Elite Boxing & Performance Centre, Collier Row Road, RM5 2BH ("we", "us") is the controller of the personal data described here. Legal entity: [CONFIRM]. Contact for any privacy matter: 07581 224558 or [CONFIRM — email address]. [CONFIRM — ICO registration number, if registered.]
| Data | Why we use it | Legal basis |
|---|---|---|
| Name, email, phone, date of birth, password (stored only as a salted hash) | Create and run your account and membership; confirm age for age-group classes; contact you about your sessions | Contract |
| Children and family members you add (name, date of birth) | Let a parent or guardian book and pay for them; enforce age groups | Contract; parental responsibility |
| Emergency contact; medical conditions / injuries you tell us about | Keep you safe in training and act in an emergency. This is health data (special category). | Your explicit consent, and vital interests in an emergency |
| Bookings, attendance and membership status | Run classes, safe capacity, coaching records, billing | Contract; legitimate interests |
| Payment records (amount, date, status) | Billing, accounting and tax records. We never see or store your full card number — payments are handled by Stripe. | Contract; legal obligation |
| Event ticket purchases (name, email, ticket codes) | Issue tickets and run the door | Contract |
| Photo / video consent choice | Record whether we may publish images of you or your child | Consent |
| Marketing preference | Only if you opt in, to tell you about shows and offers | Consent (withdraw any time) |
| Technical data (IP address, login attempts, session cookie) | Security, preventing abuse, keeping you signed in | Legitimate interests |
Accounts are held by adults (16+). We collect information about under-18s only from their parent or guardian, who is responsible for its accuracy. Parents can view, correct or ask us to delete a child's details at any time.
We do not sell your data. Some providers process data outside the UK; where they do we rely on UK-approved safeguards such as the UK International Data Transfer Addendum.
We use one essential cookie (eb_session) to keep you signed in. It is HttpOnly, lasts up to 30 days and is removed when you sign out. We do not use advertising or analytics cookies on this site.
Passwords are stored as salted hashes, connections use HTTPS, access to member data is limited to admins, and payment details never touch our servers. No system is perfectly secure; tell us straight away if you suspect a problem.
You can ask us to: see the data we hold on you; correct it; delete it; restrict or object to our use; receive a copy in a portable format; and withdraw consent at any time (for example for health information, marketing or photos). Contact us using the details above — we will respond within one month. You can edit most of your details yourself in your account.
If you are unhappy with how we handle your data you can complain to the Information Commissioner's Office: ico.org.uk, 0303 123 1113.
We may update this policy and will post the new version here with the date at the top.