Privacy Policy

Privacy Policy

Introduction Range Martial Arts Academy (“we”, “our”, “us”) is committed to protecting your privacy and complying with applicable data protection laws in the United Kingdom, including the UK GDPR and the Data Protection Act 2018. This Privacy Policy explains how we collect, use, share, and protect personal data when you visit our website, interact with our services, or engage with us in-person. By using our website or services you consent to the practices described in this policy.

Controller Range Martial Arts Academy Stroud, Gloucestershire (If you are a data subject with questions about this policy or your personal data, contact details are below.)

Personal data we collect We collect personal data you provide directly and certain information automatically when you use our website.

Data you provide directly

  • Contact information: name, email address, phone number, address.

  • Account details: username, password, profile information.

  • Booking and membership information: class bookings, membership plans, attendance records.

  • Payment information: card details are processed by our third-party payment processor via Gymdesk; we may store payment-related metadata and billing addresses where necessary.

  • Health and medical information: medical conditions, injuries, emergency contact details and other health information relevant to safe participation in martial arts classes.

  • Communications: information included in messages, emails, feedback, enquiries, and support requests.

  • Marketing preferences and consent choices.

Data collected automatically

  • Usage data: IP address, device type, browser, pages visited, time and date of access, referral source, and interaction data.

  • Cookies and similar technologies: see the “Cookies and similar technologies” section below.

Special category data We may process health and medical information necessary to provide safe training and fulfil contractual obligations. This is treated as special category data under UK GDPR and will be processed only where lawful and with appropriate safeguards.

How we use your personal data We use personal data for the following purposes:

  • To provide services: manage class bookings, memberships, payments, attendance tracking, and to deliver training and coaching.

  • To communicate: respond to enquiries, send confirmations, reminders, notices about classes, scheduling changes and other service-related communications.

  • To process payments and prevent fraud: process transactions, issue invoices and receipts, and verify payment details.

  • To comply with legal obligations: maintain records required by law, respond to law enforcement or legal requests.

  • To manage health and safety: use medical/health information to provide reasonable adjustments and ensure participant safety.

  • To improve our services: analyze usage patterns, maintain and improve our website and offerings.

  • Marketing and promotions: send news, offers and promotions where you have consented or where we have another lawful basis. You can opt-out at any time.

Legal bases for processing (UK GDPR) We rely on the following legal bases for processing personal data:

  • Performance of a contract: to fulfil our contract with you (e.g., membership and booking services).

  • Consent: where you have given clear consent for a specific purpose (e.g., marketing communications).

  • Legitimate interests: for purposes such as fraud prevention, client relationship management, service improvement and administration, where these do not override your rights and freedoms.

  • Legal obligation: to comply with statutory or regulatory requirements.

  • Vital interests / public interest: in rare cases where processing is necessary to protect someone’s life or for public health reasons.

Third parties and sharing your data We share personal data with the following categories of third parties:

  • Gymdesk: We use Gymdesk as our third-party booking and payment management platform. Gymdesk processes booking data, membership details and payment transactions on our behalf. Gymdesk is a data processor for these purposes — they process data according to our instructions and their privacy terms.

  • Payment processors and banks: to process card and other payments (as facilitated by Gymdesk or other payment providers).

  • Professional advisors: accountants, auditors, lawyers and other professional advisors where required to manage our business.

  • Emergency services and medical professionals: where necessary for health and safety.

  • Law enforcement and regulators: to comply with legal requests or obligations.

  • IT service providers and cloud hosts: providers that support our website, storage, email and other IT systems.

We do not sell your personal data.

International transfers Personal data processed by Gymdesk or other providers may be transferred outside the UK. Where transfers occur, we ensure they are subject to appropriate safeguards such as adequacy decisions, standard contractual clauses, or other lawful transfer mechanisms permitted under UK law.

Cookies and similar technologies We use cookies and similar technologies to operate the website, enable essential features, and analyze site usage. Types of cookies include:

  • Strictly necessary cookies: required for core functionality.

  • Performance and analytics cookies: help us understand how visitors use the site and improve it.

  • Functional cookies: remember user preferences.

  • Marketing cookies: track browsing across websites to