Who we are

Progressive Martial Arts Ltd, (Registered Company No 10846708) is a Martial Arts education company, educating and activating children in schools and activity clubs throughout the UK. 

Our commitment to user privacy and data protection

Progressive Martial Arts Ltd (also referred to as “we”, “us”, “our” in this Privacy Policy) is committed to meeting the highest standards of data protection to provide the best service to our contacts. We will tell our contacts exactly how we will use and store their data, not use it for any purpose other than the ones we have consent for and take all reasonable steps to ensure their data is stored and transferred securely.

Progressive Martial Arts Ltd is committed to respecting the personal data you supply us with. The details we store enable us to personalise the service we provide and, with your consent, to keep you updated with details of courses, camps and services that may be of interest to you.

With your consent, we may contact you by post, telephone or email. 

You have the right to opt out of receiving promotions from us. This can be done by emailing us at gdpr.progressive.bmaba@gmail.com. 

If you think any information we hold about you is incorrect you should notify the Data Protection Officer (Mr S.Harvey via our GDPR email address). Any information which is wrong will be corrected within a few days. Progressive Martial Arts Ltd strives to protection the security of information which you have provided and will use all appropriate security measures to safeguard such data.

Relevant legislation

We process all personal data, including that collected, in accordance with EU General Data Protection Regulation 2018 (GDPR), which governs data protection and user privacy standards throughout the European Union.

GDPR outlines how organisations must collect, handle and store personal information. To comply with the law, personal information must be collected and used fairly, stored safely and not disclosed to any unauthorised parties unlawfully. We must also ensure that your information is protected against accidental loss.

Users who entrust their personal data to companies like Progressive Martial Arts Ltd have the following rights under GDPR:

• The right to be forgotten (you can request for your data to be deleted)
• The right to see all the data we hold on you (by submitting a Subject Access Request)
• The right to data portability (if you ask to see all your data, we’ll give it to you in a commonly used format, like a pdf)
• The right to correct inaccurate information we hold on you
• The right to opt-out of marketing communications as easily as you opted in
• The right to restrict or object to processing (although we may still need to hold on to your data, for example to fulfil a contract)
• The right to complain (this would be to a supervisory authority responsible for data protection)

Given the stringent nature of this regulation, our processing will also be compliant with other international data protection and user privacy legislation. If you are unsure whether our processing meets your country’s data protection and user privacy legislation, please contact our data protection officer for clarification.

Personal information that our website collects and why we collect it

When visiting www.progressivebmaba.co.uk, you will be asked to consent to our use of cookies. Cookies are simple text files that a site saves to your computer or mobile device using your website browser. Only that server will be able to retrieve or read the contents of that cookie and each cookie is unique to your web browser. Cookies are either set by the website you are visiting, in which case they are referred to as ‘first-party cookies’ or are ‘third-party cookies’ set by other websites and services that run content on the page you are viewing.

To make full use of the features on the progressivebmaba.co.uk site your computer or mobile device MAY need to accept cookies.

Don’t worry – we don’t use cookies to store sensitive information, such as your name, address or payment details. They simply allow us to provide you with personalised features to make your visit to our website as smooth and relevant to you as possible. This can include remembering that you’ve visited our website before to auto-fill forms or improving your user experience by letting you navigate between pages more quickly and easily.

We may process this data to analyse how customers use our website. The legal basis of this processing is the cookie consent visitors give when visiting the website.

But some people dislike the idea of a website accessing and storing their data. And if that’s the case, you can accept or decline cookies by modifying the settings in your browser at any time. The ‘help’ function within your browser should tell you how, as will the ‘enabling/disabling cookies’ page on this site. However, you may not be able to use all the interactive features of our site if the cookies are disabled.

As with most websites, we use Google Analytics to measure how visitors move through and engage with the website. We use this data to improve our services, for example by measuring which pages people visit before making a purchase and ensuring those pages are optimised to make relevant information easy to find. To opt out of google analytics please click here: https://tools.google.com/dlpage/gaoptout

Google Analytics records information such as your location, and the device, browser and operating system you are using to view the website (“usage data”). None of this information can be used to identify you. Google Analytics records – but does not grant us access – to your computer’s IP address. For this reason, we treat Google as a third-party data processor.

