Legal

Privacy policy

Last updated: 2 October 2026

Who we are

Novo BJJ Eastbourne ("we", "us") runs Brazilian jiu-jitsu and martial arts classes at Performance Fitness Gym, 14C Maple Road, Eastbourne BN23 6NY, and is part of the NOVO BJJ family with a headquarters at 9 Castleham Rd, St Leonards-on-Sea TN38 9NR. We are the data controller for the personal data described in this policy. You can contact us about anything in it through the contact page.

What we collect and why

Enquiries and free-trial bookings. When you send an enquiry or book a free class we collect your name, email address, phone number if you give it, whether the class is for an adult or a child, your preferred location and your message. We use this to reply to you and arrange your class. Our lawful basis is taking steps at your request before entering into a contract.

What is saved with an online free-class booking. When you book a free class through the website we also save the class and date you picked (or that you chose "Not sure yet"), and a short note of how you reached the booking form: which of our pages or buttons you came from, which of the booking steps you looked at and, once our guide videos are online, whether you played them and roughly how much you watched. This note is sent with your booking only when you press the button to book - it is not stored in your browser, and if you do not book, nothing is saved. We use it to arrange your class and to see which parts of the website help new members find us. Our lawful basis for the class details is the same as above; for the note of how you reached the form it is our legitimate interest in improving the website.

Shop orders and pay-as-you-go passes. When you buy from the shop or purchase a walk-in pass we collect your name, email address and details of what you ordered. Payment is handled entirely by Stripe - your card details go directly to Stripe and never touch our servers. We store your name, email and order details so we can hand you the right items at the gym and deal with any problems. Our lawful basis is performance of a contract.

Technical data. Our hosting provider keeps standard server logs (IP address, pages requested, timestamps) for security and troubleshooting. Where our own application records request information for rate limiting, IP addresses are stored only in a one-way hashed form.

What we do not do

• We do not send marketing emails without your consent.
• We do not sell or rent your personal data to anyone.
• We do not store card or payment details - Stripe processes all payments.

Who we share data with

We use a small number of service providers who process data on our behalf:

• Stripe - payment processing for shop orders and walk-in passes. See the Stripe privacy policy.
• Coded Vision Design - builds and maintains this website and acts as a data processor for the enquiry and order data it hosts on our behalf.
• Our hosting provider - stores the website and its database in line with our instructions.
• MAAT - if you become a Novo Eastbourne member, your membership and grading records are managed through the MAAT app under its own privacy terms.

How long we keep data

Enquiries are kept for up to twelve months so we can follow up, then deleted. Order records are kept for six years to meet accounting and tax obligations. Server logs are rotated automatically after a short period.

Your rights under UK GDPR

You have the right to:

• access a copy of the personal data we hold about you;
• have inaccurate data corrected;
• have your data erased where we no longer need it;
• restrict or object to our processing;
• receive your data in a portable format;
• withdraw consent at any time where processing is based on consent.

To exercise any of these rights, contact us through the contact page. We will respond within one month. If you are unhappy with how we handle your data you can complain to the Information Commissioner's Office at ico.org.uk.

Children

Kids class enquiries are made by a parent or guardian, and we hold the parent or guardian's contact details rather than the child's. We collect only the information needed to run the class safely.

Cookies

The site needs a small amount of browser storage to work at all - for example, keeping your shop basket between pages and remembering an admin login for authorised staff. That storage is always on, and it never leaves your device except as part of an order you place.

Analytics. With your permission we use Google Analytics to count visits and see which pages help people find a class. It sets cookies in your browser and sends Google your IP address (shortened), the pages you view, and general details such as your device and the site that referred you. It also records a few actions - booking a free class, sending a message, adding to the basket, starting or completing a payment, and how far you get through the booking guide and its videos - but never your name, email address or phone number. Google acts as our processor and stores that data for 14 months; we never use it to identify you, and we do not use advertising or cross-site tracking cookies.

Nothing analytical runs until you press "Accept analytics" in the cookie prompt. Choosing "Reject" loads no analytics at all, and the site works exactly the same. You can change your mind any time through "Cookie settings" at the bottom of any page. Our lawful basis for analytics is your consent, which you can withdraw as easily as you gave it.

Changes to this policy

If we change this policy we will update this page and the date at the top. Significant changes will be flagged on the site.