Privacy Policy.
Grapple Zone LDN Ltd – Privacy Policy
Last updated: 6/04/2025
Grapple Zone LDN Ltd (“we”, “us”, “our”) is committed to protecting your privacy and ensuring that your personal information is handled in a safe, secure, and responsible manner. This Privacy Policy explains how we collect, use, store, and protect your data when you visit our website, become a member, use our services, or communicate with us.
By using our website or attending Grapple Zone, you agree to the terms outlined in this policy.
1. Who We Are
Grapple Zone LDN Ltd
91 Westminster Bridge Road London
SE1 7HW United Kingdom
Email: admin@grapplezone.co.uk
We operate a martial arts academy offering Brazilian Jiu Jitsu, Muay Thai, Freestyle Wrestling and related services. We also operate an online booking system, a retail shop, and sublet treatment rooms to independent practitioners.
2. What Information We Collect
We may collect and process the following types of personal data:
Information you provide to us:
● Name, address, contact number, and email address
● Emergency contact details
● Payment details (processed securely via third-party payment processors)
● Medical or health information you choose to disclose
● Membership information and class attendance
● Waivers, consent forms, and incident reports
● Communications you send to us (emails, WhatsApp messages, website enquiries)
Information collected automatically:
● Website usage data (IP address, browser type, device information)
● Cookies and tracking data (see Section 7)
Images and video:
● CCTV for safeguarding, security, and safety
● Photographs and videos taken during classes or events (only with consent)
3. How We Use Your Information
We process your data to:
● Manage your membership and class bookings
● Provide training services and maintain safety standards
● Communicate with you regarding schedules, updates, closures, and events
● Manage payments, invoices, and membership administration
● Improve our facilities and services
● Ensure safeguarding of children and vulnerable individuals
● Comply with legal and regulatory obligations
● Send promotional and marketing communications (only with consent)
We do not sell or rent your information to third parties.
4. Legal Basis for Processing
We process your personal data under one or more of the following lawful bases:
● Contractual necessity – to provide membership or training services
● Legal obligation – safeguarding, incident reporting, accounting, tax
● Legitimate interests – academy operations, safety, communication
● Consent – marketing communications, photography, and media usage
You may withdraw consent at any time by contacting us at admin@grapplezone.co.uk.
5. Sharing Your Information
We only share your data when necessary and with:
● GymDesk (membership system)
● Payment processors (e.g., Stripe, Square)
● Email and communication platforms
● Third-party contractors who assist with academy operations
● Legal authorities when required by law
All third parties are required to protect your data and act only under our instructions.
6. Data Retention
We keep your personal data only for as long as necessary to fulfill the purposes for which it was collected, including:
● Membership records: retained for up to 6 years after cancellation
● Incident reports: retained according to safeguarding requirements
● Financial and payment records: retained for 6 years (legal requirement)
When data is no longer needed, it will be securely deleted.
7. Cookies & Website Tracking
Our website may use cookies and tracking technologies to:
● Improve user experience
● Analyse website traffic
● Support booking functionality
You can manage or disable cookies through your browser settings.
8. Your Data Protection Rights
Under the UK GDPR, you have the right to:
● Access your personal data
● Request correction of inaccurate information
● Request erasure of your data (“right to be forgotten”)
● Restrict or object to processing
● Request transfer of your data
● Withdraw consent (where applicable)
To exercise any rights, contact us at admin@grapplezone.co.uk.
9. Children’s Data
For children under 18, we require parental or guardian consent for membership, photography/video usage, and communication. We process children’s data strictly for safeguarding and membership administration.
10. Data Security
We take reasonable technical and organisational measures to protect your data, including:
● Secure membership systems
● Controlled staff access
● Encrypted payment processing
● CCTV for safety and security
Despite our efforts, no online system can be guaranteed 100% secure, but we work to meet or exceed legal standards.
11. External Links
Our website may contain links to third-party websites. We are not responsible for their privacy practices or content.
12. Changes to This Policy
We may update this Privacy Policy periodically. Any changes will be posted on our website with an updated “Last Updated” date.
13. Contact Us
If you have questions about this policy or how your data is handled, please contact: