Last updated: July 2026
Data Controller
Cobra Jujitsu Skegness is operated by Repeat Software Limited, registered in the United Kingdom.
We are registered with the ICO under the UK GDPR framework. Contact: mark.adams@repeatsoftware.com
What Data We Collect
We collect and store the following personal data about members:
- Name, date of birth, email address, phone number
- Training records including attendance, techniques practised, and belt grades
- Health information and medical notes relevant to training (where voluntarily provided)
- Emergency contact details
- Consent preferences for newsletters and photography
- Member photographs (where consent is given)
Legal Basis for Processing
We process personal data on the basis of legitimate interest (club membership administration),
consent (for newsletters, photography, and marketing use of photos), and vital interests (health/emergency information).
Data Storage and Security
All data is stored on secure UK-based Azure SQL servers. Access to the database is restricted
by IP address. Passwords are stored as salted SHA-256 hashes and are never stored in plain text.
Our infrastructure is hosted on servers previously certified to PCI DSS standards.
Data Sharing
We do not sell or share your personal data with third parties. Data is only accessible
to club instructors and administrators for club management purposes.
Photography and Social Media
We only post photos of members to our Facebook group, website, or promotional materials
where explicit consent has been given. You may withdraw consent at any time by contacting us.
Photos of under-18s will never be posted without parental consent.
Your Rights Under UK GDPR
- Right to access your personal data
- Right to correct inaccurate data
- Right to erasure (right to be forgotten)
- Right to restrict processing
- Right to data portability
- Right to object to processing
Right to Erasure
You may request permanent deletion of your personal data at any time by contacting
mark.adams@repeatsoftware.com. We will process erasure requests within 30 days.
Note that some anonymised training records may be retained for statistical purposes.
Logged-in members can also request deletion via the
Data Request page.
Retention Period
Active member data is retained for the duration of membership plus 2 years.
On request, all personally identifiable information will be permanently deleted.
Complaints
If you have concerns about how we handle your data, you have the right to complain to the
Information Commissioner's Office (ICO) at ico.org.uk.