Privacy Policy

PRIVACY POLICY

REIS BRAZILIAN JIU-JITSU LTD

Trading as Reis BJJ Kings Cross

Effective Date: 13 May 2025

Last Updated: [26 February 2026]

1. Who We Are

REIS BRAZILIAN JIU-JITSU LTD (Company Number 16450011) is a company registered in England and Wales.

Registered Office:

27 Merlin The Concourse

London

NW9 5XP

United Kingdom

Trading Name: Reis BJJ Kings Cross

Training Venue:

Vernon Hall, Vernon Square, London, WC1X 9EW

Director: Antonio Rodrigues de Assis Neto

For the purposes of UK data protection law, REIS BRAZILIAN JIU-JITSU LTD is the Data Controller of your personal data.

Contact email: info@reisbjj.co.uk

2. Scope of This Policy

This Privacy Policy explains how we collect, use, store and protect personal data when you:

Visit www.reisbjj.co.uk
Use the Reis BJJ Kings Cross mobile application
Register for classes or memberships
Sign waivers or health declarations
Communicate with us

This policy applies to both website and mobile app users.

3. Personal Data We Collect

We may collect and process the following categories of personal data:

Identity Data

Full name
Date of birth
Belt rank
Parent/guardian details (for minors)

Contact Data

Email address
Phone number
Home address
Emergency contact details

Membership & Training Data

Attendance records
Class bookings
Promotion history
Competition participation records

Health Data (Special Category Data)

Injuries
Medical conditions relevant to training
Physical limitations disclosed in waivers

Media Data

Photographs and video recordings (where consent is provided)

Payment Data

Payment confirmations
Subscription status
Transaction identifiers

We do not store full card details. Payments are processed securely by Stripe.

Technical Data

Device type
IP address
Log data
Cookie data (via website)

4. Special Category Data – Health Information

Health information is considered “special category data” under UK GDPR.

We collect health data solely to:

Ensure safe participation in training
Make reasonable adjustments
Respond appropriately in emergencies
Comply with insurance and safeguarding obligations

Legal basis:

Article 6(1)(b) UK GDPR – Performance of a contract
Article 6(1)(c) – Legal obligation
Article 9(2)(a) – Explicit consent

Health data is:

Access restricted
Stored securely
Retained only as long as necessary for safety and insurance purposes

You may withdraw consent at any time. However, this may impact your ability to train safely.

5. Children’s Data

We provide classes for children.

Where a participant is under 13 years of age:

Data is collected from a parent or legal guardian
Consent is provided by the parent/guardian

We do not knowingly collect personal data directly from children without parental consent.

Parents may request access, correction or deletion of their child’s data at any time.

6. How We Use Personal Data

We use personal data to:

Manage memberships and subscriptions
Process payments
Administer class bookings
Maintain attendance records
Ensure participant safety
Communicate schedule updates
Comply with legal and insurance obligations
Promote club achievements (where consent applies)

We do not sell personal data.

We do not send unsolicited marketing emails.

7. Legal Bases for Processing

We rely on one or more of the following legal bases:

Performance of a contract
Compliance with a legal obligation
Legitimate interests (club administration, safeguarding and operational management)
Explicit consent (health data and media use)

8. Payments

All payments are processed by Stripe.

Stripe may process personal data outside the United Kingdom. Where this occurs, appropriate safeguards such as Standard Contractual Clauses are used in accordance with UK data protection law.

We do not store full card details.

9. Media & Promotion

Photographs and video may be taken during classes, events or competitions.

Images may be used on:

Our website
Social media platforms
Promotional materials

For participants under 18, explicit parental consent is required prior to publication.

Consent may be withdrawn at any time by contacting us.

10. Data Sharing

We may share personal data with:

Payment processors
App hosting providers
Cloud storage providers
Professional advisers
Legal or regulatory authorities where required

We do not sell or rent personal data.

Where data is transferred outside the UK, appropriate safeguards are implemented.

11. Data Retention

We retain personal data only for as long as necessary to:

Provide membership services
Comply with insurance requirements
Comply with legal obligations
Defend potential legal claims

Waivers and health forms may be retained in line with applicable limitation periods under UK law.

12. Data Security

We implement appropriate technical and organisational measures, including:

Encrypted data storage
Secure authentication systems
Restricted access controls
Secure payment processing

While we take reasonable precautions, no digital system is entirely secure.

13. Your Rights

Under UK GDPR, you have the right to:

Access your personal data
Correct inaccurate data
Request erasure
Restrict processing
Object to processing
Data portability
Withdraw consent

To exercise your rights, email: info@reisbjj.co.uk

You have the right to lodge a complaint with the Information Commissioner’s Office (ICO):

www.ico.org.uk

14. Cookies

Our website uses essential and analytics cookies.

You may manage cookie preferences via your browser settings or cookie banner.

15. International Transfers

Where personal data is transferred outside the United Kingdom, we ensure appropriate safeguards are in place in accordance with UK GDPR.

16. Changes to This Policy

We may update this Privacy Policy from time to time.

The latest version will always be available at:

www.reisbjj.co.uk/privacy-policy

17. Contact