How information is handled

PrivacyPolicy

How MMA North London collects, uses and protects information about students, parents, website visitors and people who contact the club.

Last updated: 17 September 2026

Who we are

MMA North London is the data controller for the personal information described in this notice.

Priory Grove Scout Hut
Off Westcombe Drive
Barnet EN5 2BE

ibushkabashi@live.co.uk
0788 210 6330

Information we collect

  • Name, email address, telephone number and postal address
  • Age or date of birth and, for children, parent or guardian details
  • Emergency-contact information
  • Membership, attendance, grading and payment-status records
  • Enquiries, correspondence and training preferences
  • Relevant health, injury or accessibility information
  • Photographs or video where appropriate permission has been obtained
  • Basic website information such as IP address, browser type and server logs

How we collect information

Information is collected when someone submits the contact form, emails or calls the club, books or attends a class, completes a membership or consent form, makes a payment, reports an incident, or communicates with an instructor.

We may also receive information from a parent, guardian, emergency contact or payment provider where this is necessary to administer training.

Why we use it

  • Contract: to arrange classes, memberships and services requested by a student or parent.
  • Legal obligation: to maintain financial, safeguarding, accident and other records required by law.
  • Legitimate interests: to run the club safely, answer enquiries, manage attendance and protect the club’s legal rights.
  • Consent: for optional photography, video or communications where consent is the appropriate basis.
  • Vital interests: where information must be used in a genuine medical emergency.

Health & safety information

Health information is special-category personal data. We collect only information that is relevant to safe participation, reasonable adjustments, injury management or an emergency.

Where required, we rely on the student’s or parent’s explicit consent in addition to an appropriate UK GDPR lawful basis. In an emergency, information may be used to protect the student’s vital interests. Health information is restricted to people who need it for safety and is not used for marketing.

Children’s information

For children’s classes, we normally deal with a parent or guardian and collect only the information needed to organise and deliver safe training. Privacy information will be explained in clear, age-appropriate language where information is collected directly from a child.

A parent or guardian should contact the club to exercise a child’s privacy rights, although a sufficiently mature child may also exercise their own rights.

Photography & video

Training photographs or video may be used on the website, social media or promotional materials only where the club has an appropriate lawful basis and any required permission.

Consent can be withdrawn for future use by contacting the club. Withdrawal does not make earlier lawful use invalid, and the club may not be able to recall printed or independently shared material already in circulation.

Who we share it with

Personal information is not sold. It may be shared only where necessary with:

  • Instructors and authorised club administrators
  • Payment, email, website-hosting and IT providers acting for the club
  • Insurers, professional advisers or governing bodies where relevant
  • Emergency services, safeguarding authorities, regulators or law-enforcement bodies where required

International transfers

Some technology providers may process information outside the UK. Where this happens, the club will use a lawful transfer mechanism, such as UK adequacy regulations or approved contractual safeguards, and will take reasonable steps to protect the information.

Website & cookies

The current website does not use analytics or advertising cookies. The web host may create short-term security and access logs containing an IP address, browser information and request details.

Links to services such as Google Maps, YouTube, Instagram or other external websites are governed by those providers’ own privacy and cookie policies once followed.

How long we keep information

We retain personal information only for as long as needed for the purpose for which it was collected, taking account of legal, insurance, safeguarding and accounting requirements.

  • Enquiries that do not lead to membership: normally up to 12 months after the last contact.
  • Membership, attendance and contractual records: normally up to six years after the relationship ends.
  • Financial records: normally six years or longer where required by tax law.
  • Health and emergency details: reviewed during membership and deleted when no longer required for safety, unless connected to an incident or legal claim.
  • Accident, safeguarding and insurance records: kept for the applicable legal or insurer-required period, which may be longer for a child.
  • Photographs and video: kept while consent or another lawful basis remains valid and the material remains appropriate for its stated purpose.

Your data-protection rights

Depending on the circumstances, individuals may ask the club to:

  • Provide a copy of their personal information
  • Correct inaccurate or incomplete information
  • Delete information where there is no lawful reason to keep it
  • Restrict how information is used
  • Provide certain information in a portable format
  • Stop processing based on legitimate interests
  • Withdraw consent at any time where consent is relied upon
  • Complain about the way information has been handled

Requests can be made using the contact details above. The club may ask for information needed to confirm identity and will respond within the period required by data-protection law.

Security

The club uses reasonable organisational and technical measures to protect personal information against loss, unauthorised access, alteration or disclosure. Access is limited to people who need the information for an authorised purpose.

Complaints & updates

Send a data-protection complaint to ibushkabashi@live.co.uk. The club will acknowledge and investigate it in line with current legal requirements.

If the matter is not resolved, a complaint can also be made to the Information Commissioner’s Office or by calling 0303 123 1113.

This notice may be updated when the club’s practices or legal obligations change. The latest revision date will appear at the top of the page.

Privacy questions

Contact the club

Ask about your information, exercise a privacy right or make a data-protection complaint by emailing MMA North London.

Email about privacy

Start in Barnet

Your first adult class is free

Meet the instructor, experience the training and decide without pressure.

Book your free class