Privacy Policy

Last updated: 25th May 2026

This privacy notice covers the following sections:

1. Important information and who we are
2. The data we collect about you
3. How your personal data is collected
4. How we use your personal data
5. Disclosures of your personal data
6. Data security
7. Data retention
8. Your legal rights
9. Contact details
10. Changes to this privacy policy

1. Important information and who we are

Purpose of this privacy notice

It is important that you read this privacy notice. It provides information on how we collect and process your personal data when you use our services, make an enquiry, book a lesson, or sign up as a member. This privacy notice applies to all users of our services, including children, where relevant data is provided by a parent or legal guardian.

Controller

Limitless Martial Arts is responsible for your personal data and acts as the controller. We have appointed a Data Privacy Manager who is responsible for overseeing questions regarding this privacy notice. If you have any questions about this privacy notice, or wish to exercise your legal rights, please contact the Data Privacy Manager using the details below.

Contact details

Limitless Martial Arts - Data Privacy Manager
Email: info@limitlessmartialarts.co.uk
Phone: 07378 351363

You have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). However, we would appreciate the opportunity to address your concerns first, so please contact us.

Your duty to inform us of changes

It is important that the personal data we hold about you is accurate and up to date. Please keep us informed if your personal data changes during your relationship with us.

Third-party links

Our website may include links to third-party websites, plug-ins, and applications. Clicking on those links or enabling connections may allow third parties to collect or share your data. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy notice of every website you visit.

2. The data we collect about you

Personal data, or personal information, refers to any information about an individual from which that person can be identified. It does not include data where the identity has been removed (anonymous data).

We may collect, use, store, and transfer different kinds of personal data about you, grouped as follows:

• Identity Data: first name, last name, title, date of birth, and gender. This also applies to children enrolled in our classes, provided by parents or guardians.
• Contact Data: billing address, email address, and telephone numbers.
• Health Data: relevant health information necessary to ensure safe participation in martial arts training. This is typically collected with consent to ensure appropriate safeguards are in place during training.
• Training Data: class attendance, progress, assessments, and gradings.
• Financial Data: bank account details or payment card details.
• Transaction Data: details about payments you make to us and details of services you have purchased.
• Technical Data: internet protocol (IP) address, browser type and version, time zone setting and location, browser plug-in types and versions, operating system, platform, and other technology on devices used to access our website.
• Profile Data: your username and password, purchases or orders made by you, and your interests and preferences.
• Usage Data: information about how you use our website and services.
• Marketing and Communication Data: your preferences for receiving marketing from us and your communication preferences.

We may also collect, use, and share Aggregated Data such as statistical or demographic data. Aggregated Data may be derived from your personal data but does not directly or indirectly reveal your identity. However, if we combine Aggregated Data with your personal data in a way that could identify you, we treat it as personal data in line with this privacy notice.

Special categories of personal data

We may collect health-related data to ensure the safety and suitability of participants during training. We do not collect any other special categories of personal data, such as race or religious beliefs.

3. How we collect your personal data

Direct interactions

You may provide personal data by filling out forms or corresponding with us by post, phone, email, or otherwise. This includes personal data provided when you:

• Register as a member or enrol your child in classes.
• Book a trial lesson or attend a class.
• Subscribe to our publications or request marketing materials.
• Make a payment or purchase services from us.
• Provide feedback or complete a survey.

Automated technologies or interactions

As you interact with our website, we may automatically collect Technical Data about your equipment, browsing actions, and patterns. We collect this personal data using cookies, server logs, and other similar technologies.

Third parties or publicly available sources

• Technical Data from analytics providers such as Google, and social media platforms like Facebook.
• Contact, Financial, and Transaction Data from providers of payment and delivery services.

Cookies

Our website uses cookies to enhance the user experience and analyse website traffic. You can control your cookie preferences through your browser settings.