We use this data to improve our services, for example by measuring which pages people visit before making a purchase and ensuring those pages are optimised to make relevant information easy to find. The legal basis for this processing is the implied cookie consent you give us when you visit our website.

Disabling cookies on your internet browser will stop Google Analytics from tracking any aspect of your journey through our website.

Contact forms and email links

Data provided via the registration forms etc, are securely held and stored solely by us on Dropbox, who are completely GDPR Compliant. Please see their white paper with details of their privacy policy here: https://assets.dropbox.com/www/en-us/security/privacy_data_protection_whitepaper.pdf and their Privacy Policy Document here: https://www.dropbox.com/en_GB/privacy . All forms are sent through our Gmail accounts, so please find the Google Privacy Document here: https://policies.google.com/privacy  

Parental Data (once you are a Progressive Martial Arts Ltd customer)

What information we will hold on you

When you sign your child up for a Progressive Martial Arts Ltd course, we collect the following information from you: name, relation to child, email address, phone number, home address, and payment details

How we will use it

We collect parent’s names, email addresses, phone numbers, home addresses, and financial info for billing purposes, and to send you information relating to your booking (e.g. if your child needs to bring a certain item of clothing, or if there has been a change of timing or location).

If you opt-in to receiving emails, we will send you details regarding your child’s booking.

Our justification for holding this data

We have a contractual need to keep information relating to billing, and we have informed consent from you to send you marketing information. We may also need to get in touch with you in the event of an emergency relating to your child.

With whom we may share your data

We will only share your information with those parties who may need to see this, for example members of staff to process your child’s membership. The British Martial Arts and Boxing Association may need to know some data in he future, if you sign up for their insurance packages, but we will ask for your consent at the time.

How long we’ll keep your data

We reserve the right to delete customer’s marketing data from our system if you no longer fulfil our sales criteria – i.e. if you have not made a purchase from us for the past two years, have not opened the last 11 of our emails, or if the children you are booking courses for are now older than the age range we deliver to (4-12 years old).

Information about where a contact has come from, what their email preferences are and when this information was given will all be stored within the user’s record on Dropbox.

If parents want to withdraw consent for marketing, they can update their communication preferences by emailing us. 

Children’s Data

What information we will hold on your child

When you sign your child up for a Progressive course, we collect the following information from you about your child: name, DOB, gender, school, a record of their performance in Progressive courses and medical information. During Progressive courses, we will also need to record attendance.

How we will use it

We collect names, DOBs, gender, school name and a record of their attainment against National Curriculum standards on Progressive programmes for monitoring and reporting purposes. This means we can see how many children we have activated, in which regions, and what the overall impact on their attainment and health has been.

We have a safety need to record your child’s attendance in our courses by taking registers, and keeping a record of their medical information in case of an emergency during a Progressive session.

Our justification for holding this data

We ask for your consent when you sign your child up to a Progressive course to hold their name, DOB, gender, school name and a record of their performance on Progressive courses and also their medical history.

We also have a contractual need to hold some of this information, like their name, school name and attainment. Keeping a record of their attendance and medical information is known as a ‘vital interest’ justification, as we need to know this to safeguard your child and is also required to comply with our legal obligations.

Who we share your data with

See Section 5 for information about where your data is stored in relation to servers, and web-based marketing systems we use to deliver emails.

We occasionally have to share data with partners such as the British Martial Arts and Boxing Association who are helping deliver world class education to your children. We’ll always tell you before sharing your child’s data with a new third-party, or anonymise the data so it can’t be linked to your child.

How long we’ll keep your data

We will retain data during the life of the relationship with the customer and then for three years thereafter. Data referring to your child will be stripped back to non-data subject level (i.e. anonymised so it can’t be linked back to you or your child) for the purpose of impact reporting.

School’s data

What information we will hold on schools

We hold email addresses of teachers and headteachers (both named and generic addresses), the postal address & telephone number of school.

