Last updated: July 2026

Data Controller

Cobra Jujitsu Skegness (Mark Adams) is the data controller for the personal information we hold about our members. Contact: info@cobrajujitsu.com. We are a registered club with the British Martial Arts & Boxing Association (BMABA). Our data processing is covered under the ICO registration of Repeat Software Limited (registration reference ZA371410), which operates this website.

What Data We Collect

We collect and store the following personal data about members:

  • Name, date of birth, username, email address and phone number
  • Training records including attendance, techniques practised, and belt grades
  • Health information relevant to training (where voluntarily provided)
  • Emergency contact details, including relationship to the member
  • Payment and account records (e.g. licence fees)
  • Consent preferences for newsletters and photography
  • Member photographs (where consent is given)
  • Basic login activity (date/time and IP address), for account security
  • Any message sent to us through our contact form
Legal Basis for Processing

We process personal data on the basis of legitimate interest (running the club safely, including safeguarding - see our Safeguarding Policy), consent (for newsletters, photography, and marketing use of photos), and, where relevant, legal obligation (safeguarding record-keeping).

Data Storage and Security

Personal data is stored on secure UK-hosted servers. Passwords are stored as salted, hashed values and are never stored in plain text. Access to member records is restricted to instructors and administrators who need it to run the club.

Data Sharing

We do not sell or share your personal data with third parties for their own marketing. We may share limited information with BMABA (where required for insurance, registration, or a safeguarding matter), emergency services or medical professionals if needed to respond to an injury, and statutory authorities where we have a legal duty to report a safeguarding concern.

Photography and Social Media

We only post photos of members to our Facebook group, website, or promotional materials where consent has been given. You may withdraw consent at any time via your profile, or by contacting us. Photos of under-18s will never be posted without parental consent.

Your Rights Under UK GDPR
  • Right to access your personal data
  • Right to correct inaccurate data
  • Right to erasure (right to be forgotten)
  • Right to restrict processing
  • Right to data portability
  • Right to object to processing
Right to Erasure

You may request permanent deletion of your personal data at any time by contacting info@cobrajujitsu.com. We will process erasure requests within 30 days. Note that some anonymised training records may be retained for statistical purposes, and safeguarding-related records may need to be retained for longer - see below. Logged-in members can also request deletion via the My Data page.

Retention Period

Active member data is retained for the duration of membership plus a limited period afterwards for our own record-keeping. On request, personally identifiable information will be deleted where we're not required to keep it for safeguarding or legal reasons. Safeguarding-related records are kept for longer, in line with guidance for sports clubs working with children.

Complaints

If you have concerns about how we handle your data, please contact us in the first instance. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.

Contact Us About Your Data