4. How we use your personal data

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

• To register you as a member: when you sign up for a class or membership, we process your data to create an account and manage your membership.
• To process payments: we collect and process your financial data to manage payment for services and memberships.
• To provide you with services: managing class bookings, tracking attendance, and monitoring your progress or that of your child.
• To manage our relationship with you: including notifying you of changes to our terms or privacy policy and asking you to leave a review or take part in a survey.
• To ensure health and safety: health data is used to ensure that students can safely participate in classes and to tailor training to individual needs.
• To improve our services: usage data and feedback allow us to improve our classes, services, and customer experience.
• To deliver marketing communications: with your consent, we may send you information about new classes, promotions, and events.
• To administer and protect our business: troubleshooting, data analysis, testing, system maintenance, and hosting data.
• To comply with legal obligations: such as tax reporting.

Legal basis for processing

• Performance of a contract: where we need to process your data to fulfil a contract, such as providing martial arts training services.
• Legitimate interests: managing and growing our business, while making sure your rights are not overridden.
• Consent: for certain marketing activities or for processing health-related data. You can withdraw consent at any time.

5. Disclosures of your personal data

We may share your personal data with third parties for the purposes set out in section 4. We require all third parties to respect the security of your personal data and to treat it in accordance with the law. The third parties we may share your data with include:

• Service providers: IT systems providers, payment processors, and marketing services providers.
• Professional advisers: lawyers, bankers, auditors, and insurers.
• Regulators and other authorities: the ICO, HMRC, and other regulatory authorities.
• Third parties involved in a business transaction: if we sell, transfer, or merge parts of our business.

6. International transfers

We do not transfer your personal data outside the UK or the European Economic Area (EEA). Where we may need to transfer data internationally, we ensure appropriate safeguards are in place, including contracts that require the protection of personal data to the same standard as within the UK, and ensuring service providers comply with UK GDPR. If we do transfer your personal data outside the UK or EEA, you will be informed and you will have the right to ask about the safeguards used to protect your data.

7. Data security

• Access control: only employees, contractors, and third parties who have a legitimate business need are allowed access to your personal data.
• Security protocols: we use encryption, firewalls, and secure servers to protect the data we store electronically.
• Regular reviews: we regularly test and update our security measures.
• Breach response: in the unlikely event of a data breach, we have procedures in place and will notify you and any applicable regulator where legally required.

While we strive to protect your personal data, no method of transmission over the internet or method of electronic storage is 100% secure, and we cannot guarantee absolute security.

8. Data retention

We will only retain your personal data for as long as necessary to fulfil the purposes for which we collected it, including to satisfy any legal, accounting, or reporting requirements.

• Membership and contact data: retained for the duration of your membership and up to 7 years after your relationship with us ends.
• Financial data: retained for 7 years to meet accounting requirements.
• Health and training data: retained for the duration of the membership and only as long as necessary to ensure safety in training.

In some cases, we may anonymise your personal data for research or statistical purposes, in which case we may use this information indefinitely without further notice to you.

9. Your legal rights

• Right to access the personal data we hold about you.
• Right to correction of any incomplete or inaccurate data.
• Right to erasure ("right to be forgotten") where there is no good reason for us to continue processing it.
• Right to object to processing based on legitimate interests.
• Right to restrict processing in certain situations.
• Right to data portability in a structured, commonly used, machine-readable format.
• Right to withdraw consent at any time, where processing is based on consent.

To exercise any of these rights, contact us at info@limitlessmartialarts.co.uk. You will not have to pay a fee, but we may charge a reasonable fee if your request is unfounded, repetitive, or excessive.

10. Contact details

• Data Privacy Manager: Limitless Martial Arts
• Email: info@limitlessmartialarts.co.uk
• Telephone: 07378 351363

You have the right to make a complaint to the Information Commissioner's Office (ICO) at www.ico.org.uk, but please contact us first.

11. Changes to this privacy policy

We may update this privacy notice from time to time. Any updates will be posted on this page, and where appropriate, notified to you by email.

12. Glossary

Personal Data - any information relating to an identified or identifiable individual.

Controller - the organisation (Limitless Martial Arts) that determines the purposes and means of processing personal data.

Processor - a third party who processes personal data on behalf of the controller.

Legitimate Interest - the interest of our business in conducting and managing our services.

Consent - clear permission for us to process your personal data for a specific purpose.

Performance of Contract - processing necessary for a contract you are party to.

Comply with a Legal Obligation - processing necessary for compliance with a legal or regulatory obligation.

External Third Parties - service providers, professional advisors, and regulatory bodies.