Last updated: July 2026
Data Controller
Cobra Jujitsu Skegness (Mark Adams) is the data controller for the personal information we hold about
our members. Contact: info@cobrajujitsu.com.
We are a registered club with the British Martial Arts & Boxing Association (BMABA).
Our data processing is covered under the ICO registration of Repeat Software Limited (registration
reference ZA371410), which operates this website.
What Data We Collect
We collect and store the following personal data about members:
- Name, date of birth, username, email address and phone number
- Training records including attendance, techniques practised, and belt grades
- Health information relevant to training (where voluntarily provided)
- Emergency contact details, including relationship to the member
- Payment and account records (e.g. licence fees)
- Consent preferences for newsletters and photography
- Member photographs (where consent is given)
- Basic login activity (date/time and IP address), for account security
- Any message sent to us through our contact form
Legal Basis for Processing
We process personal data on the basis of legitimate interest (running the club safely, including
safeguarding - see our Safeguarding Policy),
consent (for newsletters, photography, and marketing use of photos), and, where relevant, legal obligation
(safeguarding record-keeping).
Data Storage and Security
Personal data is stored on secure UK-hosted servers. Passwords are stored as salted, hashed values and are
never stored in plain text. Access to member records is restricted to instructors and administrators who
need it to run the club.
Data Sharing
We do not sell or share your personal data with third parties for their own marketing. We may share
limited information with BMABA (where required for insurance, registration, or a safeguarding matter),
emergency services or medical professionals if needed to respond to an injury, and statutory authorities
where we have a legal duty to report a safeguarding concern.
Photography and Social Media
We only post photos of members to our Facebook group, website, or promotional materials where consent has
been given. You may withdraw consent at any time via your profile, or by contacting us. Photos of under-18s
will never be posted without parental consent.
Your Rights Under UK GDPR
- Right to access your personal data
- Right to correct inaccurate data
- Right to erasure (right to be forgotten)
- Right to restrict processing
- Right to data portability
- Right to object to processing
Right to Erasure
You may request permanent deletion of your personal data at any time by contacting
info@cobrajujitsu.com.
We will process erasure requests within 30 days. Note that some anonymised training records may be
retained for statistical purposes, and safeguarding-related records may need to be retained for longer -
see below. Logged-in members can also request deletion via the
My Data page.
Retention Period
Active member data is retained for the duration of membership plus a limited period afterwards for our
own record-keeping. On request, personally identifiable information will be deleted where we're not
required to keep it for safeguarding or legal reasons. Safeguarding-related records are kept for longer,
in line with guidance for sports clubs working with children.
Complaints
If you have concerns about how we handle your data, please contact us in the first instance. You also
have the right to complain to the Information Commissioner's Office (ICO) at
ico.org.uk.