Privacy Policy

This privacy policy explains how Combat Jujutsu Bristol ("we", "us", or "our") collects, uses, shares, and protects your personal information when you visit our website at https://combatjujutsu.co.uk or interact with our services.

We are committed to protecting your privacy and ensuring that your personal data is handled in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Data Controller

Combat Jujutsu Bristol is the data controller responsible for your personal data. If you have any questions about this privacy policy or our data practices, please contact us at:

• Email: contact@combatjujutsu.co.uk
• Phone: 07544 499343
• Address: Impact Gym, Hayward Rd, Bristol BS16 4NY

2. Information We Collect

We collect information in the following ways:

2.1 Information You Provide

When you fill out our contact form or free trial request form, we collect:

• Your name
• Phone number
• Email address

2.2 Information Collected Automatically

When you visit our website, we automatically collect certain information through cookies and similar technologies, including:

• IP address (anonymised where possible)
• Browser type and version
• Device type and operating system
• Pages visited and time spent on our website
• Referring website or source
• Geographic location (country/city level)
• Interactions with our website (clicks, scrolls, form submissions)

3. How We Use Your Information

We use your personal information for the following purposes:

3.1 To Provide Our Services

• Responding to your enquiries and contact form submissions
• Processing free trial class requests
• Sending confirmation emails for your bookings
• Contacting you about your membership or classes

3.2 Marketing and Advertising

• Delivering targeted advertisements on Meta (Facebook/Instagram) and Google platforms
• Measuring the effectiveness of our advertising campaigns
• Creating custom and lookalike audiences for advertising purposes
• Sending promotional communications (only with your consent)

3.3 Website Analytics and Improvement

• Understanding how visitors use our website
• Analysing website performance and user behaviour
• Improving our website content and user experience
• Identifying and fixing technical issues

4. Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Consent: For marketing cookies and promotional communications. You can withdraw consent at any time.
• Legitimate Interests: For website analytics, security, and improving our services, where these interests do not override your rights.
• Contract Performance: To process your class bookings and membership requests.
• Legal Obligation: Where we are required to retain or share data by law.

5. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies. Below is a detailed explanation of the tracking services we use:

5.1 Google Tag Manager

We use Google Tag Manager to manage and deploy marketing tags (snippets of code) on our website. Google Tag Manager itself does not collect personal data, but it enables other tags that may collect data.

5.2 Google Analytics 4 (GA4)

We use Google Analytics 4 to analyse website traffic and user behaviour. GA4 collects:

• Page views and session duration
• User interactions (clicks, scrolls, video plays)
• Device and browser information
• Geographic location (country/city)
• Traffic sources and referrals

Google Analytics uses cookies to distinguish unique users. We have configured GA4 to anonymise IP addresses where possible. Data is processed by Google LLC in accordance with their Privacy Policy.

5.3 Google Ads

We use Google Ads conversion tracking and remarketing to:

• Measure the effectiveness of our advertising campaigns
• Show you relevant advertisements on Google's advertising network
• Create remarketing audiences to reach users who have previously visited our website

You can opt out of personalised advertising by visiting Google Ads Settings.

5.4 Meta Pixel (Facebook/Instagram)

We use the Meta Pixel to:

• Track conversions from Meta advertisements
• Build targeted audiences for future advertising
• Show you relevant advertisements on Facebook and Instagram
• Measure the effectiveness of our social media advertising

The Meta Pixel collects data about your browsing behaviour on our website and sends it to Meta Platforms, Inc. You can manage your Meta advertising preferences at Facebook Ad Preferences.

5.5 Managing Cookies

You can control cookies through your browser settings. Most browsers allow you to:

• View what cookies are stored and delete them individually
• Block third-party cookies
• Block all cookies from specific sites
• Block all cookies from being set
• Delete all cookies when you close your browser

Please note that blocking or deleting cookies may affect the functionality of our website and limit your experience.

6. Third-Party Service Providers

We share your data with the following third-party service providers who process data on our behalf:

6.1 Cloudflare (Website Hosting)

Our website is hosted on Cloudflare Pages. Cloudflare processes data to deliver our website content, provide security features, and protect against malicious traffic. Cloudflare may collect IP addresses and other technical data. For more information, see Cloudflare's Privacy Policy.

6.2 Resend (Transactional Emails)

We use Resend to send transactional emails, including confirmation emails when you submit a contact form or free trial request. Resend processes your name and email address to deliver these emails. For more information, see Resend's Privacy Policy.

6.3 Chemicloud (Email Hosting)

Our business email is hosted by Chemicloud. When you email us directly, your communications are stored on Chemicloud's servers. For more information, see Chemicloud's Privacy Policy.

6.4 Google (Analytics and Advertising)

Google processes data through Google Analytics 4 and Google Ads as described above. Google may transfer data to the United States. For more information, see Google's Privacy Policy.

6.5 Meta Platforms (Advertising)

Meta processes data through the Meta Pixel as described above. Meta may transfer data to the United States. For more information, see Meta's Privacy Policy.

7. International Data Transfers

Some of our third-party service providers are based outside the UK and European Economic Area (EEA), including in the United States. When we transfer your data internationally, we ensure appropriate safeguards are in place, such as:

• Standard Contractual Clauses approved by the UK Information Commissioner's Office
• The service provider's participation in recognised data protection frameworks
• Other legally recognised transfer mechanisms

8. Data Retention

We retain your personal data for the following periods:

• Contact form submissions: 3 years from the date of submission, or until you request deletion
• Email communications: 3 years from the last communication
• Analytics data: 14 months (Google Analytics default retention period)
• Advertising data: In accordance with Google and Meta's data retention policies

After these periods, we will securely delete or anonymise your data unless we are required to retain it for legal purposes.

9. Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure: Request deletion of your personal data in certain circumstances.
• Right to Restrict Processing: Request that we limit how we use your data.
• Right to Data Portability: Request your data in a structured, machine-readable format.
• Right to Object: Object to processing based on legitimate interests or for direct marketing.
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, please contact us at contact@combatjujutsu.co.uk. We will respond to your request within one month.

10. Data Security

We implement appropriate technical and organisational measures to protect your personal data, including:

• SSL/TLS encryption for all data transmitted to and from our website
• Secure hosting infrastructure with Cloudflare's security features
• Access controls to limit who can access personal data
• Regular security assessments of our systems and processes

While we take all reasonable precautions, no method of transmission over the internet or electronic storage is 100% secure.

11. Children's Privacy

Our website and services are not directed at individuals under 16 years of age. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.

12. Links to Other Websites

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to read the privacy policies of any website you visit.

13. Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

14. Complaints

If you have concerns about how we handle your personal data, please contact us first at contact@combatjujutsu.co.uk. If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

• Website: ico.org.uk
• Phone: 0303 123 1113

Last updated: December 2024