This privacy notice is served by the Gracie Foundation Jiu-Jitsu Network (a trading name of Old Skool Games Ltd, registered in England and Wales) for the website graciefoundation.co.uk. It explains how we control, process and protect your personal information while you use this website. If you do not agree with it, please stop using the website and do not submit personal data to us.
What we collect and why
| Data | Why | Lawful basis |
|---|---|---|
| Name, email, phone, message in the contact, free-trial and affiliate forms | To answer you, and to pass a trial request to the academy you chose | Legitimate interest / steps before a contract |
| Account email, name, password (stored hashed), academy, course access and lessons watched | To run your video library account and show your progress | Contract |
| Payment details | Taken by Stripe, our payment processor. We never see or store your card number; we keep the Stripe reference, the amount and the course bought. | Contract |
| Server logs (IP address, browser, pages requested) | Security and keeping the site working | Legitimate interest |
We do not sell personal data and we do not use it for advertising. We only email you about your own account, purchases or enquiries.
Who we share it with
- The academy you choose on a free-trial form, so they can contact you.
- Stripe (payments) and our email provider (Brevo), each of which processes data on our behalf under their own GDPR terms.
- Our hosting provider (Hetzner, Germany), where the website and its database run.
We do not transfer your data outside the UK/EEA except to processors covered by adequate safeguards.
How long we keep it
Enquiries are kept for up to two years. Account data is kept while your account exists; ask us to delete it at any time. Purchase records are kept for six years for tax purposes.
Cookies
The site sets one cookie, used only to keep you logged in. There are no advertising or tracking cookies. Embedded YouTube videos and Google Maps may set their own cookies when you play or interact with them.
Your rights
Under UK GDPR you have the right to be informed, of access, to rectification, to erasure, to restrict processing, to data portability, to object, and not to be subject to automated decision-making. To exercise any of these, email info@graciefoundation.co.uk. You also have the right to complain to the Information Commissioner's Office at ico.org.uk.
Security
Passwords are stored as salted scrypt hashes. The site is served over HTTPS. Video streams are delivered through short-lived links that only work while you are logged in.
Changes
We may update this notice; the latest version is always on this page.