Privacy Notice

1. Who we are

Rebel Combat Sports is run by Rebel Combat Sports Ltd, company number 17320284, registered in England and Wales. Registered office: Unit 27–29, Mountney Bridge Business Park, Eastbourne Road, Westham, Pevensey BN24 5NJ.

We are the data controller for the personal information described in this notice — the organisation legally responsible for it. Contact us at hello@rebelcombatsports.com.

2. What we collect and why

Data	Why we need it	Lawful basis
Name, contact details, date of birth, emergency contact	To run your membership and keep you safe	Contract
Health declaration (medical conditions, injuries)	To coach you safely and respond in an emergency	Health information gets extra legal protection. We hold it only because you explicitly agree — and in a real emergency, to protect your life
Parent/guardian details for under-18s	To get parental consent and stay in touch about their child	Contract and legal obligation
Photos and video	Club social media and website	Consent — a genuine opt-in, withdrawable at any time. Withdrawing stops new use; we take down existing posts where practical, but copies others have already shared or screenshotted can't be recalled
How you heard about us (optional)	To learn which ways of finding us actually work	Consent — you can leave it blank
Email address, when you opt in to club news	To send club news and schedule changes	Consent — opt-in, unsubscribe any time
Payment records	Accounting	Legal obligation
Incident records	Insurance, safety review, defending legal claims	Legitimate interests; for health content, defending legal claims

3. Who we share it with

• Our insurer — if there is a claim.
• BMABA (British Martial Arts & Boxing Association) — for licensing and affiliation.
• Emergency services — in an emergency.
• Instagram/Meta — if you've consented to photos, the photos we post are public.

Service providers — Netlify (our website forms) and Google (our file storage and email) — hold data on our behalf.

No one else. We never sell your data.

4. How long we keep it

Data	Kept for
Membership data	6 years after your membership ends
Incident records (adults)	3 years from the incident
Incident records (under-18s)	Until the person's 21st birthday plus 3 years
Consent records	For as long as your consent lasts, plus 1 year
Payment records	6 years

5. Your rights

You have the right to:

• access the data we hold about you;
• correct it if it is wrong;
• have it erased — we will do this unless the law requires us to keep it (see section 4);
• restrict how we use it;
• object to our use of it;
• withdraw consent at any time, where consent is the basis we rely on. Withdrawal stops new use straight away. For photos already posted, we take them down where practical — but copies others have already shared or screenshotted can't be recalled.

To use any of these rights, email hello@rebelcombatsports.com.

If you think we have handled your data badly, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk.

6. Where it lives

Form submissions are stored with Netlify (our website platform) and copied to our club inbox. Records we write ourselves are stored in Google Workspace. Both hold data on our behalf under their own data-processing agreements.