Privacy Policy

1. Who we are

Krav Maga Elite Ltd is the controller responsible for the personal information covered by this policy.

Krav Maga Elite Ltd
Company number: 16595816
Registered office: Saxon House, 27 Duke Street, Chelmsford, England, CM1 1HT
Email: info@kravmagaelite.co.uk
Website: kravmagaelite.co.uk

References to “Krav Maga Elite”, “we”, “us” or “our” in this policy mean Krav Maga Elite Ltd.

2. What this policy covers

This policy explains how we handle personal information when you:

visit or interact with our website;
complete a Webflow or HighLevel form;
make an enquiry or ask us to contact you;
make a payment or begin a booking through a linked payment service;
subscribe to marketing communications; or
interact with analytics, advertising, map, video, review or social-media features on the website.

Separate privacy information may be supplied when someone becomes a member, books training, provides health or emergency information, or registers a child. That information may involve different purposes, lawful bases and retention periods.

3. The information we collect

Depending on how you use the website, we may collect:

Identity and contact details: name, email address, telephone number, postcode and preferred method of contact.
Enquiry details: the programme, location or service that interests you, your message, availability and our correspondence with you.
Parent or guardian details: where an adult enquires about training for a child, we may collect the adult’s details and limited information needed to identify the appropriate age group for the child.
Booking and transaction details: the item or service selected, amount, date, payment status and limited payment references. Full card numbers and security codes are handled by the payment provider and are not intended to be stored by us.
Marketing preferences: whether you have asked to receive or stop receiving email, telephone or SMS marketing.
Technical and usage information: IP address, browser and device information, approximate location, referring page, pages viewed, actions taken, timestamps, cookie identifiers and similar data.
Campaign and attribution information: for example, UTM parameters, advertising click identifiers and the source of an enquiry.
Information from third-party features: interactions with embedded maps, videos, reviews, social-media content or advertising platforms.

Please do not send medical, safeguarding or other sensitive information through a general website enquiry form unless we specifically ask for it using an appropriate and secure process.

4. How we collect information

We collect personal information:

directly from you when you complete a form, contact us, select preferences or make a payment;
automatically through cookies, pixels, tags, server logs and similar technologies, subject to your choices;
from service providers involved in hosting, forms, customer relationship management, payments, analytics, advertising and embedded content; and
from publicly available sources or social-media platforms when you choose to interact with us there.

5. How and why we use personal information

Purpose	Typical information	Lawful basis
Operate, secure and maintain the website and forms	Technical, device, security and form data	Our legitimate interests in providing a reliable and secure website
Respond to enquiries and arrange requested contact	Identity, contact and enquiry details	Steps requested before entering a contract and our legitimate interests in responding to enquiries
Process a requested booking or payment	Identity, contact, booking, transaction and payment-reference data	Performance of a contract or steps requested before a contract; compliance with legal obligations
Keep business, tax and accounting records	Transaction, invoice and correspondence records	Compliance with legal obligations and our legitimate interests in proper record keeping
Measure website use and improve performance	Cookie identifiers, device, usage and campaign data	Your consent where required for analytics technologies
Measure advertising and show relevant advertising	Cookie identifiers, advertising IDs, campaign and conversion data	Your consent
Send email or SMS marketing	Contact details and preferences	Your consent, or the limited existing-customer exception where it lawfully applies; legitimate interests for related processing
Prevent misuse, fraud and security incidents	Technical, security, transaction and communication data	Our legitimate interests in protecting people, systems and our business; legal obligation where applicable
Establish, exercise or defend legal claims and handle complaints	Relevant records and correspondence	Our legitimate interests and compliance with legal obligations

6. Marketing

We will only send electronic marketing where we have a lawful basis and the requirements of the Privacy and Electronic Communications Regulations are met. Marketing choices are separate from the ability to submit an enquiry. You can unsubscribe using the link in a message or contact us at any time.

We may keep a minimal suppression record after an opt-out so that we can respect your preference and avoid contacting you again by mistake.

7. Cookies, analytics and advertising

We use cookies and similar technologies for essential website functions and, with the appropriate choice or consent, for analytics, advertising measurement and embedded content. Google Analytics, Google advertising services and Meta technologies may receive technical and interaction data when enabled.

Non-essential technologies should not be activated until the required choice has been made. You can find details and change your preferences in our Cookie Policy and cookie settings panel.

