Privacy Notice
1. Who we are
Rebel Combat Sports is run by Rebel Combat Sports Ltd, company number 17320284, registered in England and Wales. Registered office: Unit 27–29, Mountney Bridge Business Park, Eastbourne Road, Westham, Pevensey BN24 5NJ.
We are the data controller for the personal information described in this notice — the organisation legally responsible for it. Contact us at hello@rebelcombatsports.com.
2. What we collect and why
| Data | Why we need it | Lawful basis |
|---|---|---|
| Name, contact details, date of birth, emergency contact | To run your membership and keep you safe | Contract |
| Health declaration (medical conditions, injuries) | To coach you safely and respond in an emergency | Health information gets extra legal protection. We hold it only because you explicitly agree — and in a real emergency, to protect your life |
| Parent/guardian details for under-18s | To get parental consent and stay in touch about their child | Contract and legal obligation |
| Photos and video | Club social media and website | Consent — a genuine opt-in, withdrawable at any time. Withdrawing stops new use; we take down existing posts where practical, but copies others have already shared or screenshotted can't be recalled |
| How you heard about us (optional) | To learn which ways of finding us actually work | Consent — you can leave it blank |
| Email address, when you opt in to club news | To send club news and schedule changes | Consent — opt-in, unsubscribe any time |
| Payment records | Accounting | Legal obligation |
| Incident records | Insurance, safety review, defending legal claims | Legitimate interests; for health content, defending legal claims |
3. Who we share it with
- Our insurer — if there is a claim.
- BMABA (British Martial Arts & Boxing Association) — for licensing and affiliation.
- Emergency services — in an emergency.
- Instagram/Meta — if you've consented to photos, the photos we post are public.
Service providers — Netlify (our website forms), Supabase (our member records system), and Google (our file storage and email) — hold data on our behalf.
No one else. We never sell your data.
4. How long we keep it
| Data | Kept for |
|---|---|
| Membership data | 6 years after your membership ends |
| Incident records (adults) | 3 years from the incident |
| Incident records (under-18s) | Until the person's 25th birthday |
| Consent records | For as long as your consent lasts, plus 1 year |
| Payment records | 6 years |
5. Your rights
You have the right to:
- access the data we hold about you;
- correct it if it is wrong;
- have it erased — we will do this unless the law requires us to keep it (see section 4);
- restrict how we use it;
- object to our use of it;
- withdraw consent at any time, where consent is the basis we rely on. Withdrawal stops new use straight away. For photos already posted, we take them down where practical — but copies others have already shared or screenshotted can't be recalled.
To use any of these rights, email hello@rebelcombatsports.com.
If you think we have handled your data badly, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk.
6. Where it lives
Form submissions are stored with Netlify (our website platform), copied to our club inbox, and recorded in our member records system, hosted with Supabase in the EU. Records we write ourselves are stored in Google Workspace. All three hold data on our behalf under their own data-processing agreements.
7. Cookies and analytics
The site works without cookies and sets none by default. We'd like to use Google Analytics to understand how people find and use the site — which pages they read, and whether they go on to book a trial or set up a membership. Google Analytics sets cookies and processes some of that data (including an approximation of your location) on our behalf.
We only load Google Analytics if you accept it on the cookie banner. If you decline, nothing is loaded and no analytics cookies are set. You can change your mind at any time by clearing this site's storage in your browser, which brings the banner back. We don't use advertising cookies, and we don't sell your data.