How we will use it

We hold contact information (email addresses, postal addresses and phone numbers) for billing purposes.

We also retain email addresses in order to contact schools with marketing information with think will be of interest to them.

Our justification for holding this data

We have a contractual need to retain email addresses, postal addresses and phone numbers in order to contact schools for billing purposes.

We have a legitimate interest to contact schools who have not yet started working with Progressive Martial Arts Ltd.

How long we’ll keep your data

We have the right to retain data which is in the public domain, including school names, addresses, phone numbers and generic email addresses.

We will retain pupil data for the lifetime of the school’s contract with us. If a school ends their contract with us, we will delete all pupil data for that school three months after the end of the current academic year.

How we store your personal information

Where your data is stored

Dropbox is a home for all your most valuable files. To keep your files safe, Dropbox is designed with multiple layers of protection, distributed across a scalable, secure infrastructure. These layers of protection include:

• Dropbox files at rest are encrypted using 256-bit Advanced Encryption Standard (AES)
• Dropbox uses Secure Sockets Layer (SSL)/Transport Layer Security (TLS) to protect data in transit between Dropbox apps and our servers
• SSL/TSL creates a secure tunnel protected by 128-bit or higher Advanced Encryption Standard (AES) encryption
• Dropbox applications and infrastructure are regularly tested for security vulnerabilities and hardened to enhance security and protect against attacks
• Two-step verification is available for an extra layer of security at login
• If you use two-step verification, you can choose to receive security codes by text message or from an authenticator app
• Public files are only viewable by people who have a link to the file(s)

Sharing or transferring your data

Occasionally we will need to share or transfer your data with our trusted third-party data processors or within the Premier group subsidiaries. When we transfer data, we will securely encrypt it before transferring.

We are based in the UK, and under GDPR, we can transfer data between countries which adhere to similarly stringent data protection legislation. This includes the USA, where some Dropbox Services may reside.

Where we use data processors outside of the EU we will only use those who can guarantee the safety of your information. We will transfer your information to our processors using our legitimate business interests.

Automated processing

With your consent, we will carry out a limited number of automated processes relating to your data. This may include automatically sending you information we think will be of interest to you based on what you’ve engaged with in the past or sending you reminder emails if we think you’ve forgotten to complete a purchase. You can opt out of automated processing at any time.

About this website’s server (inc. security info)

The website is hosted on a secure server provided by 1and1. You can read more about 1and1 and their hosting here: https://www.1and1.co.uk

Our third-party data processors

Dropbox – See Previous

Data Breaches

In the event of an unlawful data breach of this website or any of our data held on third-party data processors, we will inform the Information Commissioner’s Officer within 72 hours of the breach, if the fundamental rights and freedoms of those individuals whose data has been compromised is at risk. We will inform the people whose data has been compromised of the breach if the data compromised could have a significant negative impact on the individuals concerned (e.g. if it affects their financial or medical data).

Data Controller

The data controller of this website is Progressive Martial Arts Ltd, company number 10846708.

Registered address & operating office:

13 Cliffe Walk, Sutton, Surrey

SM1 4QU

Data Protection Officer

Our Data Protection Officer’s contact information is:

Steve Harvey
02086426080

gdpr.progressive.bmaba@gmail.com

The Information Commissioners Office (ICO)

If you need to contact the ICO to report any issues with the way we have handled your personal data, you contact them through the following channels:

Call the helpline: 0303 123 1113

Visit their website: https://ico.org.uk/

Start a live chat with them: https://ico.org.uk/global/contact-us/live-chat/

What will happen to your data in the event of an acquisition?

In the event of a takeover or acquisition, the personal data we hold will form part of the assets of the organisation and be taken over by the new company, but only used for the same or similar purpose. In these circumstances, we will write to everyone we hold data on and notify them about the change of ownership.

We will continue to review and update this policy in line with the latest industry guidance. Any changes will be recorded in this section

Changes to our privacy policy

We will continue to review and update this policy in line with the latest industry guidance. Any changes will be recorded in this section