Privacy policy

Easy After-school Jiu-Jitsu is the data controller for the information you provide through this booking site.

What we collect: contact details (name, email, phone, address), emergency contacts, basic medical notes you choose to share, and information about any children you book for (name, date of birth, school, belt). We also record booking and payment history.

How we use it: to manage your bookings, take payment where a class or invoice requires it, communicate about classes, keep coaches informed of relevant medical or safety details, and meet our coaching and safeguarding obligations.

Who sees it: Easy After-school Jiu-Jitsu's coaches and admin team. We do not sell your data, and we do not share it with third parties for their own marketing.

Email tracking: emails the club sends you through the system tell the club whether the message was opened and which links were clicked, so it knows its messages are getting through. Blocking images in your email app prevents open tracking; links still work.

Another parent or carer: at your request we can give a second adult access to a child on your account, by sending them an invitation. Everyone with access is told when someone is added or removed, and you or the club can remove that access at any time. We never confirm to anyone else that a child is registered with us.

Service providers we use: to run the booking site we rely on a small number of trusted providers who process data on our behalf. Easy and Simple Bookings runs the booking site and app for us. GoDaddy hosts the site, its database and its emails on servers in France. Stripe takes card payments securely, and we never see or store your full card details. If you choose to sign in with a Google, Apple or Microsoft account rather than an email address and password, that provider confirms your identity to us: Google LLC, Apple Inc. or Microsoft Corporation, depending on which you use. If you turn on notifications in the booking app, Google delivers them, and on an iPhone or iPad so does Apple. If the club shares training videos, the video player loads from YouTube or Vimeo, which see your IP address and browser. Google, Apple, Microsoft and Vimeo are based in the United States, and Stripe processes some data there too. Data sent outside the UK, including to France, is protected by the providers' UK data-protection safeguards (UK adequacy decisions and/or standard contractual clauses).

How long we keep it: while your account is active, plus a reasonable period afterwards to satisfy legal and safeguarding obligations. You can ask us to delete your account at any time.

Your rights: under UK GDPR you can request a copy of the personal data we hold about you, ask us to correct it, or ask us to delete it. Contact the club to exercise these rights.