the rights you have under UK data protection law.
Who we are
ZR Team Northampton, based at Unit E-7, KG House, Kingsfield Way, Northampton NN5 7QS, is the data controller for the personal data described in this policy. You can reach our data protection contact at help@brazillianjiujitsu.com.
Information we collect
We only collect the information we need to run the academy and provide our classes.
- Contact details, such as your name, email address and phone number.
- Member and child details, including date of birth and emergency contacts.
- Health information you choose to share, such as injuries relevant to training.
- Booking, attendance and grading records.
- Payment information, processed securely by our payment provider.
- Technical data, such as how you use our booking app.
How we use your data
We use your personal data to deliver and improve our service. Our lawful bases include contract, legitimate interests, consent and legal obligation.
- To manage memberships, bookings, attendance and gradings.
- To contact you about classes, changes and important updates.
- To keep members safe and meet our safeguarding duties.
- To take payments and keep accurate financial records.
- To send marketing only where you have given consent, which you can withdraw at any time.
Member contact and training safety form
Our member form records your address, contact details, whose email address is used, an emergency contact and three brief training safety questions. Contact information supports membership administration; emergency contacts support safe training and emergency arrangements. Updating a contact email does not change your sign-in email or establish who pays for a membership.
Online health answers are optional and processed only with explicit consent (UK GDPR Articles 6(1)(a) and 9(2)(a)). You can choose a private conversation instead. Only the academy owner can review these records; members and linked guardians can access their own family's submissions. They are stored separately from payment and marketing records using our hosted app and database providers, Vercel and Supabase. No health details appear in emails or CRM exports.
You may update your declaration or withdraw online health consent in your member account. Withdrawal removes stored online health answers; answers older than 12 months are removed during daily maintenance and flagged for a private review. Provider backups expire under their normal retention cycle. Parents or authorised guardians complete a separate declaration for each linked child. These are safety declarations, not medical clearance, and answers do not automatically restrict bookings. Contact help@brazillianjiujitsu.com for access, correction or deletion requests.
Children's data
We collect children's data only with the consent of a parent or carer. We keep this information to a minimum and protect it carefully. Parents can access or update their child's details through us at any time.
How long we keep data
We keep personal data only for as long as we need it. We retain membership and financial records for the periods required by law, and we securely delete or anonymise data once it is no longer needed.
Sharing your data
We never sell your data. We share it only with trusted providers who help us run the academy, such as our booking, payment and email systems, and only where there is a clear need. We may also share data where the law requires it or to protect someone at risk.
Your rights
Under UK GDPR and the Data Protection Act 2018 you have strong rights over your personal data.
- The right to be informed about how we use your data.
- The right to access the data we hold about you.
- The right to rectification if your data is wrong or incomplete.
- The right to erasure in certain circumstances.
- The right to restrict or object to processing.
- The right to data portability.
- The right to withdraw consent at any time.
To exercise any of these rights, please email help@brazillianjiujitsu.com. We will respond within one month.
Keeping your data secure
We use appropriate technical and organisational measures to protect your data, including secure databases, access controls and encryption where appropriate.
Complaints
If you are unhappy with how we handle your data, please contact us first so we can put things right. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.
Review and contact
We review this policy regularly to keep it accurate and compliant. This policy was last reviewed on 4 June 2026. We welcome questions and feedback at any time.