8. Who we share information with

We share personal information only where reasonably necessary with:

Webflow, which hosts the website and may process website-form submissions;
HighLevel and associated services such as LeadConnector, where used to receive forms, manage enquiries and communications;
payment providers used for secure checkout and transaction processing;
Google, for consented analytics, advertising or embedded services;
Meta, for consented advertising measurement and related services;
map, video, review and social-media providers when their content is displayed or activated;
email, telecommunications, hosting, security, IT support and professional advisers;
regulators, courts, law-enforcement bodies or other authorities where disclosure is required or permitted by law; and
a purchaser, investor or successor if our business or assets are reorganised, subject to appropriate confidentiality and data-protection safeguards.

Some providers act as our processors, while others may act as separate controllers under their own privacy policies. We do not sell or rent personal information.

9. International transfers

Some technology providers process information in the United States or other countries outside the United Kingdom. Where UK data-protection law requires a safeguard, we use an applicable UK adequacy regulation, the UK International Data Transfer Agreement, the UK Addendum to approved standard contractual clauses, or another lawful transfer mechanism. You may contact us for more information about the safeguards relevant to your information.

10. How long we keep information

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including legal, accounting, security and complaint-handling requirements. Our usual approach is:

general enquiries that do not become a customer relationship: normally up to 24 months after the last meaningful contact;
transaction, tax and accounting records: normally six years after the relevant accounting period, or longer where law or a live dispute requires it;
marketing records: while you remain subscribed, with a minimal suppression record retained after opt-out;
security logs: for a limited period appropriate to investigation and system protection; and
analytics, advertising and cookie information: for the period shown in the cookie settings panel or the relevant provider configuration.

We may retain information longer where a complaint, legal claim, safeguarding issue or regulatory requirement makes this necessary.

11. Children’s information

Our website contains information about children’s programmes, but general enquiries about a child should be made by a parent or guardian. We aim to collect only the limited information needed to answer that enquiry. We do not use children’s personal information for behavioural advertising or ask a child to consent to marketing through a general website form.

Additional privacy information and parental or guardian details may be required if a child is enrolled in training.

12. Security

We use proportionate technical and organisational measures intended to protect personal information against loss, misuse, unauthorised access, alteration and disclosure. No website or transmission method is completely secure, so please avoid sending sensitive information through ordinary enquiry forms or email.

13. Your data-protection rights

Depending on the circumstances and the lawful basis used, you may have the right to:

ask for access to your personal information;
ask us to correct inaccurate or incomplete information;
ask us to erase information;
ask us to restrict how information is used;
receive certain information in a portable format;
object to processing based on legitimate interests; and
withdraw consent at any time, without affecting processing already carried out lawfully.

You have an absolute right to object to your personal information being used for direct marketing.

These rights are not absolute in every situation. We may need to confirm your identity and ask for enough information to locate the relevant records. There is normally no charge for exercising a right. We generally respond without undue delay and within one month, subject to lawful extensions or exemptions.

14. Data-protection complaints

If you believe we have not handled your personal information properly, please send a data-protection complaint to info@kravmagaelite.co.uk with the subject “Data protection complaint”, or write to our registered office.

We will acknowledge a data-protection complaint within 30 days. Without undue delay, we will take appropriate steps to investigate, keep you informed where appropriate, and tell you the outcome.

You also have the right to complain to the Information Commissioner’s Office. We would appreciate the opportunity to address your concern first, but this does not affect your right to contact the ICO. Visit ico.org.uk/make-a-complaint.

15. Automated decision-making

We do not use information collected through general website enquiries to make solely automated decisions that produce legal or similarly significant effects.

16. External websites and embedded services

Our website may link to or display services operated by other organisations. Their handling of personal information is governed by their own privacy information. Where an embedded service is non-essential, we aim to obtain the required choice before it loads.

17. Changes to this policy

We review this policy when our services, providers or legal obligations change. We will publish the updated version here and change the “Last updated” date. If a change materially affects how we use information, we will take reasonable steps to bring it to the attention of affected people.

18. Contact us

For privacy questions, rights requests or complaints, contact:

Privacy Lead, Krav Maga Elite Ltd
Email: info@kravmagaelite.co.uk
Registered office: Saxon House, 27 Duke Street, Chelmsford, England, CM1 1HT

‍